Verification failed for URI "#id-31386432"

[Rohit Chauhan <mo...@yahoo.com>]

Hi,

I am getting Verification failed for URI "id-31386432"
error on the server.


Here are the wsdd settings:

Client wsdd:

<handler
type="java:org.apache.ws.axis.security.WSDoAllSender"
>
       <parameter name="action" value="Timestamp
SAMLTokenSigned"/>
       <parameter name="samlPropFile"
value="saml.properties"/>
       <parameter name="signatureKeyIdentifier"
value="DirectReference" />
       <parameter name="signaturePropFile"
value="crypto.client.properties" />
       <parameter
name="enableNamespacePrefixOptimization" value="false"
/>
       <parameter name="disablePrettyXML"
value="true"/>
       <parameter name="user"
value="2721845cfa40e36c8dee088db9a4fbfbd6c70436"/>
      </handler>

Server WSDD:

<handler
type="java:org.apache.ws.axis.security.WSDoAllReceiver">
     <parameter name="passwordCallbackClass"
value="com.fnf.xes.framework.axis.security.server.PWServerCallback"/>
     <parameter name="action" value="Timestamp
Signature SAMLTokenUnsigned"/>
     <parameter name="signaturePropFile"
value="crypto.server.properties"/>
     <parameter
name="enableNamespacePrefixOptimization" value="false"
/>
     <parameter name="disablePrettyXML" value="true"/>
    </handler>

My saml.properties file is as follows:

 

org.apache.ws.security.saml.issuerClass=org.apache.ws.security.saml.SAMLIssuerImpl

org.apache.ws.security.saml.issuer.cryptoProp.file=crypto.client.properties

org.apache.ws.security.saml.issuer.key.name=clientkey

org.apache.ws.security.saml.issuer.key.password=clientkeypassword

org.apache.ws.security.saml.issuer=www.example.com

org.apache.ws.security.saml.subjectNameId.name=myuser

org.apache.ws.security.saml.subjectNameId.qualifier=www.example.com

org.apache.ws.security.saml.authenticationMethod=password

org.apache.ws.security.saml.confirmationMethod=senderVouches

 

My crypto.client.properties file is follows:

 

org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin

org.apache.ws.security.crypto.merlin.keystore.type=jks

org.apache.ws.security.crypto.merlin.keystore.password=client

org.apache.ws.security.crypto.merlin.file=client.keystore

I have created a keystore using keytool from sun java.


Reference     I   Verification successful for URI
"#STRSAMLId-1345122"
[7/16/06 19:14:55:493 EDT] 0000003f Reference     W  
Verification failed for URI "#id-31386432"
[7/16/06 19:14:55:503 EDT] 0000003f SystemErr     R  
org.apache.ws.security.WSSecurityException: The
signature verification failed
	at
org.apache.ws.security.WSSecurityEngine.verifyXMLSignature(WSSecurityEngine.java:627)
	at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:320)



I would appreciate any help in getting this error
resolved.

Thanks,

Rohit

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org