You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by anshuk pal chaudhuri <an...@yahoo.com> on 2005/11/17 05:24:43 UTC

XML Signature Problem

HI,

I am having this weird problem.

The Problem:
I am creating a saml assertion(using opensaml),signing
it--which is in turn using XMLSignature of
XMLSecurity.NO ISSUES in this.Working Fine.

The moment I am verfying that saml assertion at the
other end,its creating a problem.Its throwing an
exception:

org.apache.xml.security.utils.resolver.ResourceResolverException:Could
not find a resolver for URI null and Base null
	at
org.apache.xml.security.utils.resolver.ResourceResolver.getInstance(Unknown
Source)
	at
org.apache.xml.security.signature.Reference.getContentsBeforeTransformation(Reference.java:412)
	at
org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Reference.java:638)
	at
org.apache.xml.security.signature.Reference.calculateDigest(Reference.java:725)
	at
org.apache.xml.security.signature.Reference.verify(Reference.java:774)
	at
org.apache.xml.security.signature.Manifest.verifyReferences(Manifest.java:318)
	at
org.apache.xml.security.signature.SignedInfo.verify(SignedInfo.java:224)
	at
org.apache.xml.security.signature.XMLSignature.checkSignatureValue(XMLSignature.java:592)
	at
org.opensaml.SAMLSignedObject.verify(SAMLSignedObject.java:340)
	at
saml.SimpleSAMLInsertion.main(SimpleSAMLInsertion.java:181)
java.lang.NullPointerException
	at
org.apache.xml.security.transforms.implementations.TransformEnvelopedSignature.enginePerformTransform(Unknown
Source)
	at
org.apache.xml.security.transforms.Transform.performTransform(Transform.java:308)
	at
org.apache.xml.security.transforms.Transforms.performTransforms(Unknown
Source)
	at
org.apache.xml.security.signature.Reference.getContentsAfterTransformation(Reference.java:468)
	at
org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Reference.java:639)
	at
org.apache.xml.security.signature.Reference.calculateDigest(Reference.java:725)
	at
org.apache.xml.security.signature.Reference.verify(Reference.java:774)
	at
org.apache.xml.security.signature.Manifest.verifyReferences(Manifest.java:318)
	at
org.apache.xml.security.signature.SignedInfo.verify(SignedInfo.java:224)
	at
org.apache.xml.security.signature.XMLSignature.checkSignatureValue(XMLSignature.java:592)
	at
org.opensaml.SAMLSignedObject.verify(SAMLSignedObject.java:340)
	at
saml.SimpleSAMLInsertion.main(SimpleSAMLInsertion.java:181)


This problem is specific to XMLSignature and not to
Open SAML.
What I think is that,the references element contains
the URI attribute,which works fine at the first
end(while craeting the signature),but at the other end
the URI is becoming null.
That is the reason:
ResourceResolver resolver =
ResourceResolver.getInstance(URIAttr,this._baseURI,
this._manifest._perManifestResolvers)
is throwing an exception.

Can anyone help?
Regards,
Anshuk



	
		
__________________________________ 
Yahoo! Mail - PC Magazine Editors' Choice 2005 
http://mail.yahoo.com

Re: XML Signature Problem

Posted by Davanum Srinivas <da...@gmail.com>.
plz check wss4j source code on how we do this. we don't see this problem.

-- dims

On 11/16/05, anshuk pal chaudhuri <an...@yahoo.com> wrote:
> HI,
>
> I am having this weird problem.
>
> The Problem:
> I am creating a saml assertion(using opensaml),signing
> it--which is in turn using XMLSignature of
> XMLSecurity.NO ISSUES in this.Working Fine.
>
> The moment I am verfying that saml assertion at the
> other end,its creating a problem.Its throwing an
> exception:
>
> org.apache.xml.security.utils.resolver.ResourceResolverException:Could
> not find a resolver for URI null and Base null
>         at
> org.apache.xml.security.utils.resolver.ResourceResolver.getInstance(Unknown
> Source)
>         at
> org.apache.xml.security.signature.Reference.getContentsBeforeTransformation(Reference.java:412)
>         at
> org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Reference.java:638)
>         at
> org.apache.xml.security.signature.Reference.calculateDigest(Reference.java:725)
>         at
> org.apache.xml.security.signature.Reference.verify(Reference.java:774)
>         at
> org.apache.xml.security.signature.Manifest.verifyReferences(Manifest.java:318)
>         at
> org.apache.xml.security.signature.SignedInfo.verify(SignedInfo.java:224)
>         at
> org.apache.xml.security.signature.XMLSignature.checkSignatureValue(XMLSignature.java:592)
>         at
> org.opensaml.SAMLSignedObject.verify(SAMLSignedObject.java:340)
>         at
> saml.SimpleSAMLInsertion.main(SimpleSAMLInsertion.java:181)
> java.lang.NullPointerException
>         at
> org.apache.xml.security.transforms.implementations.TransformEnvelopedSignature.enginePerformTransform(Unknown
> Source)
>         at
> org.apache.xml.security.transforms.Transform.performTransform(Transform.java:308)
>         at
> org.apache.xml.security.transforms.Transforms.performTransforms(Unknown
> Source)
>         at
> org.apache.xml.security.signature.Reference.getContentsAfterTransformation(Reference.java:468)
>         at
> org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Reference.java:639)
>         at
> org.apache.xml.security.signature.Reference.calculateDigest(Reference.java:725)
>         at
> org.apache.xml.security.signature.Reference.verify(Reference.java:774)
>         at
> org.apache.xml.security.signature.Manifest.verifyReferences(Manifest.java:318)
>         at
> org.apache.xml.security.signature.SignedInfo.verify(SignedInfo.java:224)
>         at
> org.apache.xml.security.signature.XMLSignature.checkSignatureValue(XMLSignature.java:592)
>         at
> org.opensaml.SAMLSignedObject.verify(SAMLSignedObject.java:340)
>         at
> saml.SimpleSAMLInsertion.main(SimpleSAMLInsertion.java:181)
>
>
> This problem is specific to XMLSignature and not to
> Open SAML.
> What I think is that,the references element contains
> the URI attribute,which works fine at the first
> end(while craeting the signature),but at the other end
> the URI is becoming null.
> That is the reason:
> ResourceResolver resolver =
> ResourceResolver.getInstance(URIAttr,this._baseURI,
> this._manifest._perManifestResolvers)
> is throwing an exception.
>
> Can anyone help?
> Regards,
> Anshuk
>
>
>
>
>
> __________________________________
> Yahoo! Mail - PC Magazine Editors' Choice 2005
> http://mail.yahoo.com
>


--
Davanum Srinivas : http://wso2.com/blogs/