You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by Sunil Bapat <su...@gmail.com> on 2012/06/10 14:03:21 UTC

CXF 2.6.1 XMLCipher exception

Using CXF 2.6.1, I am getting the following exception when trying to
make a web service call to an STS with asymmetric binding. I am using
the CXF STS client, which is calling a CXF STS. My maven project pulls
in include xmlsec-1.5.2. Anything else I am missing?

Servlet.service() for servlet CXFServlet threw exception:
java.lang.NoSuchMethodError:
org.apache.xml.security.encryption.XMLCipher.setSecureValidation(Z)V
	at org.apache.ws.security.processor.ReferenceListProcessor.decryptEncryptedData(ReferenceListProcessor.java:290)
[wss4j-1.6.6.jar:1.6.6]
	at org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRef(EncryptedKeyProcessor.java:365)
[wss4j-1.6.6.jar:1.6.6]
	at org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRefs(EncryptedKeyProcessor.java:324)
[wss4j-1.6.6.jar:1.6.6]
	at org.apache.ws.security.processor.EncryptedKeyProcessor.handleToken(EncryptedKeyProcessor.java:137)
[wss4j-1.6.6.jar:1.6.6]
	at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
[wss4j-1.6.6.jar:1.6.6]
	at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:289)
[cxf-rt-ws-security-2.6.1.jar:2.6.1]
	at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:97)
[cxf-rt-ws-security-2.6.1.jar:2.6.1]
	at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:262)
[cxf-api-2.6.1.jar:2.6.1]
	at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:122)
[cxf-api-2.6.1.jar:2.6.1]
	at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:211)
[cxf-rt-transports-http-2.6.1.jar:2.6.1]
	at org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:213)
[cxf-rt-transports-http-2.6.1.jar:2.6.1]

Thanks
Sunil.

Re: CXF 2.6.1 XMLCipher exception

Posted by "prawin.pop" <pr...@gmail.com>.
Got the problem app server is using old version of xml ser jar that's the
problem
 Thanks



--
View this message in context: http://cxf.547215.n5.nabble.com/CXF-2-6-1-XMLCipher-exception-tp5709472p5711400.html
Sent from the cxf-user mailing list archive at Nabble.com.

Re: CXF 2.6.1 XMLCipher exception

Posted by "prawin.pop" <pr...@gmail.com>.
I am facing similar kind of problem in keystore validation from server side.



12:18:50,242 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/doubleit].[WebServicePort]]
(http--0.0.0.0-8080-1) Servlet.service() for servlet WebServicePort threw
exception: java.lang.NoSuchMethodError:
org.apache.xml.security.encryption.XMLCipher.setSecureValidation(Z)V
	at
org.apache.ws.security.processor.ReferenceListProcessor.decryptEncryptedData(ReferenceListProcessor.java:290)
[wss4j-1.6.6.jar:1.6.6]
	at
org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRef(EncryptedKeyProcessor.java:365)
[wss4j-1.6.6.jar:1.6.6]
	at
org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRefs(EncryptedKeyProcessor.java:324)
[wss4j-1.6.6.jar:1.6.6]
	at
org.apache.ws.security.processor.EncryptedKeyProcessor.handleToken(EncryptedKeyProcessor.java:137)
[wss4j-1.6.6.jar:1.6.6]
	at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
[wss4j-1.6.6.jar:1.6.6]
	at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:289)
[cxf-rt-ws-security-2.6.1.jar:2.6.1]
	at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:97)
[cxf-rt-ws-security-2.6.1.jar:2.6.1]
	at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:262)
[cxf-api-2.6.1.jar:2.6.1]
	at
org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:122)
[cxf-api-2.6.1.jar:2.6.1]
	at
org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:211)
[cxf-rt-transports-http-2.6.1.jar:2.6.1]
	at
org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:213)
[cxf-rt-transports-http-2.6.1.jar:2.6.1]
	at
org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:193)
[cxf-rt-transports-http-2.6.1.jar:2.6.1]
	at
org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:129)
[cxf-rt-transports-http-2.6.1.jar:2.6.1]
	at
org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:187)
[cxf-rt-transports-http-2.6.1.jar:2.6.1]
	at
org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:110)
[cxf-rt-transports-http-2.6.1.jar:2.6.1]
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:754)
[jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final]
	at
org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:166)
[cxf-rt-transports-http-2.6.1.jar:2.6.1]
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329)
[jbossweb-7.0.10.Final.jar:]
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
[jbossweb-7.0.10.Final.jar:]
	at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275)
[jbossweb-7.0.10.Final.jar:]
	at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161)
[jbossweb-7.0.10.Final.jar:]
	at
org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:154)
[jboss-as-web-7.1.0.Final.jar:7.1.0.Final]
	at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155)
[jbossweb-7.0.10.Final.jar:]
	at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
[jbossweb-7.0.10.Final.jar:]
	at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
[jbossweb-7.0.10.Final.jar:]
	at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368)
[jbossweb-7.0.10.Final.jar:]
	at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877)
[jbossweb-7.0.10.Final.jar:]
	at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671)
[jbossweb-7.0.10.Final.jar:]
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930)
[jbossweb-7.0.10.Final.jar:]
	at java.lang.Thread.run(Thread.java:662) [rt.jar:1.6.0_32]



I have been using below jars in my lib directory

aopalliance-1.0.jar
asm-3.3.1.jar
commons-logging-1.1.1.jar
cxf-api-2.6.1.jar
cxf-rt-bindings-soap-2.6.1.jar
cxf-rt-bindings-xml-2.6.1.jar
cxf-rt-core-2.6.1.jar
cxf-rt-databinding-jaxb-2.6.1.jar
cxf-rt-frontend-jaxws-2.6.1.jar
cxf-rt-frontend-simple-2.6.1.jar
cxf-rt-transports-http-2.6.1.jar
cxf-rt-ws-addr-2.6.1.jar
cxf-rt-ws-policy-2.6.1.jar
cxf-rt-ws-security-2.6.1.jar
cxf-x509-profile-service-1.0-SNAPSHOT.jar
ehcache-core-2.5.1.jar
geronimo-javamail_1.4_spec-1.7.1.jar
jaxb-impl-2.1.13.jar
joda-time-1.6.2.jar
neethi-3.0.2.jar
opensaml-2.5.1-1.jar
openws-1.4.2-1.jar
slf4j-api-1.6.1.jar
spring-aop-3.0.6.RELEASE.jar
spring-asm-3.0.6.RELEASE.jar
spring-beans-3.0.6.RELEASE.jar
spring-context-3.0.6.RELEASE.jar
spring-core-3.0.6.RELEASE.jar
spring-expression-3.0.6.RELEASE.jar
spring-web-3.0.6.RELEASE.jar
stax2-api-3.1.1.jar
woodstox-core-asl-4.1.2.jar
wsdl4j-1.6.2.jar
wss4j-1.6.6.jar
xml-resolver-1.2.jar
xmlschema-core-2.0.2.jar
xmlsec-1.5.2.jar
xmltooling-1.3.2-1.jar



--
View this message in context: http://cxf.547215.n5.nabble.com/CXF-2-6-1-XMLCipher-exception-tp5709472p5711392.html
Sent from the cxf-user mailing list archive at Nabble.com.

Re: CXF 2.6.1 XMLCipher exception

Posted by Sunil Bapat <su...@gmail.com>.
Thanks for the help. An older version of xmlsec was getting pulled in
from the appserver. I don't see that error anymore after I fixed that.

Thanks


On Tue, Jun 12, 2012 at 4:33 AM, Colm O hEigeartaigh
<co...@apache.org> wrote:
> How are you deploying the STS? Is it possible there is some other
> application in the container that is using an older version of XML
> Security?
>
> Colm.
>
> On Mon, Jun 11, 2012 at 7:11 PM, Sunil Bapat <su...@gmail.com> wrote:
>
>> This is happening on the server side when the STS is processing the
>> request.
>> Here's the output of the dependency tree.
>>
>> [INFO] [dependency:tree]
>> [INFO] test:asymmetric-sts:war:dev
>> [INFO] +-
>> org.apache.cxf.services.sts:cxf-services-sts-core:jar:2.6.1:provided
>> [INFO] |  +- org.apache.cxf:cxf-rt-ws-security:jar:2.6.1:provided
>> [INFO] |  |  +- org.apache.cxf:cxf-api:jar:2.6.1:provided
>> [INFO] |  |  |  +-
>> org.codehaus.woodstox:woodstox-core-asl:jar:4.1.2:provided
>> [INFO] |  |  |  |  \- org.codehaus.woodstox:stax2-api:jar:3.1.1:provided
>> [INFO] |  |  |  +-
>> org.apache.ws.xmlschema:xmlschema-core:jar:2.0.2:provided
>> [INFO] |  |  |  +-
>> org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:provided
>> [INFO] |  |  |  \- wsdl4j:wsdl4j:jar:1.6.2:provided
>> [INFO] |  |  +- org.apache.cxf:cxf-rt-core:jar:2.6.1:provided
>> [INFO] |  |  |  \- com.sun.xml.bind:jaxb-impl:jar:2.1.13:provided
>> [INFO] |  |  +- org.apache.cxf:cxf-rt-bindings-soap:jar:2.6.1:provided
>> [INFO] |  |  |  \-
>> org.apache.cxf:cxf-rt-databinding-jaxb:jar:2.6.1:provided
>> [INFO] |  |  +- net.sf.ehcache:ehcache-core:jar:2.5.1:provided
>> [INFO] |  |  |  \- org.slf4j:slf4j-api:jar:1.6.1:provided
>> [INFO] |  |  \- org.apache.ws.security:wss4j:jar:1.6.6:provided
>> [INFO] |  |     +- org.apache.santuario:xmlsec:jar:1.5.2:provided
>> [INFO] |  |     \- org.opensaml:opensaml:jar:2.5.1-1:provided
>> [INFO] |  |        \- org.opensaml:openws:jar:1.4.2-1:provided
>> [INFO] |  |           \- org.opensaml:xmltooling:jar:1.3.2-1:provided
>> [INFO] |  |              \- joda-time:joda-time:jar:1.6.2:provided
>> [INFO] |  \- org.apache.cxf:cxf-rt-ws-addr:jar:2.6.1:provided
>> [INFO] |     \- org.apache.cxf:cxf-rt-ws-policy:jar:2.6.1:provided
>> [INFO] |        \- org.apache.neethi:neethi:jar:3.0.2:provided
>> [INFO] +- junit:junit:jar:4.0:test (scope not updated to compile)
>> [INFO] +- org.springframework:spring-jdbc:jar:3.0.7.RELEASE:compile
>> [INFO] |  +- org.springframework:spring-beans:jar:3.0.7.RELEASE:compile
>> [INFO] |  +- org.springframework:spring-core:jar:3.0.7.RELEASE:compile
>> [INFO] |  |  +- org.springframework:spring-asm:jar:3.0.7.RELEASE:compile
>> [INFO] |  |  \- commons-logging:commons-logging:jar:1.1.1:compile
>> [INFO] |  \- org.springframework:spring-tx:jar:3.0.7.RELEASE:compile
>> [INFO] |     +- aopalliance:aopalliance:jar:1.0:compile
>> [INFO] |     +- org.springframework:spring-aop:jar:3.0.7.RELEASE:compile
>> [INFO] |     \-
>> org.springframework:spring-context:jar:3.0.7.RELEASE:compile
>> [INFO] |        \-
>> org.springframework:spring-expression:jar:3.0.7.RELEASE:compile
>> [INFO] \- log4j:log4j:jar:1.2.16:provided (scope not updated to compile)
>>
>> Thanks
>> Sunil.
>>
>>
>> On Mon, Jun 11, 2012 at 5:06 AM, Colm O hEigeartaigh
>> <co...@apache.org> wrote:
>> > Are you getting that error when the STS receives the request or when the
>> > client is processing the response? Either way it looks like you are
>> pulling
>> > in an older version of XML Security. Could you verify by running a "mvn
>> > dependency:tree" and attaching the output?
>> >
>> > Colm.
>> >
>> > On Sun, Jun 10, 2012 at 1:03 PM, Sunil Bapat <su...@gmail.com> wrote:
>> >
>> >> Using CXF 2.6.1, I am getting the following exception when trying to
>> >> make a web service call to an STS with asymmetric binding. I am using
>> >> the CXF STS client, which is calling a CXF STS. My maven project pulls
>> >> in include xmlsec-1.5.2. Anything else I am missing?
>> >>
>> >> Servlet.service() for servlet CXFServlet threw exception:
>> >> java.lang.NoSuchMethodError:
>> >> org.apache.xml.security.encryption.XMLCipher.setSecureValidation(Z)V
>> >>        at
>> >>
>> org.apache.ws.security.processor.ReferenceListProcessor.decryptEncryptedData(ReferenceListProcessor.java:290)
>> >> [wss4j-1.6.6.jar:1.6.6]
>> >>        at
>> >>
>> org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRef(EncryptedKeyProcessor.java:365)
>> >> [wss4j-1.6.6.jar:1.6.6]
>> >>        at
>> >>
>> org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRefs(EncryptedKeyProcessor.java:324)
>> >> [wss4j-1.6.6.jar:1.6.6]
>> >>        at
>> >>
>> org.apache.ws.security.processor.EncryptedKeyProcessor.handleToken(EncryptedKeyProcessor.java:137)
>> >> [wss4j-1.6.6.jar:1.6.6]
>> >>        at
>> >>
>> org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
>> >> [wss4j-1.6.6.jar:1.6.6]
>> >>        at
>> >>
>> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:289)
>> >> [cxf-rt-ws-security-2.6.1.jar:2.6.1]
>> >>        at
>> >>
>> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:97)
>> >> [cxf-rt-ws-security-2.6.1.jar:2.6.1]
>> >>        at
>> >>
>> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:262)
>> >> [cxf-api-2.6.1.jar:2.6.1]
>> >>        at
>> >>
>> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:122)
>> >> [cxf-api-2.6.1.jar:2.6.1]
>> >>        at
>> >>
>> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:211)
>> >> [cxf-rt-transports-http-2.6.1.jar:2.6.1]
>> >>        at
>> >>
>> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:213)
>> >> [cxf-rt-transports-http-2.6.1.jar:2.6.1]
>> >>
>> >> Thanks
>> >> Sunil.
>> >>
>> >
>> >
>> >
>> > --
>> > Colm O hEigeartaigh
>> >
>> > Talend Community Coder
>> > http://coders.talend.com
>>
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com

Re: CXF 2.6.1 XMLCipher exception

Posted by Colm O hEigeartaigh <co...@apache.org>.
How are you deploying the STS? Is it possible there is some other
application in the container that is using an older version of XML
Security?

Colm.

On Mon, Jun 11, 2012 at 7:11 PM, Sunil Bapat <su...@gmail.com> wrote:

> This is happening on the server side when the STS is processing the
> request.
> Here's the output of the dependency tree.
>
> [INFO] [dependency:tree]
> [INFO] test:asymmetric-sts:war:dev
> [INFO] +-
> org.apache.cxf.services.sts:cxf-services-sts-core:jar:2.6.1:provided
> [INFO] |  +- org.apache.cxf:cxf-rt-ws-security:jar:2.6.1:provided
> [INFO] |  |  +- org.apache.cxf:cxf-api:jar:2.6.1:provided
> [INFO] |  |  |  +-
> org.codehaus.woodstox:woodstox-core-asl:jar:4.1.2:provided
> [INFO] |  |  |  |  \- org.codehaus.woodstox:stax2-api:jar:3.1.1:provided
> [INFO] |  |  |  +-
> org.apache.ws.xmlschema:xmlschema-core:jar:2.0.2:provided
> [INFO] |  |  |  +-
> org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:provided
> [INFO] |  |  |  \- wsdl4j:wsdl4j:jar:1.6.2:provided
> [INFO] |  |  +- org.apache.cxf:cxf-rt-core:jar:2.6.1:provided
> [INFO] |  |  |  \- com.sun.xml.bind:jaxb-impl:jar:2.1.13:provided
> [INFO] |  |  +- org.apache.cxf:cxf-rt-bindings-soap:jar:2.6.1:provided
> [INFO] |  |  |  \-
> org.apache.cxf:cxf-rt-databinding-jaxb:jar:2.6.1:provided
> [INFO] |  |  +- net.sf.ehcache:ehcache-core:jar:2.5.1:provided
> [INFO] |  |  |  \- org.slf4j:slf4j-api:jar:1.6.1:provided
> [INFO] |  |  \- org.apache.ws.security:wss4j:jar:1.6.6:provided
> [INFO] |  |     +- org.apache.santuario:xmlsec:jar:1.5.2:provided
> [INFO] |  |     \- org.opensaml:opensaml:jar:2.5.1-1:provided
> [INFO] |  |        \- org.opensaml:openws:jar:1.4.2-1:provided
> [INFO] |  |           \- org.opensaml:xmltooling:jar:1.3.2-1:provided
> [INFO] |  |              \- joda-time:joda-time:jar:1.6.2:provided
> [INFO] |  \- org.apache.cxf:cxf-rt-ws-addr:jar:2.6.1:provided
> [INFO] |     \- org.apache.cxf:cxf-rt-ws-policy:jar:2.6.1:provided
> [INFO] |        \- org.apache.neethi:neethi:jar:3.0.2:provided
> [INFO] +- junit:junit:jar:4.0:test (scope not updated to compile)
> [INFO] +- org.springframework:spring-jdbc:jar:3.0.7.RELEASE:compile
> [INFO] |  +- org.springframework:spring-beans:jar:3.0.7.RELEASE:compile
> [INFO] |  +- org.springframework:spring-core:jar:3.0.7.RELEASE:compile
> [INFO] |  |  +- org.springframework:spring-asm:jar:3.0.7.RELEASE:compile
> [INFO] |  |  \- commons-logging:commons-logging:jar:1.1.1:compile
> [INFO] |  \- org.springframework:spring-tx:jar:3.0.7.RELEASE:compile
> [INFO] |     +- aopalliance:aopalliance:jar:1.0:compile
> [INFO] |     +- org.springframework:spring-aop:jar:3.0.7.RELEASE:compile
> [INFO] |     \-
> org.springframework:spring-context:jar:3.0.7.RELEASE:compile
> [INFO] |        \-
> org.springframework:spring-expression:jar:3.0.7.RELEASE:compile
> [INFO] \- log4j:log4j:jar:1.2.16:provided (scope not updated to compile)
>
> Thanks
> Sunil.
>
>
> On Mon, Jun 11, 2012 at 5:06 AM, Colm O hEigeartaigh
> <co...@apache.org> wrote:
> > Are you getting that error when the STS receives the request or when the
> > client is processing the response? Either way it looks like you are
> pulling
> > in an older version of XML Security. Could you verify by running a "mvn
> > dependency:tree" and attaching the output?
> >
> > Colm.
> >
> > On Sun, Jun 10, 2012 at 1:03 PM, Sunil Bapat <su...@gmail.com> wrote:
> >
> >> Using CXF 2.6.1, I am getting the following exception when trying to
> >> make a web service call to an STS with asymmetric binding. I am using
> >> the CXF STS client, which is calling a CXF STS. My maven project pulls
> >> in include xmlsec-1.5.2. Anything else I am missing?
> >>
> >> Servlet.service() for servlet CXFServlet threw exception:
> >> java.lang.NoSuchMethodError:
> >> org.apache.xml.security.encryption.XMLCipher.setSecureValidation(Z)V
> >>        at
> >>
> org.apache.ws.security.processor.ReferenceListProcessor.decryptEncryptedData(ReferenceListProcessor.java:290)
> >> [wss4j-1.6.6.jar:1.6.6]
> >>        at
> >>
> org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRef(EncryptedKeyProcessor.java:365)
> >> [wss4j-1.6.6.jar:1.6.6]
> >>        at
> >>
> org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRefs(EncryptedKeyProcessor.java:324)
> >> [wss4j-1.6.6.jar:1.6.6]
> >>        at
> >>
> org.apache.ws.security.processor.EncryptedKeyProcessor.handleToken(EncryptedKeyProcessor.java:137)
> >> [wss4j-1.6.6.jar:1.6.6]
> >>        at
> >>
> org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
> >> [wss4j-1.6.6.jar:1.6.6]
> >>        at
> >>
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:289)
> >> [cxf-rt-ws-security-2.6.1.jar:2.6.1]
> >>        at
> >>
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:97)
> >> [cxf-rt-ws-security-2.6.1.jar:2.6.1]
> >>        at
> >>
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:262)
> >> [cxf-api-2.6.1.jar:2.6.1]
> >>        at
> >>
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:122)
> >> [cxf-api-2.6.1.jar:2.6.1]
> >>        at
> >>
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:211)
> >> [cxf-rt-transports-http-2.6.1.jar:2.6.1]
> >>        at
> >>
> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:213)
> >> [cxf-rt-transports-http-2.6.1.jar:2.6.1]
> >>
> >> Thanks
> >> Sunil.
> >>
> >
> >
> >
> > --
> > Colm O hEigeartaigh
> >
> > Talend Community Coder
> > http://coders.talend.com
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: CXF 2.6.1 XMLCipher exception

Posted by Sunil Bapat <su...@gmail.com>.
This is happening on the server side when the STS is processing the request.
Here's the output of the dependency tree.

[INFO] [dependency:tree]
[INFO] test:asymmetric-sts:war:dev
[INFO] +- org.apache.cxf.services.sts:cxf-services-sts-core:jar:2.6.1:provided
[INFO] |  +- org.apache.cxf:cxf-rt-ws-security:jar:2.6.1:provided
[INFO] |  |  +- org.apache.cxf:cxf-api:jar:2.6.1:provided
[INFO] |  |  |  +- org.codehaus.woodstox:woodstox-core-asl:jar:4.1.2:provided
[INFO] |  |  |  |  \- org.codehaus.woodstox:stax2-api:jar:3.1.1:provided
[INFO] |  |  |  +- org.apache.ws.xmlschema:xmlschema-core:jar:2.0.2:provided
[INFO] |  |  |  +-
org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:provided
[INFO] |  |  |  \- wsdl4j:wsdl4j:jar:1.6.2:provided
[INFO] |  |  +- org.apache.cxf:cxf-rt-core:jar:2.6.1:provided
[INFO] |  |  |  \- com.sun.xml.bind:jaxb-impl:jar:2.1.13:provided
[INFO] |  |  +- org.apache.cxf:cxf-rt-bindings-soap:jar:2.6.1:provided
[INFO] |  |  |  \- org.apache.cxf:cxf-rt-databinding-jaxb:jar:2.6.1:provided
[INFO] |  |  +- net.sf.ehcache:ehcache-core:jar:2.5.1:provided
[INFO] |  |  |  \- org.slf4j:slf4j-api:jar:1.6.1:provided
[INFO] |  |  \- org.apache.ws.security:wss4j:jar:1.6.6:provided
[INFO] |  |     +- org.apache.santuario:xmlsec:jar:1.5.2:provided
[INFO] |  |     \- org.opensaml:opensaml:jar:2.5.1-1:provided
[INFO] |  |        \- org.opensaml:openws:jar:1.4.2-1:provided
[INFO] |  |           \- org.opensaml:xmltooling:jar:1.3.2-1:provided
[INFO] |  |              \- joda-time:joda-time:jar:1.6.2:provided
[INFO] |  \- org.apache.cxf:cxf-rt-ws-addr:jar:2.6.1:provided
[INFO] |     \- org.apache.cxf:cxf-rt-ws-policy:jar:2.6.1:provided
[INFO] |        \- org.apache.neethi:neethi:jar:3.0.2:provided
[INFO] +- junit:junit:jar:4.0:test (scope not updated to compile)
[INFO] +- org.springframework:spring-jdbc:jar:3.0.7.RELEASE:compile
[INFO] |  +- org.springframework:spring-beans:jar:3.0.7.RELEASE:compile
[INFO] |  +- org.springframework:spring-core:jar:3.0.7.RELEASE:compile
[INFO] |  |  +- org.springframework:spring-asm:jar:3.0.7.RELEASE:compile
[INFO] |  |  \- commons-logging:commons-logging:jar:1.1.1:compile
[INFO] |  \- org.springframework:spring-tx:jar:3.0.7.RELEASE:compile
[INFO] |     +- aopalliance:aopalliance:jar:1.0:compile
[INFO] |     +- org.springframework:spring-aop:jar:3.0.7.RELEASE:compile
[INFO] |     \- org.springframework:spring-context:jar:3.0.7.RELEASE:compile
[INFO] |        \-
org.springframework:spring-expression:jar:3.0.7.RELEASE:compile
[INFO] \- log4j:log4j:jar:1.2.16:provided (scope not updated to compile)

Thanks
Sunil.


On Mon, Jun 11, 2012 at 5:06 AM, Colm O hEigeartaigh
<co...@apache.org> wrote:
> Are you getting that error when the STS receives the request or when the
> client is processing the response? Either way it looks like you are pulling
> in an older version of XML Security. Could you verify by running a "mvn
> dependency:tree" and attaching the output?
>
> Colm.
>
> On Sun, Jun 10, 2012 at 1:03 PM, Sunil Bapat <su...@gmail.com> wrote:
>
>> Using CXF 2.6.1, I am getting the following exception when trying to
>> make a web service call to an STS with asymmetric binding. I am using
>> the CXF STS client, which is calling a CXF STS. My maven project pulls
>> in include xmlsec-1.5.2. Anything else I am missing?
>>
>> Servlet.service() for servlet CXFServlet threw exception:
>> java.lang.NoSuchMethodError:
>> org.apache.xml.security.encryption.XMLCipher.setSecureValidation(Z)V
>>        at
>> org.apache.ws.security.processor.ReferenceListProcessor.decryptEncryptedData(ReferenceListProcessor.java:290)
>> [wss4j-1.6.6.jar:1.6.6]
>>        at
>> org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRef(EncryptedKeyProcessor.java:365)
>> [wss4j-1.6.6.jar:1.6.6]
>>        at
>> org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRefs(EncryptedKeyProcessor.java:324)
>> [wss4j-1.6.6.jar:1.6.6]
>>        at
>> org.apache.ws.security.processor.EncryptedKeyProcessor.handleToken(EncryptedKeyProcessor.java:137)
>> [wss4j-1.6.6.jar:1.6.6]
>>        at
>> org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
>> [wss4j-1.6.6.jar:1.6.6]
>>        at
>> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:289)
>> [cxf-rt-ws-security-2.6.1.jar:2.6.1]
>>        at
>> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:97)
>> [cxf-rt-ws-security-2.6.1.jar:2.6.1]
>>        at
>> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:262)
>> [cxf-api-2.6.1.jar:2.6.1]
>>        at
>> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:122)
>> [cxf-api-2.6.1.jar:2.6.1]
>>        at
>> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:211)
>> [cxf-rt-transports-http-2.6.1.jar:2.6.1]
>>        at
>> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:213)
>> [cxf-rt-transports-http-2.6.1.jar:2.6.1]
>>
>> Thanks
>> Sunil.
>>
>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com

Re: CXF 2.6.1 XMLCipher exception

Posted by Colm O hEigeartaigh <co...@apache.org>.
Are you getting that error when the STS receives the request or when the
client is processing the response? Either way it looks like you are pulling
in an older version of XML Security. Could you verify by running a "mvn
dependency:tree" and attaching the output?

Colm.

On Sun, Jun 10, 2012 at 1:03 PM, Sunil Bapat <su...@gmail.com> wrote:

> Using CXF 2.6.1, I am getting the following exception when trying to
> make a web service call to an STS with asymmetric binding. I am using
> the CXF STS client, which is calling a CXF STS. My maven project pulls
> in include xmlsec-1.5.2. Anything else I am missing?
>
> Servlet.service() for servlet CXFServlet threw exception:
> java.lang.NoSuchMethodError:
> org.apache.xml.security.encryption.XMLCipher.setSecureValidation(Z)V
>        at
> org.apache.ws.security.processor.ReferenceListProcessor.decryptEncryptedData(ReferenceListProcessor.java:290)
> [wss4j-1.6.6.jar:1.6.6]
>        at
> org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRef(EncryptedKeyProcessor.java:365)
> [wss4j-1.6.6.jar:1.6.6]
>        at
> org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRefs(EncryptedKeyProcessor.java:324)
> [wss4j-1.6.6.jar:1.6.6]
>        at
> org.apache.ws.security.processor.EncryptedKeyProcessor.handleToken(EncryptedKeyProcessor.java:137)
> [wss4j-1.6.6.jar:1.6.6]
>        at
> org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
> [wss4j-1.6.6.jar:1.6.6]
>        at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:289)
> [cxf-rt-ws-security-2.6.1.jar:2.6.1]
>        at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:97)
> [cxf-rt-ws-security-2.6.1.jar:2.6.1]
>        at
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:262)
> [cxf-api-2.6.1.jar:2.6.1]
>        at
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:122)
> [cxf-api-2.6.1.jar:2.6.1]
>        at
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:211)
> [cxf-rt-transports-http-2.6.1.jar:2.6.1]
>        at
> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:213)
> [cxf-rt-transports-http-2.6.1.jar:2.6.1]
>
> Thanks
> Sunil.
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com