cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alexis Caruana (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (CXF-7245) Weblogic 10.3.6 + CXF 2.7.12 : The signature or decryption was invalid
Date Thu, 09 Feb 2017 15:05:42 GMT

    [ https://issues.apache.org/jira/browse/CXF-7245?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15859617#comment-15859617
] 

Alexis Caruana edited comment on CXF-7245 at 2/9/17 3:05 PM:
-------------------------------------------------------------

maven dependency tree 

+- junit:junit:jar:3.8.1:test
+- com.sun.xml.ws:jaxws-rt:jar:2.1.3:compile
|  +- javax.xml.ws:jaxws-api:jar:2.1:compile
|  |  \- javax.xml.bind:jaxb-api:jar:2.1:compile
|  +- com.sun.xml.bind:jaxb-impl:jar:2.1.6:compile
|  +- com.sun.xml.messaging.saaj:saaj-impl:jar:1.3:compile
|  |  \- javax.xml.soap:saaj-api:jar:1.3:compile
|  +- com.sun.xml.stream.buffer:streambuffer:jar:0.7:compile
|  |  \- javax.activation:activation:jar:1.1:compile
|  +- com.sun.xml.stream:sjsxp:jar:1.0:compile
|  |  \- javax.xml.stream:stax-api:jar:1.0:compile
|  +- org.jvnet.staxex:stax-ex:jar:1.2:compile
|  +- com.sun.org.apache.xml.internal:resolver:jar:20050927:compile
|  \- org.jvnet:mimepull:jar:1.1:compile
+- javax.jws:jsr181-api:jar:1.0-MR1:compile
+- com.sanofi.emvs:emvs_custom:jar:2.7.12:compile
|  +- org.apache.cxf:cxf-bundle:jar:2.7.12:compile
|  |  +- org.apache.velocity:velocity:jar:1.7:compile
|  |  +- commons-collections:commons-collections:jar:3.2.1:compile
|  |  +- wsdl4j:wsdl4j:jar:1.6.3:compile
|  |  +- com.sun.xml.bind:jaxb-xjc:jar:2.1.13:compile
|  |  +- org.apache.ws.xmlschema:xmlschema-core:jar:2.1.0:compile
|  |  +- antlr:antlr:jar:2.7.7:compile
|  |  +- org.apache.xmlbeans:xmlbeans:jar:2.6.0:compile
|  |  +- xml-resolver:xml-resolver:jar:1.2:compile
|  |  +- org.apache.geronimo.specs:geronimo-jaxws_2.2_spec:jar:1.1:compile
|  |  +- org.eclipse.jetty:jetty-server:jar:8.1.15.v20140411:compile
|  |  +- org.eclipse.jetty:jetty-continuation:jar:8.1.15.v20140411:compile
|  |  +- org.eclipse.jetty:jetty-http:jar:8.1.15.v20140411:compile
|  |  +- org.eclipse.jetty:jetty-io:jar:8.1.15.v20140411:compile
|  |  +- org.eclipse.jetty:jetty-util:jar:8.1.15.v20140411:compile
|  |  +- org.eclipse.jetty:jetty-security:jar:8.1.15.v20140411:compile
|  |  +- org.slf4j:slf4j-api:jar:1.7.7:compile
|  |  +- org.apache.geronimo.specs:geronimo-servlet_3.0_spec:jar:1.0:compile
|  |  +- org.apache.geronimo.specs:geronimo-jms_1.1_spec:jar:1.1.1:compile
|  |  +- org.springframework:spring-jms:jar:3.0.7.RELEASE:compile
|  |  +- aopalliance:aopalliance:jar:1.0:compile
|  |  +- org.springframework:spring-aop:jar:3.0.7.RELEASE:compile
|  |  +- org.springframework:spring-beans:jar:3.0.7.RELEASE:compile
|  |  +- org.springframework:spring-core:jar:3.0.7.RELEASE:compile
|  |  +- org.springframework:spring-expression:jar:3.0.7.RELEASE:compile
|  |  +- org.springframework:spring-asm:jar:3.0.7.RELEASE:compile
|  |  +- org.springframework:spring-tx:jar:3.0.7.RELEASE:compile
|  |  +- commons-lang:commons-lang:jar:2.6:compile
|  |  +- org.apache.httpcomponents:httpcore-nio:jar:4.2.4:compile
|  |  +- org.apache.httpcomponents:httpcore:jar:4.2.4:compile
|  |  +- org.apache.httpcomponents:httpasyncclient:jar:4.0-beta3:compile
|  |  +- org.apache.httpcomponents:httpclient:jar:4.2.5:compile
|  |  +- commons-codec:commons-codec:jar:1.9:compile
|  |  +- org.apache.mina:mina-core:jar:2.0.7:compile
|  |  +- asm:asm:jar:3.3.1:compile
|  |  +- rhino:js:jar:1.7R2:compile
|  |  +- javax.ws.rs:javax.ws.rs-api:jar:2.0-m10:compile
|  |  +- net.oauth.core:oauth-provider:jar:20100527:compile
|  |  +- net.oauth.core:oauth:jar:20100527:compile
|  |  +- net.sf.ehcache:ehcache-core:jar:2.5.1:compile
|  |  +- org.apache.ws.security:wss4j:jar:1.6.16:compile
|  |  +- org.apache.santuario:xmlsec:jar:1.5.7:compile
|  |  +- org.opensaml:opensaml:jar:2.6.1:compile
|  |  +- org.opensaml:openws:jar:1.5.1:compile
|  |  +- org.opensaml:xmltooling:jar:1.4.1:compile
|  |  +- joda-time:joda-time:jar:2.2:compile
|  |  +- xalan:serializer:jar:2.7.1:runtime
|  |  +- commons-logging:commons-logging:jar:1.1.1:compile
|  |  \- org.apache.neethi:neethi:jar:3.0.3:compile
|  +- org.apache.cxf.xjc-utils:cxf-xjc-runtime:jar:2.6.0:compile
|  +- org.springframework:spring-context:jar:3.0.7.RELEASE:compile
|  +- org.springframework:spring-web:jar:3.0.7.RELEASE:compile
|  +- org.apache.geronimo.specs:geronimo-activation_1.1_spec:jar:1.1:compile
|  +- org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:compile
|  \- org.slf4j:slf4j-jdk14:jar:1.7.7:compile
+- org.codehaus.woodstox:woodstox-core-asl:jar:4.4.1:compile
+- org.codehaus.woodstox:stax2-api:jar:3.1.4:compile
+- com.sanofi:Sanofi_F3_Utils:jar:0.0.1-SNAPSHOT:compile
|  \- com.oracle:ojdbc6:jar:11.2.0.3:compile
+- org.apache.logging.log4j:log4j-core:jar:2.6.2:compile
|  \- org.apache.logging.log4j:log4j-api:jar:2.6.2:compile
+- org.apache.geronimo.specs:geronimo-ws-metadata_2.0_spec:jar:1.1.3:compile
+- javax.xml.parsers:jaxp-api:jar:1.4.5:compile
\- xerces:xercesImpl:jar:2.11.0:compile
   \- xml-apis:xml-apis:jar:1.4.01:compile


was (Author: alejacky):
maven dependency tree 

[INFO] +- junit:junit:jar:3.8.1:test
[INFO] +- com.sun.xml.ws:jaxws-rt:jar:2.1.3:compile
[INFO] |  +- javax.xml.ws:jaxws-api:jar:2.1:compile
[INFO] |  |  \- javax.xml.bind:jaxb-api:jar:2.1:compile
[INFO] |  +- com.sun.xml.bind:jaxb-impl:jar:2.1.6:compile
[INFO] |  +- com.sun.xml.messaging.saaj:saaj-impl:jar:1.3:compile
[INFO] |  |  \- javax.xml.soap:saaj-api:jar:1.3:compile
[INFO] |  +- com.sun.xml.stream.buffer:streambuffer:jar:0.7:compile
[INFO] |  |  \- javax.activation:activation:jar:1.1:compile
[INFO] |  +- com.sun.xml.stream:sjsxp:jar:1.0:compile
[INFO] |  +- org.jvnet.staxex:stax-ex:jar:1.2:compile
[INFO] |  +- com.sun.org.apache.xml.internal:resolver:jar:20050927:compile
[INFO] |  \- org.jvnet:mimepull:jar:1.1:compile
[INFO] +- javax.jws:jsr181-api:jar:1.0-MR1:compile
[INFO] +- com.sanofi.emvs:emvs_custom:jar:2.7.12:compile
[INFO] |  +- org.apache.cxf:cxf-bundle:jar:2.7.12:compile
[INFO] |  |  +- org.apache.velocity:velocity:jar:1.7:compile
[INFO] |  |  +- commons-collections:commons-collections:jar:3.2.1:compile
[INFO] |  |  +- wsdl4j:wsdl4j:jar:1.6.3:compile
[INFO] |  |  +- com.sun.xml.bind:jaxb-xjc:jar:2.1.13:compile
[INFO] |  |  +- org.apache.ws.xmlschema:xmlschema-core:jar:2.1.0:compile
[INFO] |  |  +- antlr:antlr:jar:2.7.7:compile
[INFO] |  |  +- org.apache.xmlbeans:xmlbeans:jar:2.6.0:compile
[INFO] |  |  +- xml-resolver:xml-resolver:jar:1.2:compile
[INFO] |  |  +- org.apache.geronimo.specs:geronimo-jaxws_2.2_spec:jar:1.1:compile
[INFO] |  |  +- org.eclipse.jetty:jetty-server:jar:8.1.15.v20140411:compile
[INFO] |  |  +- org.eclipse.jetty:jetty-continuation:jar:8.1.15.v20140411:compile
[INFO] |  |  +- org.eclipse.jetty:jetty-http:jar:8.1.15.v20140411:compile
[INFO] |  |  +- org.eclipse.jetty:jetty-io:jar:8.1.15.v20140411:compile
[INFO] |  |  +- org.eclipse.jetty:jetty-util:jar:8.1.15.v20140411:compile
[INFO] |  |  +- org.eclipse.jetty:jetty-security:jar:8.1.15.v20140411:compile
[INFO] |  |  +- org.slf4j:slf4j-api:jar:1.7.7:compile
[INFO] |  |  +- org.apache.geronimo.specs:geronimo-servlet_3.0_spec:jar:1.0:compile
[INFO] |  |  +- org.apache.geronimo.specs:geronimo-jms_1.1_spec:jar:1.1.1:compile
[INFO] |  |  +- org.springframework:spring-jms:jar:3.0.7.RELEASE:compile
[INFO] |  |  +- aopalliance:aopalliance:jar:1.0:compile
[INFO] |  |  +- org.springframework:spring-aop:jar:3.0.7.RELEASE:compile
[INFO] |  |  +- org.springframework:spring-beans:jar:3.0.7.RELEASE:compile
[INFO] |  |  +- org.springframework:spring-core:jar:3.0.7.RELEASE:compile
[INFO] |  |  +- org.springframework:spring-expression:jar:3.0.7.RELEASE:compile
[INFO] |  |  +- org.springframework:spring-asm:jar:3.0.7.RELEASE:compile
[INFO] |  |  +- org.springframework:spring-tx:jar:3.0.7.RELEASE:compile
[INFO] |  |  +- commons-lang:commons-lang:jar:2.6:compile
[INFO] |  |  +- org.apache.httpcomponents:httpcore-nio:jar:4.2.4:compile
[INFO] |  |  +- org.apache.httpcomponents:httpcore:jar:4.2.4:compile
[INFO] |  |  +- org.apache.httpcomponents:httpasyncclient:jar:4.0-beta3:compile
[INFO] |  |  +- org.apache.httpcomponents:httpclient:jar:4.2.5:compile
[INFO] |  |  +- commons-codec:commons-codec:jar:1.9:compile
[INFO] |  |  +- org.apache.mina:mina-core:jar:2.0.7:compile
[INFO] |  |  +- asm:asm:jar:3.3.1:compile
[INFO] |  |  +- rhino:js:jar:1.7R2:compile
[INFO] |  |  +- javax.ws.rs:javax.ws.rs-api:jar:2.0-m10:compile
[INFO] |  |  +- net.oauth.core:oauth-provider:jar:20100527:compile
[INFO] |  |  +- net.oauth.core:oauth:jar:20100527:compile
[INFO] |  |  +- net.sf.ehcache:ehcache-core:jar:2.5.1:compile
[INFO] |  |  +- org.apache.ws.security:wss4j:jar:1.6.16:compile
[INFO] |  |  +- org.apache.santuario:xmlsec:jar:1.5.7:compile
[INFO] |  |  +- org.opensaml:opensaml:jar:2.6.1:compile
[INFO] |  |  +- org.opensaml:openws:jar:1.5.1:compile
[INFO] |  |  +- org.opensaml:xmltooling:jar:1.4.1:compile
[INFO] |  |  +- joda-time:joda-time:jar:2.2:compile
[INFO] |  |  +- xalan:serializer:jar:2.7.1:runtime
[INFO] |  |  +- commons-logging:commons-logging:jar:1.1.1:compile
[INFO] |  |  \- org.apache.neethi:neethi:jar:3.0.3:compile
[INFO] |  +- org.apache.cxf.xjc-utils:cxf-xjc-runtime:jar:2.6.0:compile
[INFO] |  +- org.springframework:spring-context:jar:3.0.7.RELEASE:compile
[INFO] |  +- org.springframework:spring-web:jar:3.0.7.RELEASE:compile
[INFO] |  +- org.apache.geronimo.specs:geronimo-activation_1.1_spec:jar:1.1:compile
[INFO] |  +- org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:compile
[INFO] |  \- org.slf4j:slf4j-jdk14:jar:1.7.7:compile
[INFO] +- org.codehaus.woodstox:woodstox-core-asl:jar:4.4.1:compile
[INFO] |  \- javax.xml.stream:stax-api:jar:1.0-2:compile
[INFO] +- org.codehaus.woodstox:stax2-api:jar:3.1.4:compile
[INFO] +- com.sanofi:Sanofi_F3_Utils:jar:0.0.1-SNAPSHOT:compile
[INFO] |  \- com.oracle:ojdbc6:jar:11.2.0.3:compile
[INFO] +- org.apache.logging.log4j:log4j-core:jar:2.6.2:compile
[INFO] |  \- org.apache.logging.log4j:log4j-api:jar:2.6.2:compile
[INFO] +- org.apache.geronimo.specs:geronimo-ws-metadata_2.0_spec:jar:1.1.3:compile
[INFO] +- javax.xml.parsers:jaxp-api:jar:1.4.5:compile
[INFO] \- xerces:xercesImpl:jar:2.11.0:compile
[INFO]    \- xml-apis:xml-apis:jar:1.4.01:compile

> Weblogic 10.3.6 + CXF 2.7.12 : The signature or decryption was invalid
> ----------------------------------------------------------------------
>
>                 Key: CXF-7245
>                 URL: https://issues.apache.org/jira/browse/CXF-7245
>             Project: CXF
>          Issue Type: Bug
>    Affects Versions: 2.7.12
>            Reporter: Alexis Caruana
>         Attachments: message_after_SAAJInterceptor_handlemessage.xml, message_before_SAAJInterceptor_handlemessage.xml,
pom_xml_dependencies.xml, spring_configuration.xml
>
>
> Using CXF 2.7.12 on weblogic server 10.3.6, i'm facing issue : 
> org.apache.ws.security.WSSecurityException: The signature or decryption was invalid
> One reference failed : reference with ID 2, the body reference 
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_2 check: false
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_3 check: true
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_4 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_5 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_6 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #uuid-5b84c5c2-a9de-48ad-a136-59b43f43bf9f-2288 check: true
> It works with metro implementation.
> Below logs :
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - signatureOK false
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - XML Signature verification has failed
> Verify XML Signature
> Signature Validation check: true
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_2 check: false
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_3 check: true
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_4 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_5 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_6 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default
(self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference




--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message