Policy Sample 04 on application scope fails with "Error in key derivation"
--------------------------------------------------------------------------
Key: RAMPART-116
URL: https://issues.apache.org/jira/browse/RAMPART-116
Project: Rampart
Issue Type: Bug
Affects Versions: 1.2
Environment: Windows XP SP2, Java 1.6.0_02, Axis2 1.2
Reporter: David Karnok
When I try to run the policy sample 04 application with service
scope='application' (or any service based on those policy configurations) I get
the following exception. If it is in request scope no exception is raised and
works OK.
org.apache.ws.security.WSSecurityException: Error in key derivation; nested
exception is:
org.apache.ws.security.conversation.ConversationException: Error in key
derivation
at
org.apache.ws.security.processor.DerivedKeyTokenProcessor.deriveKey(DerivedKeyTokenProcessor.java:104)
at
org.apache.ws.security.processor.DerivedKeyTokenProcessor.handleToken(DerivedKeyTokenProcessor.java:82)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:284)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:206)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:159)
at org.apache.rampart.RampartEngine.process(RampartEngine.java:65)
at
org.apache.rampart.handler.RampartReceiver.invoke(RampartReceiver.java:71)
at org.apache.axis2.engine.Phase.invoke(Phase.java:383)
at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:203)
at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:131)
at
org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPostRequest(HTTPTransportUtils.java:279)
at
org.apache.axis2.transport.http.HTTPWorker.service(HTTPWorker.java:216)
at
org.apache.axis2.transport.http.server.AxisHttpService.doService(AxisHttpService.java:275)
at
org.apache.axis2.transport.http.server.AxisHttpService.handleRequest(AxisHttpService.java:184)
at
org.apache.axis2.transport.http.server.HttpServiceProcessor.run(HttpServiceProcessor.java:74)
at
edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:665)
at
edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:690)
at java.lang.Thread.run(Thread.java:619)
Caused by: org.apache.ws.security.conversation.ConversationException: Error in
key derivation
at
org.apache.ws.security.conversation.dkalgo.P_SHA1.createKey(P_SHA1.java:65)
at
org.apache.ws.security.processor.DerivedKeyTokenProcessor.deriveKey(DerivedKeyTokenProcessor.java:101)
... 17 more
Caused by: java.lang.IllegalArgumentException: Missing argument
at javax.crypto.spec.SecretKeySpec.<init>(DashoA13*..)
at
org.apache.ws.security.conversation.dkalgo.P_SHA1.P_hash(P_SHA1.java:86)
at
org.apache.ws.security.conversation.dkalgo.P_SHA1.createKey(P_SHA1.java:55)
... 18 more
Seems, that the sct token is incorrectrly created at the client side.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.