You are viewing a plain text version of this content. The canonical link for it is here.
Posted to fx-dev@ws.apache.org by "Jara Cesnek (JIRA)" <ji...@apache.org> on 2006/12/14 13:53:21 UTC
[jira] Created: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
------------------------------------------------
Key: WSS-64
URL: http://issues.apache.org/jira/browse/WSS-64
Project: WSS4J
Issue Type: Bug
Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
Reporter: Jara Cesnek
Assigned To: Davanum Srinivas
USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
USERNAME_TOKEN PW_TEXT work fine.
<wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Updated: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Davanum Srinivas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/WSS-64?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Davanum Srinivas updated WSS-64:
--------------------------------
Assignee: (was: Davanum Srinivas)
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: https://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Commented: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Dittmann, Werner (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-64?page=comments#action_12458485 ]
Dittmann, Werner commented on WSS-64:
-------------------------------------
Just a hint: WSS4J uses the millisecond option in the timestamps,
(see the "created" elemelent. AFAIK .Net does not like that. There
is an option in WSS4J where you can switch off the millisecond
feature (haven't access to docs/source rigth now, pls have a look)
Regards,
Werner
1-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken > wsu:Id="UsernameToken-20564850"
1-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.x
sd"><wsse:Username xmlns:wsse="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
1-wss-wssecurity-secext-1.0.xsd">> UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce
A==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.x
sd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></> wsse:Security>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: http://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
> Assigned To: Davanum Srinivas
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Closed: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/WSS-64?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh closed WSS-64.
----------------------------------
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: https://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Commented: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Dittmann, Werner (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-64?page=comments#action_12458485 ]
Dittmann, Werner commented on WSS-64:
-------------------------------------
Just a hint: WSS4J uses the millisecond option in the timestamps,
(see the "created" elemelent. AFAIK .Net does not like that. There
is an option in WSS4J where you can switch off the millisecond
feature (haven't access to docs/source rigth now, pls have a look)
Regards,
Werner
1-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken > wsu:Id="UsernameToken-20564850"
1-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.x
sd"><wsse:Username xmlns:wsse="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
1-wss-wssecurity-secext-1.0.xsd">> UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce
A==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.x
sd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></> wsse:Security>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: http://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
> Assigned To: Davanum Srinivas
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
AW: [jira] Created: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
Posted by "Dittmann, Werner" <we...@siemens.com>.
Just a hint: WSS4J uses the millisecond option in the timestamps,
(see the "created" elemelent. AFAIK .Net does not like that. There
is an option in WSS4J where you can switch off the millisecond
feature (haven't access to docs/source rigth now, pls have a look)
Regards,
Werner
> -----Ursprüngliche Nachricht-----
> Von: Jara Cesnek (JIRA) [mailto:jira@apache.org]
> Gesendet: Donnerstag, 14. Dezember 2006 13:53
> An: wss4j-dev@ws.apache.org
> Betreff: [jira] Created: (WSS-64) USERNAME_TOKEN PW_DIGEST
> dont work with .NET 2.0
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: http://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0,
> xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
> Assigned To: Davanum Srinivas
>
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
>
>
> <wsse:Security soap:mustUnderstand="true"
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-20040
1-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken > wsu:Id="UsernameToken-20564850"
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-20040
1-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.x
sd"><wsse:Username xmlns:wsse="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
> d">xxx</wsse:Username><wsse:Password
> Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
> username-token-profile-1.0#PasswordDigest"
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-20040
1-wss-wssecurity-secext-1.0.xsd">> UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eo
A==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.x
sd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></> wsse:Security>
>
>
> 1) Same .NET header have probably diferent hash value(algo?,
> locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and
> rest of XML is perfectly readable and small in size.
>
>
> --
> This message is automatically generated by JIRA.
> -
> If you think it was sent incorrectly contact one of the
> administrators:
> http://issues.apache.org/jira/secure/Administrators.jspa
> -
> For more information on JIRA, see:
> http://www.atlassian.com/software/jira
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: wss4j-dev-help@ws.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Commented: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Ruchith Udayanga Fernando (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-64?page=comments#action_12458484 ]
Ruchith Udayanga Fernando commented on WSS-64:
----------------------------------------------
Did u try :
<parameter name="precisionInMilliseconds" value="false" />
Thanks,
Ruchith
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: http://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
> Assigned To: Davanum Srinivas
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Commented: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Ruchith Udayanga Fernando (JIRA)" <ji...@apache.org>.
[ http://issues.apache.org/jira/browse/WSS-64?page=comments#action_12458484 ]
Ruchith Udayanga Fernando commented on WSS-64:
----------------------------------------------
Did u try :
<parameter name="precisionInMilliseconds" value="false" />
Thanks,
Ruchith
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: http://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
> Assigned To: Davanum Srinivas
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Commented: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/WSS-64?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12588531#action_12588531 ]
Colm O hEigeartaigh commented on WSS-64:
----------------------------------------
Can you check this again? Some fixes have gone in on using Password Digest.
Alternatively, could you attach the security header that .Net 2.0 generates and also that WSS4J generates?
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: https://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Commented: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Jara Cesnek (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/WSS-64?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12634505#action_12634505 ]
Jara Cesnek commented on WSS-64:
--------------------------------
Sorry, I cant check it now. It is used only in production envinroment with PW_TEXT and everyone is happy.
But in 2006 it was well-known problem.
You can resolve this as invalid.
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: https://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
AW: [jira] Created: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
Posted by "Dittmann, Werner" <we...@siemens.com>.
Just a hint: WSS4J uses the millisecond option in the timestamps,
(see the "created" elemelent. AFAIK .Net does not like that. There
is an option in WSS4J where you can switch off the millisecond
feature (haven't access to docs/source rigth now, pls have a look)
Regards,
Werner
> -----Ursprüngliche Nachricht-----
> Von: Jara Cesnek (JIRA) [mailto:jira@apache.org]
> Gesendet: Donnerstag, 14. Dezember 2006 13:53
> An: wss4j-dev@ws.apache.org
> Betreff: [jira] Created: (WSS-64) USERNAME_TOKEN PW_DIGEST
> dont work with .NET 2.0
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: http://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0,
> xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
> Assigned To: Davanum Srinivas
>
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
>
>
> <wsse:Security soap:mustUnderstand="true"
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-20040
1-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken > wsu:Id="UsernameToken-20564850"
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-20040
1-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.x
sd"><wsse:Username xmlns:wsse="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
> d">xxx</wsse:Username><wsse:Password
> Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-
> username-token-profile-1.0#PasswordDigest"
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-20040
1-wss-wssecurity-secext-1.0.xsd">> UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eo
A==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-> open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.x
sd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></> wsse:Security>
>
>
> 1) Same .NET header have probably diferent hash value(algo?,
> locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and
> rest of XML is perfectly readable and small in size.
>
>
> --
> This message is automatically generated by JIRA.
> -
> If you think it was sent incorrectly contact one of the
> administrators:
> http://issues.apache.org/jira/secure/Administrators.jspa
> -
> For more information on JIRA, see:
> http://www.atlassian.com/software/jira
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: wss4j-dev-help@ws.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Resolved: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/WSS-64?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh resolved WSS-64.
------------------------------------
Resolution: Invalid
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: https://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org
[jira] Commented: (WSS-64) USERNAME_TOKEN PW_DIGEST dont work with
.NET 2.0
Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/WSS-64?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12633726#action_12633726 ]
Colm O hEigeartaigh commented on WSS-64:
----------------------------------------
I'm going to mark this issue invalid if there are no objections. The issue is almost two years old, and we still have no test-case or any indication there's a bug in WSS4J.
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0
> ------------------------------------------------
>
> Key: WSS-64
> URL: https://issues.apache.org/jira/browse/WSS-64
> Project: WSS4J
> Issue Type: Bug
> Environment: jdk 1.5, wss4j-1.5.0.jar, xalan 2.7.0, xmlsec-1.3.0.jar, czech locale, timezone GMT+1
> Reporter: Jara Cesnek
>
> USERNAME_TOKEN PW_DIGEST dont work with .NET 2.0.
> USERNAME_TOKEN PW_TEXT work fine.
> <wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:UsernameToken wsu:Id="UsernameToken-20564850" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">xxx</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">UrpQqQY/qXdGar7TKe5oUOLLzOk=</wsse:Password><wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oas
> is-200401-wss-wssecurity-secext-1.0.xsd">hS6E+nb41TobI66FPB/eoA==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2006-12-05T11:30:47.595Z</wsu:Created></wsse:UsernameToken></wsse:Security>
> 1) Same .NET header have probably diferent hash value(algo?, locale?, timezone ?).
> 2) Same .NET header have all namespaces in header tag and rest of XML is perfectly readable and small in size.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org