ws-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jeremy Tadman (JIRA)" <j...@apache.org>
Subject [jira] [Issue Comment Edited] (WSS-273) org.apache.ws.security.transform.STRTransform causes ClassCastException when wss4j is running on IBM 1.6 JVM
Date Mon, 02 May 2011 02:44:03 GMT

    [ https://issues.apache.org/jira/browse/WSS-273?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13027527#comment-13027527
] 

Jeremy Tadman edited comment on WSS-273 at 5/2/11 2:43 AM:
-----------------------------------------------------------

Pär-Johan: Are you signing a SAML token or validating an already signed token? That crypto
provider configuration doesn't seem to work for me (I'm generating a token) :(. 

I get 
[5/2/11 11:45:25:667 EST] 00000017 SystemErr     R org.apache.ws.security.WSSecurityException:
Signature creation failed (Cannot setup signature data structure); nested exception is: 
	java.lang.ClassCastException: org.jcp.xml.dsig.internal.dom.DOMExcC14NMethod incompatible
with javax.xml.crypto.dsig.CanonicalizationMethod
[5/2/11 11:45:25:667 EST] 00000017 SystemErr     R 	at org.apache.ws.security.saml.WSSecSignatureSAML.prepare(WSSecSignatureSAML.java:322)
.... Pages of stuff from spring...
[5/2/11 12:38:15:191 EST] 00000017 SystemErr     R Caused by: java.lang.ClassCastException:
org.jcp.xml.dsig.internal.dom.DOMExcC14NMethod incompatible with javax.xml.crypto.dsig.CanonicalizationMethod
[5/2/11 12:38:15:191 EST] 00000017 SystemErr     R 	at com.ibm.xml.crypto.dsig.dom.FactoryImpl.newCanonicalizationMethod(FactoryImpl.java:197)
[5/2/11 12:38:15:191 EST] 00000017 SystemErr     R 	at org.apache.ws.security.saml.WSSecSignatureSAML.prepare(WSSecSignatureSAML.java:319)
[5/2/11 12:38:15:191 EST] 00000017 SystemErr     R 	... 65 more


This does appear to be an improvement in the situation (The IBM provider isn't being used),
but it still isn't quite there yet.

      was (Author: jtadman):
    Pär-Johan: Are you signing a SAML token or validating an already signed token? That crypto
provider configuration doesn't seem to work for me (I'm generating a token) :(. 

I get 
[5/2/11 11:45:25:667 EST] 00000017 SystemErr     R org.apache.ws.security.WSSecurityException:
Signature creation failed (Cannot setup signature data structure); nested exception is: 
	java.lang.ClassCastException: org.jcp.xml.dsig.internal.dom.DOMExcC14NMethod incompatible
with javax.xml.crypto.dsig.CanonicalizationMethod
[5/2/11 11:45:25:667 EST] 00000017 SystemErr     R 	at org.apache.ws.security.saml.WSSecSignatureSAML.prepare(WSSecSignatureSAML.java:322)
.... Pages of stuff from spring...
[5/2/11 12:38:15:191 EST] 00000017 SystemErr     R Caused by: java.lang.ClassCastException:
org.jcp.xml.dsig.internal.dom.DOMExcC14NMethod incompatible with javax.xml.crypto.dsig.CanonicalizationMethod
[5/2/11 12:38:15:191 EST] 00000017 SystemErr     R 	at com.ibm.xml.crypto.dsig.dom.FactoryImpl.newCanonicalizationMethod(FactoryImpl.java:197)
[5/2/11 12:38:15:191 EST] 00000017 SystemErr     R 	at org.apache.ws.security.saml.WSSecSignatureSAML.prepare(WSSecSignatureSAML.java:319)
[5/2/11 12:38:15:191 EST] 00000017 SystemErr     R 	... 65 more
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:644)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:549)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at javax.servlet.http.HttpServlet.service(HttpServlet.java:718)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at javax.servlet.http.HttpServlet.service(HttpServlet.java:831)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1657)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1597)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:131)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.java:118)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java:52)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:188)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:116)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:83)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:188)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:116)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.filter.WebAppFilterChain._doFilter(WebAppFilterChain.java:77)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:908)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:934)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:502)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:179)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3933)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:276)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:931)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1583)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:186)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:445)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:504)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:301)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:275)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.sendToDiscriminators(NewConnectionInitialReadCallback.java:214)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.complete(NewConnectionInitialReadCallback.java:113)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:165)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1604)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R Caused by: java.lang.ClassCastException:
org.jcp.xml.dsig.internal.dom.DOMExcC14NMethod incompatible with javax.xml.crypto.dsig.CanonicalizationMethod
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at com.ibm.xml.crypto.dsig.dom.FactoryImpl.newCanonicalizationMethod(FactoryImpl.java:197)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	at org.apache.ws.security.saml.WSSecSignatureSAML.prepare(WSSecSignatureSAML.java:319)
[5/2/11 12:38:15:191 EST] 00000018 SystemErr     R 	... 65 more

This does appear to be an improvement in the situation (The IBM provider isn't being used),
but it still isn't quite there yet.
  
> org.apache.ws.security.transform.STRTransform causes ClassCastException when wss4j is
running on IBM 1.6 JVM 
> -------------------------------------------------------------------------------------------------------------
>
>                 Key: WSS-273
>                 URL: https://issues.apache.org/jira/browse/WSS-273
>             Project: WSS4J
>          Issue Type: Bug
>          Components: WSS4J Core
>    Affects Versions: 1.6
>         Environment: Windows XP, IBM 1.6 JVM
>            Reporter: Pär-Johan Lif
>            Assignee: Colm O hEigeartaigh
>
> I have tried to use wss4j1.6 (alpha version) on IBM's 1.6 JVM. It works fine, except
for when we are getting a SOAP-message where an STRTransform is used.
> Then we get the following exception below.  (I should mention that it works on SUN's
1.6 JVM).
> java.lang.ClassCastException: org.apache.ws.security.transform.STRTransform incompatible
with com.ibm.xml.crypto.dsig.dom.transform.TransformBase
> 	at com.ibm.xml.crypto.dsig.dom.Unmarshalling.unmarshalTransform(Unmarshalling.java:446)
> 	at com.ibm.xml.crypto.dsig.dom.Unmarshalling.unmarshalTransforms(Unmarshalling.java:422)
> 	at com.ibm.xml.crypto.dsig.dom.Unmarshalling.unmarshalReference(Unmarshalling.java:358)
> 	at com.ibm.xml.crypto.dsig.dom.Unmarshalling.unmarshalSignedInfo(Unmarshalling.java:272)
> 	at com.ibm.xml.crypto.dsig.dom.Unmarshalling.unmarshalSignature(Unmarshalling.java:196)
> 	at com.ibm.xml.crypto.dsig.dom.Unmarshalling.unmarshal(Unmarshalling.java:96)
> 	at com.ibm.xml.crypto.dsig.dom.FactoryImpl.unmarshalXMLSignature(FactoryImpl.java:217)
> 	at org.apache.ws.security.processor.SignatureProcessor.verifyXMLSignature(SignatureProcessor.java:323)
> 	at org.apache.ws.security.processor.SignatureProcessor.handleToken(SignatureProcessor.java:165)
> 	at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:303)
> 	at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:231)
> 	at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:185)

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org


Mime
View raw message