Return-Path: 
 <issues-return-36025-apmail-cxf-issues-archive=cxf.apache.org@cxf.apache.org>
X-Original-To: apmail-cxf-issues-archive@www.apache.org
Delivered-To: apmail-cxf-issues-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id BB94618C20
	for <apmail-cxf-issues-archive@www.apache.org>;
 Thu, 22 Oct 2015 12:30:28 +0000 (UTC)
Received: (qmail 4058 invoked by uid 500); 22 Oct 2015 12:30:28 -0000
Delivered-To: apmail-cxf-issues-archive@cxf.apache.org
Received: (qmail 3568 invoked by uid 500); 22 Oct 2015 12:30:28 -0000
Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@cxf.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@cxf.apache.org>
List-Post: <mailto:issues@cxf.apache.org>
List-Id: <issues.cxf.apache.org>
Reply-To: dev@cxf.apache.org
Delivered-To: mailing list issues@cxf.apache.org
Received: (qmail 3266 invoked by uid 99); 22 Oct 2015 12:30:27 -0000
Received: from arcas.apache.org (HELO arcas) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 22 Oct 2015 12:30:27 +0000
Received: from arcas.apache.org (localhost [127.0.0.1])
	by arcas (Postfix) with ESMTP id AA3292C14F3
	for <issues@cxf.apache.org>; Thu, 22 Oct 2015 12:30:27 +0000 (UTC)
Date: Thu, 22 Oct 2015 12:30:27 +0000 (UTC)
From: "Alexandre Meyer (JIRA)" <jira@apache.org>
To: issues@cxf.apache.org
Message-ID: <JIRA.12907065.1445517013000.28642.1445517027693@Atlassian.JIRA>
In-Reply-To: <JIRA.12907065.1445517013000@Atlassian.JIRA>
References: <JIRA.12907065.1445517013000@Atlassian.JIRA>
 <JIRA.12907065.1445517013013@arcas>
Subject: [jira] [Created] (CXF-6652) can't sign SOAP header Signature
 "signature verification failed"
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394

Alexandre Meyer created CXF-6652:
------------------------------------

             Summary: can't sign SOAP header Signature "signature verification failed"
                 Key: CXF-6652
                 URL: https://issues.apache.org/jira/browse/CXF-6652
             Project: CXF
          Issue Type: Bug
          Components: WS-* Components
    Affects Versions: 3.1.3
            Reporter: Alexandre Meyer


When you configure Signature action:

Map<String, Object> outProps = new HashMap<String, Object>();
outProps.put(WSHandlerConstants.ACTION,"Signature Encrypt Timestamp");
...

and SIGNATURE_PARTS

...
outProps.put(WSHandlerConstants.SIGNATURE_PARTS,
	"{Element}{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd}Timestamp; "
	+ "{Element}{http://schemas.xmlsoap.org/soap/envelope/}Body; "
	+ "{Element}{http://schemas.xmlsoap.org/ws/2004/08/addressing}Action; "
	+ "{Element}{http://schemas.xmlsoap.org/ws/2004/08/addressing}To; "
	+ "{Element}{http://schemas.xmlsoap.org/ws/2004/08/addressing}ReplyTo; "
	+ "{Element}{http://schemas.xmlsoap.org/ws/2004/08/addressing}MessageID ");

All works fine but the Signature element does not have any reference.

Result:

<wsu:Timestamp wsu:Id="TS-1">
	<wsu:Created>2015-10-22T11:55:21.937Z</wsu:Created>
	<wsu:Expires>2015-10-22T12:00:21.937Z</wsu:Expires>
</wsu:Timestamp>
<Action ... wsu:Id="id-1">
<MessageID ... wsu:Id="id-2">
<To ... wsu:Id="id-3">
<ReplyTo ... wsu:Id="id-4">
	<Address>http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous</Address>
</ReplyTo>
....
<ds:Signature ... Id="SIG-ed19886d-2f14-4595-a815-8544867deae4">
	<ds:SignedInfo>
		<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
		<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
		<ds:Reference URI="#TS-1">
			<ds:Transforms>
				<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
			</ds:Transforms>
			<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
			<ds:DigestValue>...</ds:DigestValue>
		</ds:Reference>
		<ds:Reference URI="#id-1">
			<ds:Transforms>
				<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
			</ds:Transforms>
			<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
			<ds:DigestValue>...</ds:DigestValue>
		</ds:Reference>
		<ds:Reference URI="#id-2">
			<ds:Transforms>
				<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
			</ds:Transforms>
			<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
			<ds:DigestValue>...</ds:DigestValue>
		</ds:Reference>
		<ds:Reference URI="#id-3">
			<ds:Transforms>
				<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
			</ds:Transforms>
			<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
			<ds:DigestValue>...</ds:DigestValue>
		</ds:Reference>
		<ds:Reference URI="#id-4">
			<ds:Transforms>
				<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
			</ds:Transforms>
			<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
			<ds:DigestValue>...</ds:DigestValue>
		</ds:Reference>
	</ds:SignedInfo>
	<ds:SignatureValue>.......</ds:SignatureValue>
	<ds:KeyInfo Id="KI-...">
		....
	</ds:KeyInfo>
</ds:Signature>

But where is the reference to "SIG-ed19886d-2f14-4595-a815-8544867deae4"?






--
This message was sent by Atlassian JIRA
(v6.3.4#6332)