You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-dev@axis.apache.org by "Thomas Poetter (JIRA)" <ji...@apache.org> on 2008/09/02 17:39:44 UTC

[jira] Updated: (AXIS2-3999) InvalidSecurity (using HttpClient with payload from file)

     [ https://issues.apache.org/jira/browse/AXIS2-3999?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Thomas Poetter updated AXIS2-3999:
----------------------------------

    Attachment: HttpClient-SOAP-Request.txt

The manually fine-tuned SOAP request based on a previous AXIS2 message because XmlBeans namespace parameterization doesn't work properly, c.f. AXIS2-4006.

> InvalidSecurity (using HttpClient with payload from file)
> ---------------------------------------------------------
>
>                 Key: AXIS2-3999
>                 URL: https://issues.apache.org/jira/browse/AXIS2-3999
>             Project: Axis 2.0 (Axis2)
>          Issue Type: Bug
>    Affects Versions: 1.4
>         Environment: Win32 (WinXP SP3 GER), Java 1.5.0_15, AXIS2 1.4 with Rampart 1.4, Rahas 1.4, Jakarta Commons-HttpClient/3.1
>            Reporter: Thomas Poetter
>            Assignee: Nandana Mihindukulasooriya
>         Attachments: HttpClient-SOAP-Request.txt
>
>
> Taking the SOAP message that was sent in the previous message (i.e. previous bug report), tuning it a bit (e.g. removing empty namespaces ""), the following error messages were output.
> No further information is given in this case so that I cannot manage to find the reason for this error message.
> SOAP Request:
> POST /axis2/services/AccountInformation HTTP/1.1
> Content-Type: application/soap+xml; charset=UTF-8; action="http://ws.equens.com/payments/AccountInformation/GetInfo"
> User-Agent: Jakarta Commons-HttpClient/3.1
> Host: 127.0.0.1:8090
> Transfer-Encoding: chunked
> 1a7e
> <?xml version="1.0" encoding="UTF-8"?>
> <soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
> 	<soapenv:Header xmlns:wsa="http://www.w3.org/2005/08/addressing">
> 		<wss:Security xmlns:wss="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soapenv:mustUnderstand="true">
> 			<wss:BinarySecurityToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" wsu:Id="CertId-7372569">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
> f9c
> rdAbjxJz0E1XEncIky608abKLouURtxdKrdd6yrUyRtoQvyqQHU7NqwWatk0syLW2IKWniah7m/VT7NNyZsRsSfoofFfmaVX4vQHDenDKVTcOYsm/uDCLBj+zqRmNMRs/OMW0nncuDRrfayg4Lybjw=</wss:BinarySecurityToken>
> 			<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="Signature-20735553">
> 				<ds:SignedInfo>
> 					<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 					<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
> 					<ds:Reference URI="#Id-12206609">
> 						<ds:Transforms>
> 							<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 						</ds:Transforms>
> 						<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
> 						<ds:DigestValue>F+DMf1QzTBvj2qACOB4ppAiG8aYWOYhXzinbvr85POQ=</ds:DigestValue>
> 					</ds:Reference>
> 					<ds:Reference URI="#id-14900151">
> 						<ds:Transforms>
> 							<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 						</ds:Transforms>
> 						<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
> 						<ds:DigestValue>Uba+owZ57cd1liIWcXwuSN7obzxAUT5wp5kA6Q0fJTM=</ds:DigestValue>
> 					</ds:Reference>
> 					<ds:Reference URI="#id-10127976">
> 						<ds:Transforms>
> 							<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 						</ds:Transforms>
> 						<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
> 						<ds:DigestValue>Dbo4gbVEuNtuG6iXMVgkjtZMLGq6c5aBwm6i5SPnoFE=</ds:DigestValue>
> 					</ds:Reference>
> 					<ds:Reference URI="#id-32826737">
> 						<ds:Transforms>
> 							<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 						</ds:Transforms>
> 						<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
> 						<ds:DigestValue>4MSPIV6PWzLtfXrLNzU0VV3Y1i+31cxGx2CnQbuJuNk=</ds:DigestValue>
> 					</ds:Reference>
> 					<ds:Reference URI="#UsernameToken-13190097">
> 						<ds:Transforms>
> 							<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> 						</ds:Transforms>
> 						<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
> 						<ds:DigestValue>JvU/yfTLUuvpIAziVgRFPih99fa5U6161O4EtxSRkJc=</ds:DigestValue>
> 					</ds:Reference>
> 				</ds:SignedInfo>
> 				<ds:SignatureValue>
> O32Gwhey63CpNaNEB467UwE9KNwtj4HVtodXDPyymSKKCrQKjZPzHN8wzPFjf37yW+W8/2mLoLTe
> zd8NHpLJYu1woGzgmaAaqICgjwhflU8Stx9KAk1tV792gDunDkuNhpqe58SCaLijOyGPk2aPli20
> 9KO8gVpO/h61YPEPgK0=
> </ds:SignatureValue>
> 				<ds:KeyInfo Id="KeyId-5285449">
> 					<wss:SecurityTokenReference xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="STRId-22992473">
> 						<wss:Reference URI="#CertId-7372569" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/>
> 					</wss:SecurityTokenReference>
> 				</ds:KeyInfo>
> 			</ds:Signature>
> 		</wss:Security>
> 		<wsa:To xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="id-14900151">http://localhost:8090/axis2/services/AccountInformation</wsa:To>
> 		<wsa:ReplyTo>
> 			<wsa:Address>http://185.1.23.205:6060/axis2/services/AccountInformation1219766982903_1</wsa:Address>
> 		</wsa:ReplyTo>
> 		<wsa:MessageID xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="id-10127976">urn:uuid:136751E317B5C3A9391219766983323</wsa:MessageID>
> 		<wsa:Action xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="id-32826737">http://ws.equens.com/payments/AccountInformation/GetInfo</wsa:Action>
> 	</soapenv:Header>
> 	<soapenv:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-12206609">
> 		<InterActiveRequest xmlns="https://ws.equens.com/payments/AccountInformation" xmlns:axis2ns1="http://www.interpay.nl/InterActive/schemas/accountinformation/v1.0/" axis2ns1:schemaLocation="file:///C:/AIS/schemata/InterActive-accountinformation-v1.0.xsd"> 
> 			<Hdr>
> 				<Sdr xmlns="http://www.interpay.nl/InterActive/schemas/core/v1.0/">http://XXX.com/</Sdr>
> 				<SdrAppId xmlns="http://www.interpay.nl/InterActive/schemas/core/v1.0/">AIS_AXIS2_XMLBeans</SdrAppId>
> 				<MsgRef xmlns="http://www.interpay.nl/InterActive/schemas/core/v1.0/">http://XXX.com/559985a9-e08f-4105-b816-77f9c90c66a0</MsgRef>
> 				<CreDtTm xmlns="http://www.interpay.nl/InterActive/schemas/core/v1.0/">2008-08-26T16:09:43.153+00:00</CreDtTm>
> 			</Hdr>
> 			<ReqBdy>
> 				<AccInfReq>
> 					<Ctry>NL</Ctry>
> 					<Acct>
> 						<Id xmlns="urn:interpay:iso:std:iso:20022:xsd:pain.001.001.01">
> 							<DmstAcct>
> 								<Id>0123456789</Id>
> 							</DmstAcct>
> 						</Id>
> 					</Acct>
> 					<ReqRef>e67a6d57-8a8c-4abb-8fe5-fcef9a0ebc23</ReqRef>
> 					<SwtchOvReq>false</SwtchOvReq>
> 				</AccInfReq>
> 			</ReqBdy>
> 		</InterActiveRequest>
> 	</soapenv:Body>
> </soapenv:Envelope>
> 0
> Client reports:
> org.apache.commons.httpclient.NoHttpResponseException: The server 127.0.0.1 failed to respond
> 	at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(HttpMethodBase.java:1976)
> 	at org.apache.commons.httpclient.HttpMethodBase.readResponse(HttpMethodBase.java:1735)
> 	at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1098)
> 	at .ais.variants.SOAPSender.sendHTTPLayer4(SOAPSender.java:761)
> 	at .ais.variants.SOAPSender.main(SOAPSender.java:811)
> Server reports:
> [INFO] Listening on port 8080
> [ERROR] InvalidSecurity
> org.apache.axis2.AxisFault: InvalidSecurity
>         at org.apache.rampart.handler.PostDispatchVerificationHandler.invoke(Pos
> tDispatchVerificationHandler.java:143)
>         at org.apache.axis2.engine.Phase.invoke(Phase.java:317)
>         at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:264)
>         at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:163)
>         at org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPostRequest(HTTPTransportUtils.java:275)
>         at org.apache.axis2.transport.http.HTTPWorker.service(HTTPWorker.java:278)
>         at org.apache.axis2.transport.http.server.AxisHttpService.doService(AxisHttpService.java:281)
>         at org.apache.axis2.transport.http.server.AxisHttpService.handleRequest(AxisHttpService.java:187)
>         at org.apache.axis2.transport.http.server.HttpServiceProcessor.run(HttpServiceProcessor.java:82)
>         at edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:665)
>         at edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:690)
>         at java.lang.Thread.run(Thread.java:595)
> [INFO] Unable to sendViaPost to url[http://185.1.23.205:6060/axis2/services/AccountInformation1219766982903_1]
> java.net.ConnectException: Connection refused: connect
>         at java.net.PlainSocketImpl.socketConnect(Native Method)
>         at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
>         at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
>         at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
>         at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
>         at java.net.Socket.connect(Socket.java:520)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>         at java.lang.reflect.Method.invoke(Method.java:585)
>         at org.apache.commons.httpclient.protocol.ReflectionSocketFactory.createSocket(ReflectionSocketFactory.java:140)
>         at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:125)
>         at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707)
>         at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361)
>         at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:387)
>         at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
>         at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
>         at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:346)
>         at org.apache.axis2.transport.http.AbstractHTTPSender.executeMethod(AbstractHTTPSender.java:542)
>         at org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:189)
>         at org.apache.axis2.transport.http.HTTPSender.send(HTTPSender.java:75)
>         at org.apache.axis2.transport.http.CommonsHTTPTransportSender.writeMessa
> geWithCommons(CommonsHTTPTransportSender.java:364)
>         at org.apache.axis2.transport.http.CommonsHTTPTransportSender.invoke(CommonsHTTPTransportSender.java:208)
>         at org.apache.axis2.engine.AxisEngine.sendFault(AxisEngine.java:530)
>         at org.apache.axis2.transport.http.server.AxisHttpService.doService(AxisHttpService.java:320)
>         at org.apache.axis2.transport.http.server.AxisHttpService.handleRequest(AxisHttpService.java:187)
>         at org.apache.axis2.transport.http.server.HttpServiceProcessor.run(HttpServiceProcessor.java:82)
>         at edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:665)
>         at edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:690)
>         at java.lang.Thread.run(Thread.java:595)
> [WARN] Connection refused: connect
> org.apache.axis2.AxisFault: Connection refused: connect
>         at org.apache.axis2.AxisFault.makeFault(AxisFault.java:430)
>         at org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:193)
>         at org.apache.axis2.transport.http.HTTPSender.send(HTTPSender.java:75)
>         at org.apache.axis2.transport.http.CommonsHTTPTransportSender.writeMessageWithCommons(CommonsHTTPTransportSender.java:364)
>         at org.apache.axis2.transport.http.CommonsHTTPTransportSender.invoke(CommonsHTTPTransportSender.java:208)
>         at org.apache.axis2.engine.AxisEngine.sendFault(AxisEngine.java:530)
>         at org.apache.axis2.transport.http.server.AxisHttpService.doService(AxisHttpService.java:320)
>         at org.apache.axis2.transport.http.server.AxisHttpService.handleRequest(AxisHttpService.java:187)
>         at org.apache.axis2.transport.http.server.HttpServiceProcessor.run(HttpServiceProcessor.java:82)
>         at edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:665)
>         at edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:690)
>         at java.lang.Thread.run(Thread.java:595)
> Caused by: java.net.ConnectException: Connection refused: connect
>         at java.net.PlainSocketImpl.socketConnect(Native Method)
>         at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
>         at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
>         at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
>         at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
>         at java.net.Socket.connect(Socket.java:520)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>         at java.lang.reflect.Method.invoke(Method.java:585)
>         at org.apache.commons.httpclient.protocol.ReflectionSocketFactory.createSocket(ReflectionSocketFactory.java:140)
>         at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:125)
>         at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707)
>         at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$Http
> ConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361)
>         at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:387)
>         at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
>         at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
>         at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:346)
>         at org.apache.axis2.transport.http.AbstractHTTPSender.executeMethod(AbstractHTTPSender.java:542)
>         at org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:189)
>         ... 10 more

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org