Mailing-List: contact java-dev-help@axis.apache.org; run by ezmlm
Precedence: bulk
Reply-To: java-dev@axis.apache.org
Date: Tue, 13 Jan 2015 15:30:37 +0000 (UTC)
From: "Yacine ouadahi (JIRA)" <jira@apache.org>
To: java-dev@axis.apache.org
Message-ID: <JIRA.12416016.1236098414000.71402.1421163037764@Atlassian.JIRA>
In-Reply-To: <JIRA.12416016.1236098414000@Atlassian.JIRA>
References: <JIRA.12416016.1236098414000@Atlassian.JIRA>
 <JIRA.12416016.1236098414442@arcas>
Subject: [jira] [Issue Comment Deleted] (RAMPART-216) Wrong SignatureMethod
 and DigestMethod generated in request in case of algoritm suite having
 SHA256 hashing algorithm (example: Basic256Sha256)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/RAMPART-216?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Yacine ouadahi updated RAMPART-216:
-----------------------------------
    Comment: was deleted

(was: Hi, no matter what i put in the sp:AlgorithmSuite, the digest algorithm remains the same... (sha1) , could you post your working example ? )

> Wrong SignatureMethod and DigestMethod generated in request in case of algoritm suite having SHA256 hashing algorithm (example: Basic256Sha256)
> -----------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: RAMPART-216
>                 URL: https://issues.apache.org/jira/browse/RAMPART-216
>             Project: Rampart
>          Issue Type: Bug
>          Components: rampart-core, rampart-integration, rampart-policy
>    Affects Versions: 1.3
>         Environment: Windows XP/Vista, Java 1.4.2, Axis 2 1.3, Rampart 1.3
>            Reporter: Heinz Zerbes
>
> My Rampart policy has a algoritm suit = Base256Sha256. In rest it is very simple (I will attach it to this issue).
> I expected to get from this suite a SignedInfo element in request like this:
> 				<ds:SignedInfo>
> 					<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 					<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
> 					<ds:Reference URI="#Id-27120928">
> 						<ds:Transforms>
> 							<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 						</ds:Transforms>
> 						<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
> 						<ds:DigestValue>.....</ds:DigestValue>
> 					</ds:Reference>
> But instead I get the following (always 'sha1'):
> 				<ds:SignedInfo>
> 					<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 					<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
> 					<ds:Reference URI="#Id-27120928">
> 						<ds:Transforms>
> 							<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 						</ds:Transforms>
> 						<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> 						<ds:DigestValue>....</ds:DigestValue>
> 					</ds:Reference>
> It makes no difference what algorithms suit I take. I always get 'sha1'.
> In class org.apache.ws.secpolicy.model.AlgorithmSuite there is only asymmetricSignature = Constants.RSA_SHA1. In Constants.java the same. Thus the getAsymmetricSignature() method always return SHA1.
> Here is my policy:
> <wsdl:definitions xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="TelematikPolicy" targetNamespace="http://ws.test.xy/tel/transport/v1.2">
> 	<wsdl:documentation>
> 	</wsdl:documentation>
> 	<wsp:Policy wsu:Id="TelematicsTransport_Binding_Signed_Policy">
> 		<wsp:ExactlyOne>
> 			<wsp:All>
> 				<sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
> 					<wsp:Policy>
> 						<sp:InitiatorToken>
> 							<wsp:Policy>
> 								<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
> 									<wsp:Policy>
> 										<sp:WssX509V3Token10/>
> 									</wsp:Policy>
> 								</sp:X509Token>
> 							</wsp:Policy>
> 						</sp:InitiatorToken>
> 						<sp:RecipientToken>
> 							<wsp:Policy>
> 								<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
> 									<wsp:Policy>
> 										<sp:WssX509V3Token10/>
> 									</wsp:Policy>
> 								</sp:X509Token>
> 							</wsp:Policy>
> 						</sp:RecipientToken>
> 						<sp:AlgorithmSuite>
> 							<wsp:Policy>
> 								<sp:sp:Basic256Sha256/>
> 							</wsp:Policy>
> 						</sp:AlgorithmSuite>
> 						<sp:Layout>
> 							<wsp:Policy>
> 								<sp:Lax/>
> 							</wsp:Policy>
> 						</sp:Layout>
> 						<sp:IncludeTimestamp/>
> 						<sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
> 							<sp:Body/>
> 						</sp:SignedParts>
> 					</wsp:Policy>
> 				</sp:AsymmetricBinding>
> 				<sp:Wss10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
> 					<wsp:Policy>
> 						<sp:MustSupportRefIssuerSerial/>
> 					</wsp:Policy>
> 				</sp:Wss10>
> 			</wsp:All>
> 		</wsp:ExactlyOne>
> 	</wsp:Policy>
> </wsdl:definitions>
> Is there any workarround for this problem? I would appreciate it very much if you could give me a good hint! It's urgent.
> Thank you a lot!
> Heinz


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org