You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-dev@axis.apache.org by "jcapstester (Created) (JIRA)" <ji...@apache.org> on 2011/10/20 21:34:10 UTC
[jira] [Created] (RAMPART-340) response does not contain wsse
Security header in case of SoapFault
response does not contain wsse Security header in case of SoapFault
-------------------------------------------------------------------
Key: RAMPART-340
URL: https://issues.apache.org/jira/browse/RAMPART-340
Project: Rampart
Issue Type: Bug
Components: rampart-core
Affects Versions: 1.3
Reporter: jcapstester
Priority: Blocker
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
[jira] [Commented] (RAMPART-340) response does not contain wsse
Security header in case of SoapFault
Posted by "Amila Jayasekara (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RAMPART-340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13134944#comment-13134944 ]
Amila Jayasekara commented on RAMPART-340:
------------------------------------------
Hi,
What type of fault are you getting as the response ?
If the fault is originated while encryption or decryption rampart will not send security headers.
E.g :- If service cannot find keystores to find keys to do encryption, rampart will not send a fault with security headers. (As it cannot encrypt the fault)
But if it is a fault message which is originated from the service code, then it has to come with security headers.
I have tested this behaviour with rampart 1.6. But not with rampart 1.3.
Thanks
AmilaJ
> response does not contain wsse Security header in case of SoapFault
> -------------------------------------------------------------------
>
> Key: RAMPART-340
> URL: https://issues.apache.org/jira/browse/RAMPART-340
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: jcapstester
> Priority: Blocker
>
> For non-soap fault response, the wsse security header is present.
> The soap fault returned by rampart does not contain wsse security header.
> I have followed others suggestion to add <phase name="Security"/> to <phaseOrder type="OutFaultFlow"> section.
> However, the wsse security header is still missing.
> Does anyone know how to fix this issue?
> I am using rampart-1.3.mar
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
[jira] [Commented] (RAMPART-340) response does not contain wsse
Security header in case of SoapFault
Posted by "jcapstester (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RAMPART-340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13135069#comment-13135069 ]
jcapstester commented on RAMPART-340:
-------------------------------------
We are implementing a web service proxy that to handle WS-security. The fault is a soapFault response originated from another underlying web service. If the underlying web service returns non-soapfault response, wsse security header part is added by rampart and returned to service client. However, if the underlying web service returns soap fault response, It does not have wsse security part in the header.
We are using rampart-1.3 and would like to stay in this version.
> response does not contain wsse Security header in case of SoapFault
> -------------------------------------------------------------------
>
> Key: RAMPART-340
> URL: https://issues.apache.org/jira/browse/RAMPART-340
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: jcapstester
> Priority: Blocker
>
> For non-soap fault response, the wsse security header is present.
> The soap fault returned by rampart does not contain wsse security header.
> I have followed others suggestion to add <phase name="Security"/> to <phaseOrder type="OutFaultFlow"> section.
> However, the wsse security header is still missing.
> Does anyone know how to fix this issue?
> I am using rampart-1.3.mar
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
[jira] [Updated] (RAMPART-340) response does not contain wsse
Security header in case of SoapFault
Posted by "jcapstester (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RAMPART-340?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
jcapstester updated RAMPART-340:
--------------------------------
Description:
For non-soap fault response, the wsse security header is present.
The soap fault returned by rampart does not contain wsse security header.
I have followed others suggestion to add <phase name="Security"/> to <phaseOrder type="OutFaultFlow"> section.
However, the wsse security header is still missing.
Does anyone know how to fix this issue?
I am using rampart-1.3.mar
> response does not contain wsse Security header in case of SoapFault
> -------------------------------------------------------------------
>
> Key: RAMPART-340
> URL: https://issues.apache.org/jira/browse/RAMPART-340
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: jcapstester
> Priority: Blocker
>
> For non-soap fault response, the wsse security header is present.
> The soap fault returned by rampart does not contain wsse security header.
> I have followed others suggestion to add <phase name="Security"/> to <phaseOrder type="OutFaultFlow"> section.
> However, the wsse security header is still missing.
> Does anyone know how to fix this issue?
> I am using rampart-1.3.mar
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
[jira] [Commented] (RAMPART-340) response does not contain wsse
Security header in case of SoapFault
Posted by "Amila Jayasekara (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RAMPART-340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13161624#comment-13161624 ]
Amila Jayasekara commented on RAMPART-340:
------------------------------------------
Hi,
I tested this scenario with a custom written message receiver. Within the message receiver i added code to throw an AxisFault. Then engaged x-509 security on both client and server side. Thus the client received the AxisFault successfully.
I carried out above test in both 1.6 version and trunk version. I am attaching the test code which i used to test this issue.
Since issue is no longer there i believe we can resolve this issue.
Thanks
AmilaJ
> response does not contain wsse Security header in case of SoapFault
> -------------------------------------------------------------------
>
> Key: RAMPART-340
> URL: https://issues.apache.org/jira/browse/RAMPART-340
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: jcapstester
> Priority: Blocker
>
> For non-soap fault response, the wsse security header is present.
> The soap fault returned by rampart does not contain wsse security header.
> I have followed others suggestion to add <phase name="Security"/> to <phaseOrder type="OutFaultFlow"> section.
> However, the wsse security header is still missing.
> Does anyone know how to fix this issue?
> I am using rampart-1.3.mar
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
[jira] [Commented] (RAMPART-340) response does not contain wsse
Security header in case of SoapFault
Posted by "jcapstester (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RAMPART-340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13135072#comment-13135072 ]
jcapstester commented on RAMPART-340:
-------------------------------------
Here is more detail:
The soapFault is wrapped inside AxisFault object. We have a messageReceiverInOut class where it throws AxisFault.
When AxisFault is thrown, the wsse security is missing in the soapheader.
> response does not contain wsse Security header in case of SoapFault
> -------------------------------------------------------------------
>
> Key: RAMPART-340
> URL: https://issues.apache.org/jira/browse/RAMPART-340
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: jcapstester
> Priority: Blocker
>
> For non-soap fault response, the wsse security header is present.
> The soap fault returned by rampart does not contain wsse security header.
> I have followed others suggestion to add <phase name="Security"/> to <phaseOrder type="OutFaultFlow"> section.
> However, the wsse security header is still missing.
> Does anyone know how to fix this issue?
> I am using rampart-1.3.mar
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
[jira] [Updated] (RAMPART-340) response does not contain wsse
Security header in case of SoapFault
Posted by "Amila Jayasekara (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RAMPART-340?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Amila Jayasekara updated RAMPART-340:
-------------------------------------
Attachment: sym-x509-message-receiver.zip
> response does not contain wsse Security header in case of SoapFault
> -------------------------------------------------------------------
>
> Key: RAMPART-340
> URL: https://issues.apache.org/jira/browse/RAMPART-340
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: jcapstester
> Priority: Blocker
> Attachments: sym-x509-message-receiver.zip
>
>
> For non-soap fault response, the wsse security header is present.
> The soap fault returned by rampart does not contain wsse security header.
> I have followed others suggestion to add <phase name="Security"/> to <phaseOrder type="OutFaultFlow"> section.
> However, the wsse security header is still missing.
> Does anyone know how to fix this issue?
> I am using rampart-1.3.mar
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
[jira] [Resolved] (RAMPART-340) response does not contain wsse
Security header in case of SoapFault
Posted by "Sagara Gunathunga (Resolved) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RAMPART-340?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sagara Gunathunga resolved RAMPART-340.
----------------------------------------
Resolution: Cannot Reproduce
Resolved based on discussion.
> response does not contain wsse Security header in case of SoapFault
> -------------------------------------------------------------------
>
> Key: RAMPART-340
> URL: https://issues.apache.org/jira/browse/RAMPART-340
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: jcapstester
> Priority: Blocker
> Attachments: sym-x509-message-receiver.zip
>
>
> For non-soap fault response, the wsse security header is present.
> The soap fault returned by rampart does not contain wsse security header.
> I have followed others suggestion to add <phase name="Security"/> to <phaseOrder type="OutFaultFlow"> section.
> However, the wsse security header is still missing.
> Does anyone know how to fix this issue?
> I am using rampart-1.3.mar
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org