Return-Path: <issues-return-38081-archive-asf-public=cust-asf.ponee.io@cxf.apache.org>
X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io
Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io
Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183])
	by cust-asf2.ponee.io (Postfix) with ESMTP id B817D2009A8
	for <archive-asf-public-internal@cust-asf2.ponee.io>; Tue, 17 May 2016 16:42:14 +0200 (CEST)
Received: by cust-asf.ponee.io (Postfix)
	id B69711607A8; Tue, 17 May 2016 14:42:14 +0000 (UTC)
Delivered-To: archive-asf-public@cust-asf.ponee.io
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by cust-asf.ponee.io (Postfix) with SMTP id 0F1FE1609F5
	for <archive-asf-public@cust-asf.ponee.io>; Tue, 17 May 2016 16:42:13 +0200 (CEST)
Received: (qmail 11013 invoked by uid 500); 17 May 2016 14:42:13 -0000
Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@cxf.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@cxf.apache.org>
List-Post: <mailto:issues@cxf.apache.org>
List-Id: <issues.cxf.apache.org>
Reply-To: dev@cxf.apache.org
Delivered-To: mailing list issues@cxf.apache.org
Received: (qmail 10694 invoked by uid 99); 17 May 2016 14:42:13 -0000
Received: from arcas.apache.org (HELO arcas) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 17 May 2016 14:42:13 +0000
Received: from arcas.apache.org (localhost [127.0.0.1])
	by arcas (Postfix) with ESMTP id E02A42C1F62
	for <issues@cxf.apache.org>; Tue, 17 May 2016 14:42:12 +0000 (UTC)
Date: Tue, 17 May 2016 14:42:12 +0000 (UTC)
From: "david leruse (JIRA)" <jira@apache.org>
To: issues@cxf.apache.org
Message-ID: <JIRA.12969740.1463212795000.210849.1463496132915@Atlassian.JIRA>
In-Reply-To: <JIRA.12969740.1463212795000@Atlassian.JIRA>
References: <JIRA.12969740.1463212795000@Atlassian.JIRA> <JIRA.12969740.1463212795393@arcas>
Subject: [jira] [Reopened] (CXF-6900) invalid signature in case of soap
 fault
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
archived-at: Tue, 17 May 2016 14:42:14 -0000


     [ https://issues.apache.org/jira/browse/CXF-6900?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

david leruse reopened CXF-6900:
-------------------------------

moved back to the place where it was first 

> invalid signature in case of soap fault
> ---------------------------------------
>
>                 Key: CXF-6900
>                 URL: https://issues.apache.org/jira/browse/CXF-6900
>             Project: CXF
>          Issue Type: Bug
>          Components: WS-* Components
>    Affects Versions: 3.0.3
>         Environment: windows 2008  jdk 1.6.0_45
>            Reporter: david leruse
>            Assignee: Colm O hEigeartaigh
>         Attachments: server7.log
>
>
> Hello,
> Having signature verification problems on the cxf client-side  with a .NET Ws-fed protected webservice, I ask you a little help...
> Here is a summary of the problem :
> Most of the time, communication works well excepted when we got a soap fault message.
> Indeed signature validation works usually well excepted when
> we receive a fault message inside the body of the soap message. Even In this boundary case, signature verification works well excepted for one element, the fault message (see the enclosed server7.log file).             
> After digging a bit, i've found that the calculated digest couldn't be equal to the claimed one because the content of the message given to  the DigesterOutpustrream is not well canonicalized or normalized.
> Partial decrypted msg
> ...
> <s:Body u:Id="_3">
>   <Fault xmlns="http://www.w3.org/2003/05/soap-envelope"><Code><Value>DataNotFoundFault</Value></Code><Reason><Text xml:lang="nl-BE">ContextContactInfo with Id '1' does not exist.</Text></Reason><Detail><DataNotFoundFault xmlns="http://schemas.riziv.fgov.be/contact/2015/08/faults" xmlns:i="http://www.w3.org/2001/XMLSchema-instance"><ErrorCode>ContextContactInfoNotFound</ErrorCode><Message>ContextContactInfo with Id '1' does not exist.</Message></DataNotFoundFault></Detail></Fault>
>  </s:Body>
> ...
> Predigested input :
> <s:Body xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" u:Id="_3"><env:Fault><Code xmlns="http://www.w3.org/2003/05/soap-envelope"><Value>DataNotFoundFault</Value></Code><Reason xmlns="http://www.w3.org/2003/05/soap-envelope"><Text xml:lang="nl-BE">ContextContactInfo with Id '1' does not exist.</Text></Reason><env:Detail><DataNotFoundFault xmlns="http://schemas.riziv.fgov.be/contact/2015/08/faults"><ErrorCode>ContextContactInfoNotFound</ErrorCode><Message>ContextContactInfo with Id '1' does not exist.</Message></DataNotFoundFault></env:Detail></env:Fault></s:Body>
> Could you please check this problem and give me an advice ?
> The library used are :
> cxf 3.0.3
> wss4j 2.0.2
> xmlsec 2.0.2
> on a jdk 1.6.0_45
> Thanks in advance
> David L



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)