Hi Srihari,
What is a the Axis2 and Rampart version you are using at the client side
and the server side ?
On Tue, Sep 30, 2008 at 10:43 PM, Srihari <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I am having trouble with digital signatures using MTOM. we had a gateway
> inbeween our service and the client. my serverice is written in Axis2.
>
> I am able to send the request sucessfully with CXF client only. where as
> when I use SOAPUI and Axis client I keep getting the error.
>
> I am testing the same locally and I get the error "The signature or
> decryption was invalid"
>
> Am i doing anything wrong here.
>
> Here is the reuest through SOAPUI:
>
> ------=_Part_0_1080367.1222779384709
> Content-Type: text/xml; charset=UTF-8
> Content-Transfer-Encoding: 8bit
> Content-ID: <[EMAIL PROTECTED]>
>
> <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/
> "
> xmlns:urn="urn:parameters.erews.v2.ssa.gov" xmlns:xm="
> http://www.w3.org/2005/05/xmlmime";>
> <soapenv:Header>
> <wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> "><wsse:UsernameToken
> wsu:Id="UsernameToken-22599499" xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "><wsse:Username>EREWSDV2</wsse:Username><wsse:Password
> Type="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText
> ">1newpass</wsse:Password><wsse:Nonce>kBeGeWatmUwVGU+11hS9KA==</wsse:Nonce><wsu:Created>2008-09-30T12:56:24.709Z</wsu:Created></wsse:UsernameToken><ds:Signature
> Id="Signature-28659376" xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <ds:SignedInfo>
>
> <ds:CanonicalizationMethod Algorithm="
> http://www.w3.org/2001/10/xml-exc-c14n#"/>
> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1
> "/>
> <ds:Reference URI="#id-11911470">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>OYSOV658nmGLSYODZfjCLJbh1s0=</ds:DigestValue>
> </ds:Reference>
> </ds:SignedInfo>
> <ds:SignatureValue>
>
> CXr+FwqAflbfjanAmEUQ7Vjr6E8bzXfOLFrL6mqM+kj+u/oLfyElA29kGshkxrQ8orUOjMtbnoGz
>
> CvvP6rq57nGm5ziyx3iHBFYZKccFlB1goXoCnQjDOuPYRie110dygVh4KnjwTK/VIXUTH9fphfwk
> i1wMTXsCF3TynAyxLb0=
> </ds:SignatureValue>
> <ds:KeyInfo Id="KeyId-16151500">
> <wsse:SecurityTokenReference wsu:Id="STRId-14277585" xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "><wsse:KeyIdentifier
> EncodingType="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
> "
> ValueType="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier
>
> ">YPArt7yFPXVHnTx8yvnmHBH1SBI=</wsse:KeyIdentifier></wsse:SecurityTokenReference>
> </ds:KeyInfo>
> </ds:Signature></wsse:Security></soapenv:Header>
> <soapenv:Body wsu:Id="id-11911470" xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> ">
> <urn:SubmitBulkFileRequest>
> <urn:SubmitBulkFileRequest>
> <urn:fileName>test</urn:fileName>
> <urn:fileSize>123</urn:fileSize>
> <urn:checkSum>xxxxxxxxx</urn:checkSum>
> </urn:SubmitBulkFileRequest>
> <urn:AttachmentFile
> xm:contentType="application/?">aGVsbG8=</urn:AttachmentFile>
> </urn:SubmitBulkFileRequest>
> </soapenv:Body>
> </soapenv:Envelope>
> ------=_Part_0_1080367.1222779384709
> Content-Type: text/plain; charset=us-ascii
> Content-Transfer-Encoding: 7bit
> Content-ID: <870267247384>
>
> hello
> ------=_Part_0_1080367.1222779384709--
>
>
>
>
>
> soap request using CXF client:
>
> POST /EREWSV2/services/EREWebServices HTTP/1.1
> Content-Type: multipart/related; type="application/xop+xml";
> boundary="----=_Part_0_28008463.1222778483657"; start="<
> [EMAIL PROTECTED]>"; start-info="text/xml"; charset=UTF-8
> SOAPAction: "submitBulkFile"
> Accept: *
> Cache-Control: no-cache
> Pragma: no-cache
> User-Agent: Java/1.5.0_08
> Host: localhost:8000
> Connection: keep-alive
> Transfer-Encoding: chunked
>
> ffb
>
> ------=_Part_0_28008463.1222778483657
> Content-Type: application/xop+xml; charset=UTF-8; type="text/xml";
> Content-Transfer-Encoding: binary
> Content-ID: <[EMAIL PROTECTED]>
>
> <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/";>
> <soap:Header>
> <wsse:Security xmlns:wsse="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> "><wsse:BinarySecurityToken
> xmlns:wsse="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> "
> xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
> EncodingType="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
> "
> ValueType="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3
> "
>
> wsu:Id="CertId-526577">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</wsse:BinarySecurityToken><ds:Signature
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; Id="Signature-29529080">
> <ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
>
> <ds:CanonicalizationMethod xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
> <ds:SignatureMethod xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
> Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"; />
> <ds:Reference xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
> URI="#id-17388264">
> <ds:Transforms xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <ds:Transform xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; Algorithm="
> http://www.w3.org/2001/10/xml-exc-c14n#"; />
> </ds:Transforms>
> <ds:DigestMethod xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; Algorithm="
> http://www.w3.org/2000/09/xmldsig#sha1"; />
> <ds:DigestValue xmlns:ds="http://www.w3.org/2000/09/xmldsig#
> ">fPdPXCv7+ZHlymEbWXMIdaGUzK4=</ds:DigestValue>
> </ds:Reference>
> </ds:SignedInfo>
> <ds:SignatureValue xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
>
> PJbGtY5eUpyBMDtbK5KIJb7I5DEHu8auCmB4S73z+Qc0BjWgri/7B4PhRY+RpACXnxeTBW+k9vIk
>
> mQ67eA0HHUFaIA3GfsjF+77fDNhwdM8zW4vJOZsWDgUsOkwfpfNWYBhag5Mk1yYz9bvKQ2hBOp0W
> 2j53GfI55I4gbufd944=
> </ds:SignatureValue>
> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
> Id="KeyId-23678666">
> <wsse:SecurityTokenReference xmlns:wsse="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> "
> xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
> wsu:Id="STRId-10259519"><wsse:Reference xmlns:wsse="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> "
> URI="#CertId-526577" ValueType="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3
> "
> /></wsse:SecurityTokenReference>
> </ds:KeyInfo>
> </ds:Signature><wsse:UsernameToken xmlns:wsse="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> "
> xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
> wsu:Id="UsernameToken-31779675"><wsse:Username xmlns:wsse="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> ">EREWSDV2</wsse:Username><wsse:Password
> xmlns:wsse="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> "
> Type="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText
> ">1newpass</wsse:Password></wsse:UsernameToken><wsu:Timestamp
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-
> 4a2 <http://docs.oasis-open.org/wss/2004/01/oasis-4a2>
> 200401-wss-wssecurity-utility-1.0.xsd"
> wsu:Id="Timestamp-14633980"><wsu:Created xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> ">2008-09-30T12:41:24.157Z</wsu:Created><wsu:Expires
> xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> ">2008-09-30T12:46:24.157Z</wsu:Expires></wsu:Timestamp></wsse:Security></soap:Header><soap:Body
> xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
> wsu:Id="id-17388264"><SubmitBulkFileRequest xmlns="urn:
> parameters.erews.v2.ssa.gov
> "><SubmitBulkFileRequest><fileName>test.txt</fileName><fileSize>3713</fileSize><checkSum>param</checkSum></SubmitBulkFileRequest><AttachmentFile><xop:Include
> xmlns:xop="http://www.w3.org/2004/08/xop/include"; href="cid:
> [EMAIL PROTECTED]:parameters.erews.v2.ssa.gov"
> /></AttachmentFile></SubmitBulkFileRequest></soap:Body></soap:Envelope>
> ------=_Part_0_28008463.1222778483657
> Content-Type: text/plain
> Content-Transfer-Encoding: binary
> Content-ID: <
> [EMAIL PROTECTED]:parameters.erews.v2.ssa.gov>
>
> hello
> ------=_Part_0_28008463.1222778483657--
> 0
>
>
>
> SOAP request using Axis client:
>
> --MIMEBoundaryurn_uuid_8EF88BC3D516858F361222778974305
> Content-Type: application/xop+xml; charset=UTF-8; type="text/xml"
> Content-Transfer-Encoding: binary
> Content-ID: <0.urn:uuid:[EMAIL PROTECTED]<[EMAIL PROTECTED]>
> >
>
> <?xml version='1.0' encoding='UTF-8'?><soapenv:Envelope xmlns:soapenv="
> http://schemas.xmlsoap.org/soap/envelope/";><soapenv:Header>
> <wsse:Security xmlns:wsse="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> "><wsse:BinarySecurityToken
> xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
> EncodingType="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
> "
> ValueType="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3
> "
>
> wsu:Id="CertId-526577">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</wsse:BinarySecurityToken><ds:Signature
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; Id="Signature-6586390">
> <ds:SignedInfo>
> <ds:CanonicalizationMethod Algorithm="
> http://www.w3.org/2001/10/xml-exc-c14n#"; />
> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1";
> />
> <ds:Reference URI="#id-12518719">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; />
> <ds:DigestValue>M6bH0e9aKPGWXzYjCdQQSlAIApo=</ds:DigestValue>
> </ds:Reference>
> </ds:SignedInfo>
> <ds:SignatureValue>
>
> BtTcWjTzXqT1d+3ifYyt4SorrVzS8/2Rwh4qzWVdFs3uI3KNfC3FtOpfU0u7NOJFjsbsx/J9tJEJ
>
> C86aGn37f8p5rKtN6ze0O7xfp6hicXlkNajzZR3WiJJ1ZUjLUI5DksY1sKtHRjUHBVbSynCsDNi0
> QGTGk73brkooMxgrpPY=
> </ds:SignatureValue>
> <ds:KeyInfo Id="KeyId-27660658">
> <wsse:SecurityTokenReference xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
> wsu:Id="STRId-31882858"><wsse:Reference URI="#CertId-526577" ValueType="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3
> "
> /></wsse:SecurityTokenReference>
> </ds:KeyInfo>
> </ds:Signature><wsu:Timestamp xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
>
> wsu:Id="Timestamp-7031149"><wsu:Created>2008-09-30T12:49:34.066Z</wsu:Created><wsu:Expires>2008-09-30T12:54:34.066Z</wsu:Expires></wsu:Timestamp><wsse:UsernameToken
> xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
>
> wsu:Id="UsernameToken-1812813"><wsse:Username>EREWSDV2</wsse:Username><wsse:Password
> Type="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText
> ">1newpass</wsse:Password></wsse:UsernameToken></wsse:Security></soapenv:Header><soapenv:Body
> xmlns:wsu="
>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
> wsu:Id="id-12518719"><ns1:SubmitBulkFileRequest xmlns:ns1="urn:
> parameters.erews.v2.ssa.gov
> "><ns1:SubmitBulkFileRequest><ns1:fileName>test.txt</ns1:fileName><ns1:fileSize>5</ns1:fileSize><ns1:checkSum>5d41402abc4b2a76b9719d911017c592</ns1:checkSum></ns1:SubmitBulkFileRequest><ns1:AttachmentFile
> xmlns:ns2="http://www.w3.org/2005/05/xmlmime";
> ns2:contentType="application/xop+xml"><xop:Include href="cid:1.urn:uuid:
> [EMAIL PROTECTED]" xmlns:xop="
> http://www.w3.org/2004/08/xop/include";
>
> /></ns1:AttachmentFile></ns1:SubmitBulkFileRequest></soapenv:Body></soapenv:Envelope>
> --MIMEBoundaryurn_uuid_8EF88BC3D516858F361222778974305
> Content-Type: application/octet-stream
> Content-Transfer-Encoding: binary
> Content-ID: <1.urn:uuid:[EMAIL PROTECTED]<[EMAIL PROTECTED]>
> >
>
> hello
> --MIMEBoundaryurn_uuid_8EF88BC3D516858F361222778974305--
>
>
> --
> Thanks & Regards,
> Srihari
>
--
Nandana Mihindukulasooriya
WSO2 inc.
http://nandana83.blogspot.com/
http://www.wso2.org
