You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Alexis Caruana (JIRA)" <ji...@apache.org> on 2017/02/09 15:05:42 UTC
[jira] [Comment Edited] (CXF-7245) Weblogic 10.3.6 + CXF 2.7.12 :
The signature or decryption was invalid
[ https://issues.apache.org/jira/browse/CXF-7245?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15859617#comment-15859617 ]
Alexis Caruana edited comment on CXF-7245 at 2/9/17 3:05 PM:
-------------------------------------------------------------
maven dependency tree
+- junit:junit:jar:3.8.1:test
+- com.sun.xml.ws:jaxws-rt:jar:2.1.3:compile
| +- javax.xml.ws:jaxws-api:jar:2.1:compile
| | \- javax.xml.bind:jaxb-api:jar:2.1:compile
| +- com.sun.xml.bind:jaxb-impl:jar:2.1.6:compile
| +- com.sun.xml.messaging.saaj:saaj-impl:jar:1.3:compile
| | \- javax.xml.soap:saaj-api:jar:1.3:compile
| +- com.sun.xml.stream.buffer:streambuffer:jar:0.7:compile
| | \- javax.activation:activation:jar:1.1:compile
| +- com.sun.xml.stream:sjsxp:jar:1.0:compile
| | \- javax.xml.stream:stax-api:jar:1.0:compile
| +- org.jvnet.staxex:stax-ex:jar:1.2:compile
| +- com.sun.org.apache.xml.internal:resolver:jar:20050927:compile
| \- org.jvnet:mimepull:jar:1.1:compile
+- javax.jws:jsr181-api:jar:1.0-MR1:compile
+- com.sanofi.emvs:emvs_custom:jar:2.7.12:compile
| +- org.apache.cxf:cxf-bundle:jar:2.7.12:compile
| | +- org.apache.velocity:velocity:jar:1.7:compile
| | +- commons-collections:commons-collections:jar:3.2.1:compile
| | +- wsdl4j:wsdl4j:jar:1.6.3:compile
| | +- com.sun.xml.bind:jaxb-xjc:jar:2.1.13:compile
| | +- org.apache.ws.xmlschema:xmlschema-core:jar:2.1.0:compile
| | +- antlr:antlr:jar:2.7.7:compile
| | +- org.apache.xmlbeans:xmlbeans:jar:2.6.0:compile
| | +- xml-resolver:xml-resolver:jar:1.2:compile
| | +- org.apache.geronimo.specs:geronimo-jaxws_2.2_spec:jar:1.1:compile
| | +- org.eclipse.jetty:jetty-server:jar:8.1.15.v20140411:compile
| | +- org.eclipse.jetty:jetty-continuation:jar:8.1.15.v20140411:compile
| | +- org.eclipse.jetty:jetty-http:jar:8.1.15.v20140411:compile
| | +- org.eclipse.jetty:jetty-io:jar:8.1.15.v20140411:compile
| | +- org.eclipse.jetty:jetty-util:jar:8.1.15.v20140411:compile
| | +- org.eclipse.jetty:jetty-security:jar:8.1.15.v20140411:compile
| | +- org.slf4j:slf4j-api:jar:1.7.7:compile
| | +- org.apache.geronimo.specs:geronimo-servlet_3.0_spec:jar:1.0:compile
| | +- org.apache.geronimo.specs:geronimo-jms_1.1_spec:jar:1.1.1:compile
| | +- org.springframework:spring-jms:jar:3.0.7.RELEASE:compile
| | +- aopalliance:aopalliance:jar:1.0:compile
| | +- org.springframework:spring-aop:jar:3.0.7.RELEASE:compile
| | +- org.springframework:spring-beans:jar:3.0.7.RELEASE:compile
| | +- org.springframework:spring-core:jar:3.0.7.RELEASE:compile
| | +- org.springframework:spring-expression:jar:3.0.7.RELEASE:compile
| | +- org.springframework:spring-asm:jar:3.0.7.RELEASE:compile
| | +- org.springframework:spring-tx:jar:3.0.7.RELEASE:compile
| | +- commons-lang:commons-lang:jar:2.6:compile
| | +- org.apache.httpcomponents:httpcore-nio:jar:4.2.4:compile
| | +- org.apache.httpcomponents:httpcore:jar:4.2.4:compile
| | +- org.apache.httpcomponents:httpasyncclient:jar:4.0-beta3:compile
| | +- org.apache.httpcomponents:httpclient:jar:4.2.5:compile
| | +- commons-codec:commons-codec:jar:1.9:compile
| | +- org.apache.mina:mina-core:jar:2.0.7:compile
| | +- asm:asm:jar:3.3.1:compile
| | +- rhino:js:jar:1.7R2:compile
| | +- javax.ws.rs:javax.ws.rs-api:jar:2.0-m10:compile
| | +- net.oauth.core:oauth-provider:jar:20100527:compile
| | +- net.oauth.core:oauth:jar:20100527:compile
| | +- net.sf.ehcache:ehcache-core:jar:2.5.1:compile
| | +- org.apache.ws.security:wss4j:jar:1.6.16:compile
| | +- org.apache.santuario:xmlsec:jar:1.5.7:compile
| | +- org.opensaml:opensaml:jar:2.6.1:compile
| | +- org.opensaml:openws:jar:1.5.1:compile
| | +- org.opensaml:xmltooling:jar:1.4.1:compile
| | +- joda-time:joda-time:jar:2.2:compile
| | +- xalan:serializer:jar:2.7.1:runtime
| | +- commons-logging:commons-logging:jar:1.1.1:compile
| | \- org.apache.neethi:neethi:jar:3.0.3:compile
| +- org.apache.cxf.xjc-utils:cxf-xjc-runtime:jar:2.6.0:compile
| +- org.springframework:spring-context:jar:3.0.7.RELEASE:compile
| +- org.springframework:spring-web:jar:3.0.7.RELEASE:compile
| +- org.apache.geronimo.specs:geronimo-activation_1.1_spec:jar:1.1:compile
| +- org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:compile
| \- org.slf4j:slf4j-jdk14:jar:1.7.7:compile
+- org.codehaus.woodstox:woodstox-core-asl:jar:4.4.1:compile
+- org.codehaus.woodstox:stax2-api:jar:3.1.4:compile
+- com.sanofi:Sanofi_F3_Utils:jar:0.0.1-SNAPSHOT:compile
| \- com.oracle:ojdbc6:jar:11.2.0.3:compile
+- org.apache.logging.log4j:log4j-core:jar:2.6.2:compile
| \- org.apache.logging.log4j:log4j-api:jar:2.6.2:compile
+- org.apache.geronimo.specs:geronimo-ws-metadata_2.0_spec:jar:1.1.3:compile
+- javax.xml.parsers:jaxp-api:jar:1.4.5:compile
\- xerces:xercesImpl:jar:2.11.0:compile
\- xml-apis:xml-apis:jar:1.4.01:compile
was (Author: alejacky):
maven dependency tree
[INFO] +- junit:junit:jar:3.8.1:test
[INFO] +- com.sun.xml.ws:jaxws-rt:jar:2.1.3:compile
[INFO] | +- javax.xml.ws:jaxws-api:jar:2.1:compile
[INFO] | | \- javax.xml.bind:jaxb-api:jar:2.1:compile
[INFO] | +- com.sun.xml.bind:jaxb-impl:jar:2.1.6:compile
[INFO] | +- com.sun.xml.messaging.saaj:saaj-impl:jar:1.3:compile
[INFO] | | \- javax.xml.soap:saaj-api:jar:1.3:compile
[INFO] | +- com.sun.xml.stream.buffer:streambuffer:jar:0.7:compile
[INFO] | | \- javax.activation:activation:jar:1.1:compile
[INFO] | +- com.sun.xml.stream:sjsxp:jar:1.0:compile
[INFO] | +- org.jvnet.staxex:stax-ex:jar:1.2:compile
[INFO] | +- com.sun.org.apache.xml.internal:resolver:jar:20050927:compile
[INFO] | \- org.jvnet:mimepull:jar:1.1:compile
[INFO] +- javax.jws:jsr181-api:jar:1.0-MR1:compile
[INFO] +- com.sanofi.emvs:emvs_custom:jar:2.7.12:compile
[INFO] | +- org.apache.cxf:cxf-bundle:jar:2.7.12:compile
[INFO] | | +- org.apache.velocity:velocity:jar:1.7:compile
[INFO] | | +- commons-collections:commons-collections:jar:3.2.1:compile
[INFO] | | +- wsdl4j:wsdl4j:jar:1.6.3:compile
[INFO] | | +- com.sun.xml.bind:jaxb-xjc:jar:2.1.13:compile
[INFO] | | +- org.apache.ws.xmlschema:xmlschema-core:jar:2.1.0:compile
[INFO] | | +- antlr:antlr:jar:2.7.7:compile
[INFO] | | +- org.apache.xmlbeans:xmlbeans:jar:2.6.0:compile
[INFO] | | +- xml-resolver:xml-resolver:jar:1.2:compile
[INFO] | | +- org.apache.geronimo.specs:geronimo-jaxws_2.2_spec:jar:1.1:compile
[INFO] | | +- org.eclipse.jetty:jetty-server:jar:8.1.15.v20140411:compile
[INFO] | | +- org.eclipse.jetty:jetty-continuation:jar:8.1.15.v20140411:compile
[INFO] | | +- org.eclipse.jetty:jetty-http:jar:8.1.15.v20140411:compile
[INFO] | | +- org.eclipse.jetty:jetty-io:jar:8.1.15.v20140411:compile
[INFO] | | +- org.eclipse.jetty:jetty-util:jar:8.1.15.v20140411:compile
[INFO] | | +- org.eclipse.jetty:jetty-security:jar:8.1.15.v20140411:compile
[INFO] | | +- org.slf4j:slf4j-api:jar:1.7.7:compile
[INFO] | | +- org.apache.geronimo.specs:geronimo-servlet_3.0_spec:jar:1.0:compile
[INFO] | | +- org.apache.geronimo.specs:geronimo-jms_1.1_spec:jar:1.1.1:compile
[INFO] | | +- org.springframework:spring-jms:jar:3.0.7.RELEASE:compile
[INFO] | | +- aopalliance:aopalliance:jar:1.0:compile
[INFO] | | +- org.springframework:spring-aop:jar:3.0.7.RELEASE:compile
[INFO] | | +- org.springframework:spring-beans:jar:3.0.7.RELEASE:compile
[INFO] | | +- org.springframework:spring-core:jar:3.0.7.RELEASE:compile
[INFO] | | +- org.springframework:spring-expression:jar:3.0.7.RELEASE:compile
[INFO] | | +- org.springframework:spring-asm:jar:3.0.7.RELEASE:compile
[INFO] | | +- org.springframework:spring-tx:jar:3.0.7.RELEASE:compile
[INFO] | | +- commons-lang:commons-lang:jar:2.6:compile
[INFO] | | +- org.apache.httpcomponents:httpcore-nio:jar:4.2.4:compile
[INFO] | | +- org.apache.httpcomponents:httpcore:jar:4.2.4:compile
[INFO] | | +- org.apache.httpcomponents:httpasyncclient:jar:4.0-beta3:compile
[INFO] | | +- org.apache.httpcomponents:httpclient:jar:4.2.5:compile
[INFO] | | +- commons-codec:commons-codec:jar:1.9:compile
[INFO] | | +- org.apache.mina:mina-core:jar:2.0.7:compile
[INFO] | | +- asm:asm:jar:3.3.1:compile
[INFO] | | +- rhino:js:jar:1.7R2:compile
[INFO] | | +- javax.ws.rs:javax.ws.rs-api:jar:2.0-m10:compile
[INFO] | | +- net.oauth.core:oauth-provider:jar:20100527:compile
[INFO] | | +- net.oauth.core:oauth:jar:20100527:compile
[INFO] | | +- net.sf.ehcache:ehcache-core:jar:2.5.1:compile
[INFO] | | +- org.apache.ws.security:wss4j:jar:1.6.16:compile
[INFO] | | +- org.apache.santuario:xmlsec:jar:1.5.7:compile
[INFO] | | +- org.opensaml:opensaml:jar:2.6.1:compile
[INFO] | | +- org.opensaml:openws:jar:1.5.1:compile
[INFO] | | +- org.opensaml:xmltooling:jar:1.4.1:compile
[INFO] | | +- joda-time:joda-time:jar:2.2:compile
[INFO] | | +- xalan:serializer:jar:2.7.1:runtime
[INFO] | | +- commons-logging:commons-logging:jar:1.1.1:compile
[INFO] | | \- org.apache.neethi:neethi:jar:3.0.3:compile
[INFO] | +- org.apache.cxf.xjc-utils:cxf-xjc-runtime:jar:2.6.0:compile
[INFO] | +- org.springframework:spring-context:jar:3.0.7.RELEASE:compile
[INFO] | +- org.springframework:spring-web:jar:3.0.7.RELEASE:compile
[INFO] | +- org.apache.geronimo.specs:geronimo-activation_1.1_spec:jar:1.1:compile
[INFO] | +- org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:compile
[INFO] | \- org.slf4j:slf4j-jdk14:jar:1.7.7:compile
[INFO] +- org.codehaus.woodstox:woodstox-core-asl:jar:4.4.1:compile
[INFO] | \- javax.xml.stream:stax-api:jar:1.0-2:compile
[INFO] +- org.codehaus.woodstox:stax2-api:jar:3.1.4:compile
[INFO] +- com.sanofi:Sanofi_F3_Utils:jar:0.0.1-SNAPSHOT:compile
[INFO] | \- com.oracle:ojdbc6:jar:11.2.0.3:compile
[INFO] +- org.apache.logging.log4j:log4j-core:jar:2.6.2:compile
[INFO] | \- org.apache.logging.log4j:log4j-api:jar:2.6.2:compile
[INFO] +- org.apache.geronimo.specs:geronimo-ws-metadata_2.0_spec:jar:1.1.3:compile
[INFO] +- javax.xml.parsers:jaxp-api:jar:1.4.5:compile
[INFO] \- xerces:xercesImpl:jar:2.11.0:compile
[INFO] \- xml-apis:xml-apis:jar:1.4.01:compile
> Weblogic 10.3.6 + CXF 2.7.12 : The signature or decryption was invalid
> ----------------------------------------------------------------------
>
> Key: CXF-7245
> URL: https://issues.apache.org/jira/browse/CXF-7245
> Project: CXF
> Issue Type: Bug
> Affects Versions: 2.7.12
> Reporter: Alexis Caruana
> Attachments: message_after_SAAJInterceptor_handlemessage.xml, message_before_SAAJInterceptor_handlemessage.xml, pom_xml_dependencies.xml, spring_configuration.xml
>
>
> Using CXF 2.7.12 on weblogic server 10.3.6, i'm facing issue :
> org.apache.ws.security.WSSecurityException: The signature or decryption was invalid
> One reference failed : reference with ID 2, the body reference
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_2 check: false
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_3 check: true
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_4 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_5 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_6 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #uuid-5b84c5c2-a9de-48ad-a136-59b43f43bf9f-2288 check: true
> It works with metro implementation.
> Below logs :
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - signatureOK false
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - XML Signature verification has failed
> Verify XML Signature
> Signature Validation check: true
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_2 check: false
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_3 check: true
> 2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_4 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_5 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
> Reference #_6 check: true
> 2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)