You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by tobias <to...@t-systems.com> on 2015/05/19 13:50:46 UTC
MissingResourceFailureException
I`m getting this error
org.apache.xml.security.signature.MissingResourceFailureException: The
Reference for URI #SignedProperties-1430866800583 has no XMLSignatureInput
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
Id="Signature-1430866800583">
<ds:SignedInfo>
<ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:CanonicalizationMethod>
<ds:SignatureMethod
Algorithm="http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1"></ds:SignatureMethod>
<ds:Reference Id="Reference-TSL-1430866800574" URI="">
<ds:Transforms>
<ds:Transform
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></ds:Transform>
<ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform>
</ds:Transforms>
<ds:DigestMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></ds:DigestMethod>
<ds:DigestValue>43acDj5lSIqh6LBvpVbQ9Hj9QFjX0vZ4IWrw7E8OY0g=
</ds:DigestValue>
</ds:Reference>
<ds:Reference Id="Reference-SignedProperties-1430866800684"
Type="http://uri.etsi.org/01903#SignedProperties"
URI="#SignedProperties-1430866800583">
<ds:Transforms>
<ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform>
</ds:Transforms>
<ds:DigestMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></ds:DigestMethod>
<ds:DigestValue>ms/B/LYB/XjPHZeuHpBgtTYG1fq9sLfqld5ArY4E/N4=
</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>FOo8jFgHC/rqLaA+R+8vuTn7n3Ds/T6tPeEZj6K5AkKPtcvEokGMtdzW07kTu+xONMFTilfo6A+f
VO17ojGvDykrG8a1imXWgvmRW5TdeA7YuQG7fov6DMWyr0sdukgcp9CRL7tp3wp4o97t4uJKWtj1
rczaSgUev2JBwGmiWeBrZGsS07MhhIS/XTSH3wqTeXanhzTmNjSSrWx+tA2ynqVTOXm39DAftq0a
oGjifhKXFStDSwLhgV/ggMvQGvjFNByUqrp9AERJOo24M1mZ/mQ00vJXEIrWlVAyhxvjgvfqyFcz
dPEcLCK9eXcPhVStX4FNtVtp/gvDtuPUOaiG3g==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIELTCCAxWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBgTELMAkGA1UEBhMCREUxHzAdBgNVBAoM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=
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<ds:Object>
<xades:QualifyingProperties
xmlns:xades="http://uri.etsi.org/01903/v1.3.2#"
Target="#Signature-1430866800583">
<xades:SignedProperties Id="SignedProperties-1430866800583">
<xades:SignedSignatureProperties>
<xades:SigningTime>2015-05-05T23:00:00Z</xades:SigningTime>
<xades:SigningCertificate>
<xades:Cert>
<xades:CertDigest>
<ds:DigestMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></ds:DigestMethod>
<ds:DigestValue>+sU4JWMtdqiEvX3MI3B6Q8DZvrJb1+GQ46PDwXC5glk=
</ds:DigestValue>
</xades:CertDigest>
<xades:IssuerSerial>
<ds:X509IssuerName>CN=GEM.TSL-CA3 TEST-ONLY,OU=TSL-Signer-CA
der Telematikinfrastruktur,O=gematik GmbH NOT-VALID,C=DE
</ds:X509IssuerName>
<ds:X509SerialNumber>2</ds:X509SerialNumber>
</xades:IssuerSerial>
</xades:Cert>
</xades:SigningCertificate>
<xades:SignaturePolicyIdentifier></xades:SignaturePolicyIdentifier>
</xades:SignedSignatureProperties>
<xades:SignedDataObjectProperties>
<xades:DataObjectFormat
ObjectReference="#Reference-TSL-1430866800574">
<xades:MimeType>text/xml</xades:MimeType>
</xades:DataObjectFormat>
</xades:SignedDataObjectProperties>
</xades:SignedProperties>
</xades:QualifyingProperties>
</ds:Object>
</ds:Signature>
I tried to change the signature via xpath, but then the signature
verification is failing. What can I do?
--
View this message in context: http://apache-xml-project.6118.n7.nabble.com/MissingResourceFailureException-tp42081.html
Sent from the Apache XML - Security - Dev mailing list archive at Nabble.com.
Re: MissingResourceFailureException
Posted by tobias <to...@t-systems.com>.
I found the problem! I forgot to call setIdAttributeNS(null, "Id", true); for
all id attributes in the xml document.
e.g.
NodeList allIds = findNodes("//*[@Id]", document);
for (int i = 0; i < allIds.getLength(); i++) {
Element id = (Element) allIds.item(i);
id.setIdAttributeNS(null, "Id", true);
}
--
View this message in context: http://apache-xml-project.6118.n7.nabble.com/MissingResourceFailureException-tp42081p42082.html
Sent from the Apache XML - Security - Dev mailing list archive at Nabble.com.