You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2011/06/15 21:42:47 UTC
[jira] [Commented] (CXF-3592) Regression from 2.3.5 : An invalid
security token was provided (Bad TokenType "")
[ https://issues.apache.org/jira/browse/CXF-3592?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13049974#comment-13049974 ]
Colm O hEigeartaigh commented on CXF-3592:
------------------------------------------
It's not a regression, but an enhancement :-) CXF 2.4.0 enforces Basic Security Profile 1.1 compliance. In this case, it is objecting to a SecurityTokenReference not having a TokenType attribute:
http://www.ws-i.org/Profiles/BasicSecurityProfile-1.1.html#STRTokenType
"Any wsse:11:TokenType Attribute in a SECURITY_TOKEN_REFERENCE MUST specify a value that a TokenType specified by a security token profile for the referenced SECURITY_TOKEN. "
You can turn off Basic Security Profile compliance by setting the configuration tag "ws-security.is-bsp-compliant" to "false".
Colm.
> Regression from 2.3.5 : An invalid security token was provided (Bad TokenType "")
> ---------------------------------------------------------------------------------
>
> Key: CXF-3592
> URL: https://issues.apache.org/jira/browse/CXF-3592
> Project: CXF
> Issue Type: Bug
> Components: WS-* Components
> Affects Versions: 2.4.1
> Environment: Mac os X
> Reporter: Stephane Chomat
>
> The server with metro and glassfish.
> The client is running with cxf.
> The client running with a wsdl and interpret the security policy. It runs fine with cxf 2.3.5
> but it cannot read the response with cxf 2.4.1. It throws org.apache.ws.security.WSSecurityException: An invalid security token was provided (Bad TokenType "").
> --- trace with cxf 2.4.1 and wss4j 1.6.1 or 1.6.0
> 15 juin 2011 17:28:15 org.apache.cxf.service.factory.ReflectionServiceFactoryBean buildServiceFromWSDL
> INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from WSDL: http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
> 15 juin 2011 17:28:15 org.apache.cxf.service.factory.ReflectionServiceFactoryBean buildServiceFromWSDL
> INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from WSDL: http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
> 15 juin 2011 17:28:17 org.apache.cxf.interceptor.AbstractLoggingInterceptor log
> INFO: Outbound Message
> ---------------------------
> ID: 1
> Address: http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService
> Encoding: UTF-8
> Content-Type: text/xml
> Headers: {Accept=[*/*], SOAPAction=["add"]}
> Payload: <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Header><Action xmlns="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-697606008">add</Action><MessageID xmlns="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-1230624895">urn:uuid:a11ca17c-d4a8-4693-a65e-473c661596ed</MessageID><To xmlns="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-1532712380">http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService</To><ReplyTo xmlns="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-1784954589"><Address>http://www.w3.org/2005/08/addressing/anonymous</Address></ReplyTo><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" soap:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS-1"><wsu:Created>2011-06-15T15:28:16.437Z</wsu:Created><wsu:Expires>2011-06-15T15:33:16.437Z</wsu:Expires></wsu:Timestamp><xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="EK-B4ECDC98AEA8F58C1313081516968151"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:KeyIdentifier EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier">thYJff4nVK/4RwZSJkgNY8n/leI=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>uLn0SQU6EllSYYuMGhD91I3dE1BCle1IT8s3r8JxZY9+5P1hq9YYTiHGPrio5gpkfHfUDqEJOgD8j1PRgiiSf8+xksG2zb7alxhvMz/SNd4wv2HS3yfBv2fM2OBKP6AIqpzQiNAZ0OUG7Djj5f8o5Kfsa4viQY+Bcc1rE9MY3NU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey><xenc:ReferenceList xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:DataReference URI="#ED-4"/><xenc:DataReference URI="#ED-5"/></xenc:ReferenceList><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="ED-5" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
> <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey"><wsse:Reference URI="#EK-B4ECDC98AEA8F58C1313081516968151"/></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>CF8f130CUWq7A6r0GqqYwffZ9rP5HaZZ7VShIO3n5KR5sh+e3BR1xKRdokojGMzGxvswMUWnmsAd
> EH2KF74f7mgLoMtNLHPf7dOj/KX2hLD8Cb+EDP8WAxH4R2YH4GM4leLDCPchGoIA4eRMtrp6acoE
> yx/5nA/LVpY9qi5LOHkDtSGjfOglzTDZt4mVD8VRSvrnt8DmdhZ/xp9f14sYnv0HkrC7hPbn2+Lu
> AgXx4nrImTCryTveIUf8i5QqewXD804Ha5bvDvuDncEsN5X4JwyEp1aETidevi3fEJLGYGppzsLh
> GREYCRf1oy4+sgIlToxCccAo58mBfp/CuRwS6StZTDeqaVYVkFB8wU7fMtU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="SIG-3"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap"/></ds:CanonicalizationMethod><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><ds:Reference URI="#Id-911767762"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList=""/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Um8pRjA8bb07rMROIQzEBUbtpUk=</ds:DigestValue></ds:Reference><ds:Reference URI="#Id-1784954589"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>rsaq3DW6CevsNUqEgPsHx9/FIvY=</ds:DigestValue></ds:Reference><ds:Reference URI="#Id-1532712380"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>TCeWvmMqBAyceHjwTT9Utb96nLI=</ds:DigestValue></ds:Reference><ds:Reference URI="#Id-1230624895"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Q16J5bLFRiImkPdlS3X4yveKpmc=</ds:DigestValue></ds:Reference><ds:Reference URI="#Id-697606008"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Zy+UIJzBJyDuoEPxXIJgM6nJXZA=</ds:DigestValue></ds:Reference><ds:Reference URI="#TS-1"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="wsse soap"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>drXL3gj9LuKW0eMwh1ggWuUndms=</ds:DigestValue></ds:Reference><ds:Reference URI="#UsernameToken-2"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>RZjirIYLnwze6FsKusnPYS2f8/0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>6HPCyMQlsSGrGet40PnCwWcOmOI=</ds:SignatureValue><ds:KeyInfo Id="KI-B4ECDC98AEA8F58C1313081516968372"><wsse:SecurityTokenReference xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey" wsu:Id="STR-B4ECDC98AEA8F58C1313081516968373"><wsse:Reference URI="#EK-B4ECDC98AEA8F58C1313081516968151" ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey"/></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></soap:Header><soap:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-911767762"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="ED-4" Type="http://www.w3.org/2001/04/xmlenc#Content"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
> <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey"><wsse:Reference URI="#EK-B4ECDC98AEA8F58C1313081516968151"/></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>AoA35gu8SRZb8jPnO427b44NLt267NrCN/02AqpvEJNBaIUFBHe5dtHQ4qCz7wGLLzVGcK08iRFo
> z8wvi2D2HrXxSMQj4jThfaLZ+Ojgy2U6eGIW2bB4JfUNFgW5asd7pBizqLwkT8trwcPgEr21XqQh
> qCq+yxkr0GHmKcp8am6I4+kUxxqBsyhHw6ggPOOyYYRlcjPWBZmAO8xZ2LmdRJhd+2oAihguboDt
> bb5OSgP1gQoHRlqfL9Q0CNva0IsTyXvuV80J5HjCeo2CtiGw3uwRBFQjlqupOtbxC2dottvaEEwz
> gKCoPuzzwgEzx2y9</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></soap:Body></soap:Envelope>
> --------------------------------------
> 15 juin 2011 17:28:17 org.apache.cxf.interceptor.AbstractLoggingInterceptor log
> INFO: Inbound Message
> ----------------------------
> ID: 1
> Response-Code: 200
> Encoding: UTF-8
> Content-Type: text/xml;charset=utf-8
> Headers: {content-type=[text/xml;charset=utf-8], Date=[Wed, 15 Jun 2011 15:27:59 GMT], Server=[GlassFish Server Open Source Edition 3.1], transfer-encoding=[chunked], X-Powered-By=[Servlet/3.0 JSP/2.2 (GlassFish Server Open Source Edition 3.1 Java/Oracle Corporation/1.7)]}
> Payload: <?xml version='1.0' encoding='UTF-8'?><S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:exc14n="http://www.w3.org/2001/10/xml-exc-c14n#"><S:Header><To xmlns="http://www.w3.org/2005/08/addressing" wsu:Id="_5005">http://www.w3.org/2005/08/addressing/anonymous</To><Action xmlns="http://www.w3.org/2005/08/addressing" xmlns:S="http://schemas.xmlsoap.org/soap/envelope/" S:mustUnderstand="1" wsu:Id="_5003">http://calculator.me.org/CalculatorWS/addResponse</Action><MessageID xmlns="http://www.w3.org/2005/08/addressing" wsu:Id="_5002">uuid:0688dfb4-7b67-441e-9072-5b46c8a1d942</MessageID><RelatesTo xmlns="http://www.w3.org/2005/08/addressing" wsu:Id="_5004">urn:uuid:a11ca17c-d4a8-4693-a65e-473c661596ed</RelatesTo><wsse:Security S:mustUnderstand="1"><wsu:Timestamp xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512" xmlns:ns17="http://www.w3.org/2003/05/soap-envelope" wsu:Id="_3"><wsu:Created>2011-06-15T15:27:59Z</wsu:Created><wsu:Expires>2011-06-15T15:32:59Z</wsu:Expires></wsu:Timestamp><xenc:ReferenceList xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512" xmlns:ns17="http://www.w3.org/2003/05/soap-envelope"><xenc:DataReference URI="#_5007" /></xenc:ReferenceList><ds:Signature xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512" xmlns:ns17="http://www.w3.org/2003/05/soap-envelope" Id="_1"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="wsse S" /></ds:CanonicalizationMethod><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1" /><ds:Reference URI="#_5002"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>bcnLSlFsom4X6WCQqBtKQ8jaUrw=</ds:DigestValue></ds:Reference><ds:Reference URI="#_5003"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>AmZ7hFb58NXg+JWKY6TuSE4peho=</ds:DigestValue></ds:Reference><ds:Reference URI="#_5004"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>tawDeUn6/ZPuC5rVIeYwTHIC68k=</ds:DigestValue></ds:Reference><ds:Reference URI="#_5005"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>Nd/8wVmBdLowQKMblBRYK+6xcjA=</ds:DigestValue></ds:Reference><ds:Reference URI="#_5006"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>DdV2kRGL8sX2eRCRdXtZ5mMtetw=</ds:DigestValue></ds:Reference><ds:Reference URI="#_3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="wsu wsse S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>s7Vbn/hZ0/iJZfsdHRWn85Oh6mM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>9N7IiHXuYSVFnGImAsF2ERkN7hw=</ds:SignatureValue><ds:KeyInfo><wsse:SecurityTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">FMmZRiaRNpWZs8d2dp2M7ogfNNs=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></S:Header><S:Body wsu:Id="_5006"><xenc:EncryptedData xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512" xmlns:ns17="http://www.w3.org/2003/05/soap-envelope" Id="_5007" Type="http://www.w3.org/2001/04/xmlenc#Content"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" /><ds:KeyInfo xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="KeyInfoType"><wsse:SecurityTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">FMmZRiaRNpWZs8d2dp2M7ogfNNs=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>iUSBLes/6+nzKMEKdjdJgd/E1vmEijXOKhd4SM+sz7H1Zk1EERDAZscFLWXXbL43F+txK/MQPi9048S9HatdDuA9ZjQiBvizNas6VuYQbxqFe7LyliVwCCNGGADxMXAwiu5mEp8YinzrdLzG1PyBgQ==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></S:Body></S:Envelope>
> --------------------------------------
> 15 juin 2011 17:28:17 org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor handleMessage
> ATTENTION:
> org.apache.ws.security.WSSecurityException: An invalid security token was provided (Bad TokenType "")
> at org.apache.ws.security.str.BSPEnforcer.checkEncryptedKeyBSPCompliance(BSPEnforcer.java:115)
> at org.apache.ws.security.str.SecurityTokenRefSTRParser.parseSecurityTokenReference(SecurityTokenRefSTRParser.java:116)
> at org.apache.ws.security.processor.ReferenceListProcessor.decryptDataRefEmbedded(ReferenceListProcessor.java:154)
> at org.apache.ws.security.processor.ReferenceListProcessor.handleReferenceList(ReferenceListProcessor.java:96)
> at org.apache.ws.security.processor.ReferenceListProcessor.handleToken(ReferenceListProcessor.java:63)
> at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
> at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:249)
> at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85)
> at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:762)
> at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1582)
> at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1467)
> at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1375)
> at org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
> at org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
> at org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
> at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:623)
> at org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
> at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:510)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:343)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:295)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
> at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
> at $Proxy25.add(Unknown Source)
> at CxfClient.main(CxfClient.java:117)
> 15 juin 2011 17:28:17 org.apache.cxf.phase.PhaseInterceptorChain doDefaultLogging
> ATTENTION: Interceptor for {http://calculator.me.org/}CalculatorWSService#{http://calculator.me.org/}add has thrown exception, unwinding now
> org.apache.cxf.binding.soap.SoapFault: An invalid security token was provided (Bad TokenType "")
> at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.createSoapFault(WSS4JInInterceptor.java:644)
> at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:308)
> at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85)
> at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:762)
> at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1582)
> at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1467)
> at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1375)
> at org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
> at org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
> at org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
> at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:623)
> at org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
> at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:510)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:343)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:295)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
> at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
> at $Proxy25.add(Unknown Source)
> at CxfClient.main(CxfClient.java:117)
> Caused by: org.apache.ws.security.WSSecurityException: An invalid security token was provided (Bad TokenType "")
> at org.apache.ws.security.str.BSPEnforcer.checkEncryptedKeyBSPCompliance(BSPEnforcer.java:115)
> at org.apache.ws.security.str.SecurityTokenRefSTRParser.parseSecurityTokenReference(SecurityTokenRefSTRParser.java:116)
> at org.apache.ws.security.processor.ReferenceListProcessor.decryptDataRefEmbedded(ReferenceListProcessor.java:154)
> at org.apache.ws.security.processor.ReferenceListProcessor.handleReferenceList(ReferenceListProcessor.java:96)
> at org.apache.ws.security.processor.ReferenceListProcessor.handleToken(ReferenceListProcessor.java:63)
> at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
> at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:249)
> ... 20 more
> Exception in thread "main" javax.xml.ws.WebServiceException: An invalid security token was provided (Bad TokenType "")
> at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:135)
> at $Proxy25.add(Unknown Source)
> at CxfClient.main(CxfClient.java:117)
> Caused by: org.apache.ws.security.WSSecurityException: An invalid security token was provided (Bad TokenType "")
> at org.apache.ws.security.str.BSPEnforcer.checkEncryptedKeyBSPCompliance(BSPEnforcer.java:115)
> at org.apache.ws.security.str.SecurityTokenRefSTRParser.parseSecurityTokenReference(SecurityTokenRefSTRParser.java:116)
> at org.apache.ws.security.processor.ReferenceListProcessor.decryptDataRefEmbedded(ReferenceListProcessor.java:154)
> at org.apache.ws.security.processor.ReferenceListProcessor.handleReferenceList(ReferenceListProcessor.java:96)
> at org.apache.ws.security.processor.ReferenceListProcessor.handleToken(ReferenceListProcessor.java:63)
> at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
> at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:249)
> at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85)
> at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:762)
> at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1582)
> at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1467)
> at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1375)
> at org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
> at org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
> at org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
> at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:623)
> at org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
> at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:510)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:343)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:295)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
> at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
> ... 2 more
> --------- Trace with cxf 2.3.5
> 15 juin 2011 17:46:49 org.springframework.context.support.AbstractApplicationContext prepareRefresh
> INFO: Refreshing org.apache.cxf.bus.spring.BusApplicationContext@2353f67e: startup date [Wed Jun 15 17:46:49 CEST 2011]; root of context hierarchy
> 15 juin 2011 17:46:50 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-jaxrs-binding.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-xml.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-http.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-ws-security.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-soap.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-jaxws.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-addr.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-policy.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-http-jetty.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource [META-INF/cxf/cxf-extension-http.xml]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.support.DefaultListableBeanFactory registerBeanDefinition
> INFO: Overriding bean definition for bean 'org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder': replacing [Generic bean: class [org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder]; scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic bean: class [org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder]; scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in class path resource [META-INF/cxf/cxf-extension-http.xml]]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.support.DefaultListableBeanFactory registerBeanDefinition
> INFO: Overriding bean definition for bean 'org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder': replacing [Generic bean: class [org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder]; scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic bean: class [org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder]; scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in class path resource [META-INF/cxf/cxf-extension-http.xml]]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.support.DefaultListableBeanFactory registerBeanDefinition
> INFO: Overriding bean definition for bean 'org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider': replacing [Generic bean: class [org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider]; scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic bean: class [org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider]; scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in class path resource [META-INF/cxf/cxf-extension-http.xml]]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.support.DefaultListableBeanFactory registerBeanDefinition
> INFO: Overriding bean definition for bean 'org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory': replacing [Generic bean: class [org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory]; scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic bean: class [org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory]; scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in class path resource [META-INF/cxf/cxf-extension-http.xml]]
> 15 juin 2011 17:46:51 org.springframework.beans.factory.support.DefaultListableBeanFactory preInstantiateSingletons
> INFO: Pre-instantiating singletons in org.springframework.beans.factory.support.DefaultListableBeanFactory@1fcef4f7: defining beans [cxf,org.apache.cxf.bus.spring.BusApplicationListener,org.apache.cxf.bus.spring.BusWiringBeanFactoryPostProcessor,org.apache.cxf.bus.spring.Jsr250BeanPostProcessor,org.apache.cxf.bus.spring.BusExtensionPostProcessor,org.apache.cxf.resource.ResourceManager,org.apache.cxf.configuration.Configurer,org.apache.cxf.binding.BindingFactoryManager,org.apache.cxf.transport.DestinationFactoryManager,org.apache.cxf.transport.ConduitInitiatorManager,org.apache.cxf.wsdl.WSDLManager,org.apache.cxf.phase.PhaseManager,org.apache.cxf.workqueue.WorkQueueManager,org.apache.cxf.buslifecycle.BusLifeCycleManager,org.apache.cxf.endpoint.ServerRegistry,org.apache.cxf.endpoint.ServerLifeCycleManager,org.apache.cxf.endpoint.ClientLifeCycleManager,org.apache.cxf.transports.http.QueryHandlerRegistry,org.apache.cxf.endpoint.EndpointResolverRegistry,org.apache.cxf.headers.HeaderManager,org.apache.cxf.catalog.OASISCatalogManager,org.apache.cxf.service.factory.FactoryBeanListenerManager,org.apache.cxf.endpoint.ServiceContractResolverRegistry,org.apache.cxf.binding.xml.XMLBindingFactory,org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder,org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder,org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider,org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory,org.apache.cxf.ws.security.policy.WSSecurityPolicyLoader,org.apache.cxf.binding.soap.SoapBindingFactory,org.apache.cxf.binding.soap.SoapTransportFactory,org.apache.cxf.binding.soap.customEditorConfigurer,org.apache.cxf.jaxws.context.WebServiceContextResourceResolver,org.apache.cxf.jaxws.context.WebServiceContextImpl,org.apache.cxf.ws.addressing.policy.AddressingAssertionBuilder,org.apache.cxf.ws.addressing.policy.AddressingPolicyInterceptorProvider,org.apache.cxf.ws.addressing.policy.UsingAddressingAssertionBuilder,org.apache.cxf.ws.policy.AssertionBuilderRegistry,org.apache.cxf.ws.policy.PolicyInterceptorProviderRegistry,org.apache.cxf.ws.policy.attachment.external.DomainExpressionBuilderRegistry,org.apache.cxf.ws.policy.attachment.external.EndpointReferenceDomainExpressionBuilder,org.apache.cxf.ws.policy.PolicyBuilder,org.apache.cxf.ws.policy.PolicyEngine,org.apache.cxf.ws.policy.attachment.wsdl11.Wsdl11AttachmentPolicyProvider,org.apache.cxf.ws.policy.attachment.ServiceModelPolicyProvider,org.apache.cxf.ws.policy.mtom.MTOMAssertionBuilder,org.apache.cxf.ws.policy.mtom.MTOMPolicyInterceptorProvider,org.apache.cxf.transport.http_jetty.JettyHTTPTransportFactory]; root of factory hierarchy
> Service ==================
> 15 juin 2011 17:46:54 org.apache.cxf.service.factory.ReflectionServiceFactoryBean buildServiceFromWSDL
> INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from WSDL: http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
> 15 juin 2011 17:46:57 org.apache.cxf.service.factory.ReflectionServiceFactoryBean buildServiceFromWSDL
> INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from WSDL: http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
> 15 juin 2011 17:47:00 org.apache.cxf.interceptor.AbstractLoggingInterceptor log
> INFO: Outbound Message
> ---------------------------
> ID: 1
> Address: http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService
> Encoding: UTF-8
> Content-Type: text/xml
> Headers: {Accept=[*/*], SOAPAction=["add"]}
> Payload: <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><soap:Header><Action xmlns="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-920482395">add</Action><MessageID xmlns="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-1615363167">urn:uuid:de69c745-497a-4b32-980a-8e28fa633d3d</MessageID><To xmlns="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-563831333">http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService</To><ReplyTo xmlns="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-1238538872"><Address>http://www.w3.org/2005/08/addressing/anonymous</Address></ReplyTo><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soap:mustUnderstand="1"><wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Timestamp-3"><wsu:Created>2011-06-15T15:46:58.563Z</wsu:Created><wsu:Expires>2011-06-15T15:51:58.563Z</wsu:Expires></wsu:Timestamp><xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="EncKeyId-ACC6DD7816E9A2847413081528198822"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
> <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:KeyIdentifier EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier">thYJff4nVK/4RwZSJkgNY8n/leI=</wsse:KeyIdentifier></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>TBgxpGd7Ko/8uThPSzicdtseLmnd7O64OovL4DqAyHVuP/ICbAhe2D0FfHj6EBi8u/y9IuiXc++A4lnpcHt3KV6EUCyYkMgC9wxTb2QtWBhf+0vgdflCbcFJf+tNmSo2TYLgSAtIVdXnwEJi8ymzjVRTWbIpwr34YhrgA8fI0IY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey><xenc:ReferenceList xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:DataReference URI="#EncDataId-6"/><xenc:DataReference URI="#EncDataId-7"/></xenc:ReferenceList><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="EncDataId-7" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
> <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:Reference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" URI="#EncKeyId-ACC6DD7816E9A2847413081528198822"/></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>/ao9FkkBsF+EnUrFTp7EYpw9785NjBcoXmA+CEpWM1gWFB1/UFhdsgYiy/eenCX4bgWttF1F+uyV
> 5+PoeKkC6U4ZEpjFPmMJmqHBEPuR9AHon5TNIooHVd8OwI0KX3qYymgk1FLFLIkmnRo7opUuac0A
> 3+pPA5maub9cEcdHN3BqtpZSciGlahI/YxKgJhL/8oJK26YOQaBeYVliMXSK9yIVja/uAuLu6EwM
> r5o2/sXHQaGRSNqwRDfe7cGUNbpC3RkMWBbxTRMp2VJUP9N0rY1MB4KQaC440HUjUKHzcNI77VjY
> +Sn6iDSV++eZM9FiLabyAaNZd2XuH6PY7fZaOqZHxzuPp7zwhBIhhXV32OJ2fYodZfMyMpfwWKnx
> D7xwPxbxGDAIQHsZhVb6tSvQAeHuMWsIJektwe1cbrdi9kFBxABLFWUAqpBcTZsAOosik4ExsVUf
> 62btnsDGV6MqD0ydIbAY0MOYMJnLjstzPT7fVLHvhK5Br0oaJcKGQGiVPWVUH4JcwF2KcS0FyLXr
> Bn6/Br12P5tOVOeHJcPcbxRJn/PLlgaOXDQh+oCD7I8zYfHNJ2SSVvTj3ZQc+zjZ9Z7Ykh2hp2VW
> Svv+XIFXI5M=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="Signature-5">
> <ds:SignedInfo>
> <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/>
> <ds:Reference URI="#Id-112258534">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>WVUx0bfLqREMBnbFfjSvhn3N1Ig=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Id-1238538872">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>EfIGoVIvhWNCGN07fW7fg4BzttA=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Id-563831333">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>7jg4jJfUrfEIAA8vGOg440hnb74=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Id-1615363167">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>vnFedd5iyMprVfehEa71alepUqA=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Id-920482395">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>CxJfCxPkSUmyvkVVj9m7lQvtsR0=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Timestamp-3">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>AowppheezBWAdDF5+tGwW+FJlog=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#UsernameToken-4">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>qgHOLz+6KaWLhx/5/QvRGou2Zwk=</ds:DigestValue>
> </ds:Reference>
> </ds:SignedInfo>
> <ds:SignatureValue>rJ7+/dPb2L8cyfxg2BS2qwIw/LU=</ds:SignatureValue>
> <ds:KeyInfo Id="KeyId-ACC6DD7816E9A2847413081528199813">
> <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="STRId-ACC6DD7816E9A2847413081528199814"><wsse:Reference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" URI="#EncKeyId-ACC6DD7816E9A2847413081528198822" ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey"/></wsse:SecurityTokenReference>
> </ds:KeyInfo>
> </ds:Signature></wsse:Security></soap:Header><soap:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-112258534"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="EncDataId-6" Type="http://www.w3.org/2001/04/xmlenc#Content"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
> <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:Reference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" URI="#EncKeyId-ACC6DD7816E9A2847413081528198822"/></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>Z6Z5TqeuuNX9otsCBUJ0nHg7r7rLaonPcloiQxrk3w6v8J9X/DqylDz+T58kH5izL9oJfRLiyIL9
> v24g0PIUaYiBHE1OwfIZ1WBGjqgiFF8ILq4+xr/c0BewIg+1aOX2tNYDSl7fynXouD3uEV5zO82I
> yH/2I6u5TnSS5kArkgN0PW90bkgl67TSNTBUafcYv+GO2k4Yt4vSlAtGY+mOkgyNWdWp9z6IQmmL
> vhPXMI9sdjO9+nAATB8fdRICxVoBZ4O7cSkLzsyzB5cCNkRHWoj2J2J2wX6ePodTpOOLuAKM6td9
> x7kdojYNgQXDVekx3AAbi3a3/Pge+hG/lPYD9f+/lTbGpQDrIgJPRoJJDnGFcE2AAYySmJOn7pze
> 5nan</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></soap:Body></soap:Envelope>
> --------------------------------------
> 15 juin 2011 17:47:00 org.apache.cxf.interceptor.AbstractLoggingInterceptor log
> INFO: Inbound Message
> ----------------------------
> ID: 1
> Response-Code: 200
> Encoding: UTF-8
> Content-Type: text/xml;charset=utf-8
> Headers: {content-type=[text/xml;charset=utf-8], Date=[Wed, 15 Jun 2011 15:46:42 GMT], Server=[GlassFish Server Open Source Edition 3.1], transfer-encoding=[chunked], X-Powered-By=[Servlet/3.0 JSP/2.2 (GlassFish Server Open Source Edition 3.1 Java/Oracle Corporation/1.7)]}
> Payload: <?xml version='1.0' encoding='UTF-8'?><S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:exc14n="http://www.w3.org/2001/10/xml-exc-c14n#"><S:Header><To xmlns="http://www.w3.org/2005/08/addressing" wsu:Id="_5005">http://www.w3.org/2005/08/addressing/anonymous</To><Action xmlns="http://www.w3.org/2005/08/addressing" xmlns:S="http://schemas.xmlsoap.org/soap/envelope/" S:mustUnderstand="1" wsu:Id="_5003">http://calculator.me.org/CalculatorWS/addResponse</Action><MessageID xmlns="http://www.w3.org/2005/08/addressing" wsu:Id="_5002">uuid:74b175e8-a26d-451f-9a91-43b44ab5c440</MessageID><RelatesTo xmlns="http://www.w3.org/2005/08/addressing" wsu:Id="_5004">urn:uuid:de69c745-497a-4b32-980a-8e28fa633d3d</RelatesTo><wsse:Security S:mustUnderstand="1"><wsu:Timestamp xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512" xmlns:ns17="http://www.w3.org/2003/05/soap-envelope" wsu:Id="_3"><wsu:Created>2011-06-15T15:46:42Z</wsu:Created><wsu:Expires>2011-06-15T15:51:42Z</wsu:Expires></wsu:Timestamp><xenc:ReferenceList xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512" xmlns:ns17="http://www.w3.org/2003/05/soap-envelope"><xenc:DataReference URI="#_5007" /></xenc:ReferenceList><ds:Signature xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512" xmlns:ns17="http://www.w3.org/2003/05/soap-envelope" Id="_1"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="wsse S" /></ds:CanonicalizationMethod><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1" /><ds:Reference URI="#_5002"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>8rIil0YLhCXApz3m2LLNw+hyCfg=</ds:DigestValue></ds:Reference><ds:Reference URI="#_5003"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>AmZ7hFb58NXg+JWKY6TuSE4peho=</ds:DigestValue></ds:Reference><ds:Reference URI="#_5004"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>x0m4+V7SB9qZTYG1Jma3LyN3Udo=</ds:DigestValue></ds:Reference><ds:Reference URI="#_5005"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>Nd/8wVmBdLowQKMblBRYK+6xcjA=</ds:DigestValue></ds:Reference><ds:Reference URI="#_5006"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>DdV2kRGL8sX2eRCRdXtZ5mMtetw=</ds:DigestValue></ds:Reference><ds:Reference URI="#_3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><exc14n:InclusiveNamespaces PrefixList="wsu wsse S" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ds:DigestValue>gVnY4glzzN0coUKH0YOtLoYzJzU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>EKSf/J9nJRgXOpnFLjL9GrdZ8v4=</ds:SignatureValue><ds:KeyInfo><wsse:SecurityTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">GOLuRal0DdjB+XWqLeILV+j/bn4=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></S:Header><S:Body wsu:Id="_5006"><xenc:EncryptedData xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512" xmlns:ns17="http://www.w3.org/2003/05/soap-envelope" Id="_5007" Type="http://www.w3.org/2001/04/xmlenc#Content"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" /><ds:KeyInfo xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="KeyInfoType"><wsse:SecurityTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">GOLuRal0DdjB+XWqLeILV+j/bn4=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>9wm0h8fiyQMirDnLQFHMRmEAQzHJrkDxgPSW3m/R5r8hp0HDzJL9xEcf5Xd8XOgtV+ByJuGtiAa++M4h+thCMaNCjsbPR5Bnd99yf4LUJEw4UgWaT5qpLeOUJzVrSH1rTPZD18tKsnEf8W4RRIvJ3Q==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></S:Body></S:Envelope>
> --------------------------------------
> Result 1 + 1 = 2
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira