You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by "Philip Helger (Jira)" <ji...@apache.org> on 2022/05/09 09:43:00 UTC
[jira] [Updated] (WSS-520) Searching in wrong path for the message.
[ https://issues.apache.org/jira/browse/WSS-520?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Philip Helger updated WSS-520:
------------------------------
Attachment: image-2022-05-09-11-42-05-503.png
> Searching in wrong path for the message.
> ----------------------------------------
>
> Key: WSS-520
> URL: https://issues.apache.org/jira/browse/WSS-520
> Project: WSS4J
> Issue Type: Bug
> Reporter: renu
> Assignee: Colm O hEigeartaigh
> Priority: Major
> Attachments: image-2022-05-09-11-42-05-503.png
>
>
> Getting exception:
> Caused by: org.apache.wss4j.common.ext.WSSecurityException: No message with ID "certpath" found in resource bundle "org/apache/xml/security/resource/xmlsecurity". Original Exception was a java.security.cert.CertPathValidatorException and message basic constraints check failed: this is not a CA certificate
> Original Exception was java.security.cert.CertPathValidatorException: basic constraints check failed: this is not a CA certificate
> at org.apache.wss4j.common.crypto.Merlin.verifyTrust(Merlin.java:933)
> at org.apache.wss4j.dom.validate.SignatureTrustValidator.verifyTrustInCerts(SignatureTrustValidator.java:108)
> at org.apache.wss4j.dom.validate.SignatureTrustValidator.validate(SignatureTrustValidator.java:64)
> at org.apache.wss4j.dom.validate.SamlAssertionValidator.verifySignedAssertion(SamlAssertionValidator.java:130)
> at org.apache.wss4j.dom.validate.SamlAssertionValidator.validate(SamlAssertionValidator.java:109)
> Instead of searching the message in the resource bundle of wss4j , message is searched in xml security and thus causing the exception.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org