You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@cxf.apache.org by DTaylor <Da...@Merge.com> on 2012/06/27 00:00:43 UTC

The signature is not protected

Good day all,

We finally have interop working with .NET and CXF.  We need to be able to
encrypt our signature due to program requirements, but when we use the
attached WSDL, we get the error "The signature is not protected." and the
service faults out.  With a .NET client, the attached WSDL works correctly.

I have also attached our client configuration.
Any advice would be appreciated.

Thanks,

Dan.
http://cxf.547215.n5.nabble.com/file/n5710349/TheSignatureIsNotProtected.wsdl
TheSignatureIsNotProtected.wsdl 
http://cxf.547215.n5.nabble.com/file/n5710349/clientConfig.xml
clientConfig.xml 


--
View this message in context: http://cxf.547215.n5.nabble.com/The-signature-is-not-protected-tp5710349.html
Sent from the cxf-user mailing list archive at Nabble.com.

Re: The signature is not protected

Posted by Colm O hEigeartaigh <co...@apache.org>.

Hi Dan,

Actually the CXF client request looks fine to me. The second (endorsing)
signature is not encrypted as it is for the .NET message, but I don't see
anything in the policy that requires this. The problem is with the CXF
service, where it checks to see if every signature was encrypted, instead
of just the primary signature. I've merged a fix for this here:

https://issues.apache.org/jira/browse/CXF-4410

Colm.

On Fri, Jul 6, 2012 at 4:14 PM, DTaylor <Da...@merge.com> wrote:

> Hi Colm,
>
> My apologies for the delay but I got pulled off to do some emergency
> firefighting elsewhere.
>
> I've attached the .NET message (NetMessage.xml), the Java message
> (JavaMessage.xml) and the failing stack trace (failingStackTrace.txt).
>
> Thank you again for looking at this,
>
> Dan.
>
> http://cxf.547215.n5.nabble.com/file/n5710684/failingStackTrace.txt
> failingStackTrace.txt
> http://cxf.547215.n5.nabble.com/file/n5710684/JavaMessage.xml
> JavaMessage.xml
> http://cxf.547215.n5.nabble.com/file/n5710684/NetMessage.xmlNetMessage.xml
>
>
> --
> View this message in context:
> http://cxf.547215.n5.nabble.com/The-signature-is-not-protected-tp5710349p5710684.html
> Sent from the cxf-user mailing list archive at Nabble.com.
>

-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: The signature is not protected

Posted by DTaylor <Da...@Merge.com>.

Hi Colm,

My apologies for the delay but I got pulled off to do some emergency
firefighting elsewhere.

I've attached the .NET message (NetMessage.xml), the Java message
(JavaMessage.xml) and the failing stack trace (failingStackTrace.txt).

Thank you again for looking at this,

Dan.

http://cxf.547215.n5.nabble.com/file/n5710684/failingStackTrace.txt
failingStackTrace.txt 
http://cxf.547215.n5.nabble.com/file/n5710684/JavaMessage.xml
JavaMessage.xml 
http://cxf.547215.n5.nabble.com/file/n5710684/NetMessage.xml NetMessage.xml 


--
View this message in context: http://cxf.547215.n5.nabble.com/The-signature-is-not-protected-tp5710349p5710684.html
Sent from the cxf-user mailing list archive at Nabble.com.

Re: The signature is not protected

Posted by Colm O hEigeartaigh <co...@apache.org>.

So with a .NET client to CXF service it works fine, but not with a CXF
client to CXF service? Could you attach the failing stacktrace, and also a
message that the .NET client sends and a message the CXF client sends?

Colm.

On Tue, Jun 26, 2012 at 11:00 PM, DTaylor <Da...@merge.com> wrote:

> Good day all,
>
> We finally have interop working with .NET and CXF.  We need to be able to
> encrypt our signature due to program requirements, but when we use the
> attached WSDL, we get the error "The signature is not protected." and the
> service faults out.  With a .NET client, the attached WSDL works correctly.
>
> I have also attached our client configuration.
> Any advice would be appreciated.
>
> Thanks,
>
> Dan.
>
> http://cxf.547215.n5.nabble.com/file/n5710349/TheSignatureIsNotProtected.wsdl
> TheSignatureIsNotProtected.wsdl
> http://cxf.547215.n5.nabble.com/file/n5710349/clientConfig.xml
> clientConfig.xml
>
>
> --
> View this message in context:
> http://cxf.547215.n5.nabble.com/The-signature-is-not-protected-tp5710349.html
> Sent from the cxf-user mailing list archive at Nabble.com.
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com