Return-Path: Delivered-To: apmail-ws-axis-user-archive@www.apache.org Received: (qmail 84224 invoked from network); 11 Feb 2005 13:09:48 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 11 Feb 2005 13:09:48 -0000 Received: (qmail 62295 invoked by uid 500); 11 Feb 2005 13:09:40 -0000 Delivered-To: apmail-ws-axis-user-archive@ws.apache.org Received: (qmail 62273 invoked by uid 500); 11 Feb 2005 13:09:39 -0000 Mailing-List: contact axis-user-help@ws.apache.org; run by ezmlm Precedence: bulk Reply-To: axis-user@ws.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list axis-user@ws.apache.org Received: (qmail 62259 invoked by uid 99); 11 Feb 2005 13:09:39 -0000 X-ASF-Spam-Status: No, hits=1.0 required=10.0 tests=RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS,TO_ADDRESS_EQ_REAL,WEIRD_PORT X-Spam-Check-By: apache.org Received-SPF: pass (hermes.apache.org: domain of babloosony@gmail.com designates 64.233.170.207 as permitted sender) Received: from rproxy.gmail.com (HELO rproxy.gmail.com) (64.233.170.207) by apache.org (qpsmtpd/0.28) with ESMTP; Fri, 11 Feb 2005 05:09:38 -0800 Received: by rproxy.gmail.com with SMTP id z35so228855rne for ; Fri, 11 Feb 2005 05:09:36 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding; b=hpr+khU1aP8HPd0glyuMhWN0RUk3M72eTgsiK59dV6J6mmQhIKfv8dYJBGVEZcMXWxFBjXpjwONysqJCN66q+wN1QxYLZGhWqOkfD4/XTmnbMEq8hbpRzZqFN7uOKS5METIz+U9sOmqNlc1ABWXRm+3O38678/4Ft6C3OpSjTFo= Received: by 10.38.92.38 with SMTP id p38mr188877rnb; Fri, 11 Feb 2005 05:09:35 -0800 (PST) Received: by 10.38.82.50 with HTTP; Fri, 11 Feb 2005 05:09:35 -0800 (PST) Message-ID: Date: Fri, 11 Feb 2005 18:39:35 +0530 From: babloosony Reply-To: babloosony To: "axis-user@ws.apache.org" Subject: Newbie doubts on XML Signature Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Hi All, There is a third party web service which exposed its wsdl to clients and I used AXIS 1.2 RC2 to create stubs and have written a web service client program to access the web service. However may the server is expecting a signed xml signature in the soap message to verify them I am not able to successfully get a soap response from the wsdl and instead I get below exception. Exception from server ---------------------------------------------------------------------------- [java] AxisFault [java] faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server [java] faultSubcode: [java] faultString: System.Web.Services.Protocols.SoapException: Server was unable to process request. --- System.Exception: Signature Verification Failed. [java] faultActor: [java] faultNode: [java] faultDetail: [java] {http://xml.apache.org/axis/}stackTrace: AxisFault [java] faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server [java] faultSubcode: [java] faultString: System.Web.Services.Protocols.SoapException: Server was unable to process request. --- System.Exception: Signature Verification Failed. [java] faultActor: [java] faultNode: [java] faultDetail: [java] System.Web.Services.Protocols.SoapException: Server was unable to process request. --- System.Exception: Signature Verification Failed. [java] at org.apache.axis.message.SOAPFaultBuilder.createFault(SOAPFaultBuilder.java:260) [java] at org.apache.axis.message.SOAPFaultBuilder.endElement(SOAPFaultBuilder.java:169) [java] at org.apache.axis.encoding.DeserializationContextImpl.endElement(DeserializationContextImpl.java:1015) [java] at org.apache.crimson.parser.Parser2.maybeElement(Parser2.java:1712) [java] at org.apache.crimson.parser.Parser2.content(Parser2.java:1963) [java] at org.apache.crimson.parser.Parser2.maybeElement(Parser2.java:1691) [java] at org.apache.crimson.parser.Parser2.content(Parser2.java:1963) [java] at org.apache.crimson.parser.Parser2.maybeElement(Parser2.java:1691) [java] at org.apache.crimson.parser.Parser2.parseInternal(Parser2.java:667) [java] at org.apache.crimson.parser.Parser2.parse(Parser2.java:337) [java] at org.apache.crimson.parser.XMLReaderImpl.parse(XMLReaderImpl.java:448) [java] at javax.xml.parsers.SAXParser.parse(SAXParser.java:345) [java] at org.apache.axis.encoding.DeserializationContextImpl.parse(DeserializationContextImpl.java:242) [java] at org.apache.axis.SOAPPart.getAsSOAPEnvelope(SOAPPart.java:538) [java] at org.apache.axis.Message.getSOAPEnvelope(Message.java:376) [java] at org.apache.axis.client.Call.invokeEngine(Call.java:2583) [java] at org.apache.axis.client.Call.invoke(Call.java:2553) [java] at org.apache.axis.client.Call.invoke(Call.java:2248) [java] at org.apache.axis.client.Call.invoke(Call.java:2171) [java] at org.apache.axis.client.Call.invoke(Call.java:1691) [java] at www.americanexpress.com.schemas.serviceportal.demands.v10.webservices.DOC_CardsOwnedWSSoapStub.getCardsOwned(DOC_CardsOwnedWSSoapStub.java:154) [java] at serviceportal.demands.DOC_CardsOwnedWS.query(DOC_CardsOwnedWS.java:46) [java] at serviceportal.demands.DOC_CardsOwnedWS.main(DOC_CardsOwnedWS.java:62) [java] System.Web.Services.Protocols.SoapException: Server was unable to process request. --- System.Exception: Signature Verification Failed. [java] at org.apache.axis.message.SOAPFaultBuilder.createFault(SOAPFaultBuilder.java:260) [java] at org.apache.axis.message.SOAPFaultBuilder.endElement(SOAPFaultBuilder.java:169) [java] at org.apache.axis.encoding.DeserializationContextImpl.endElement(DeserializationContextImpl.java:1015) [java] at org.apache.crimson.parser.Parser2.maybeElement(Parser2.java:1712) [java] at org.apache.crimson.parser.Parser2.content(Parser2.java:1963) [java] at org.apache.crimson.parser.Parser2.maybeElement(Parser2.java:1691) [java] at org.apache.crimson.parser.Parser2.content(Parser2.java:1963) [java] at org.apache.crimson.parser.Parser2.maybeElement(Parser2.java:1691) [java] at org.apache.crimson.parser.Parser2.parseInternal(Parser2.java:667) [java] at org.apache.crimson.parser.Parser2.parse(Parser2.java:337) [java] at org.apache.crimson.parser.XMLReaderImpl.parse(XMLReaderImpl.java:448) [java] at javax.xml.parsers.SAXParser.parse(SAXParser.java:345) [java] at org.apache.axis.encoding.DeserializationContextImpl.parse(DeserializationContextImpl.java:242) [java] at org.apache.axis.SOAPPart.getAsSOAPEnvelope(SOAPPart.java:538) [java] at org.apache.axis.Message.getSOAPEnvelope(Message.java:376) [java] at org.apache.axis.client.Call.invokeEngine(Call.java:2583) [java] at org.apache.axis.client.Call.invoke(Call.java:2553) [java] at org.apache.axis.client.Call.invoke(Call.java:2248) [java] at org.apache.axis.client.Call.invoke(Call.java:2171) [java] at org.apache.axis.client.Call.invoke(Call.java:1691) [java] at www.americanexpress.com.schemas.serviceportal.demands.v10.webservices.DOC_CardsOwnedWSSoapStub.getCardsOwned(DOC_CardsOwnedWSSoapStub.java:154) [java] at serviceportal.demands.DOC_CardsOwnedWS.query(DOC_CardsOwnedWS.java:46) [java] at serviceportal.demands.DOC_CardsOwnedWS.main(DOC_CardsOwnedWS.java:62) ---------------------------------------------------------------------------- I am not sure what to do at this point. Can I use any certificate and keys and write a handler that signs my soap request message so that the server can verify that message ? Please suggest .... Thanks & Regards, Kumar.