You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2014/12/09 16:22:12 UTC
[jira] [Commented] (WSS-520) Searching in wrong path for the
message.
[ https://issues.apache.org/jira/browse/WSS-520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14239527#comment-14239527 ]
Colm O hEigeartaigh commented on WSS-520:
-----------------------------------------
How are you configuring WSS4J? The default configuration creates the WSS4JResourceBundle which wraps the message properties in XML Security. Are you by any chance calling XML Security's Init.init() instead of the WSS4J WSSConfig methods?
Colm.
> Searching in wrong path for the message.
> ----------------------------------------
>
> Key: WSS-520
> URL: https://issues.apache.org/jira/browse/WSS-520
> Project: WSS4J
> Issue Type: Bug
> Reporter: renu
> Assignee: Colm O hEigeartaigh
>
> Getting exception:
> Caused by: org.apache.wss4j.common.ext.WSSecurityException: No message with ID "certpath" found in resource bundle "org/apache/xml/security/resource/xmlsecurity". Original Exception was a java.security.cert.CertPathValidatorException and message basic constraints check failed: this is not a CA certificate
> Original Exception was java.security.cert.CertPathValidatorException: basic constraints check failed: this is not a CA certificate
> at org.apache.wss4j.common.crypto.Merlin.verifyTrust(Merlin.java:933)
> at org.apache.wss4j.dom.validate.SignatureTrustValidator.verifyTrustInCerts(SignatureTrustValidator.java:108)
> at org.apache.wss4j.dom.validate.SignatureTrustValidator.validate(SignatureTrustValidator.java:64)
> at org.apache.wss4j.dom.validate.SamlAssertionValidator.verifySignedAssertion(SamlAssertionValidator.java:130)
> at org.apache.wss4j.dom.validate.SamlAssertionValidator.validate(SamlAssertionValidator.java:109)
> Instead of searching the message in the resource bundle of wss4j , message is searched in xml security and thus causing the exception.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org