Hi Yogesh, Could you please attach a reproducer project? So that I can get the whole map of your purpose. Ensure the reproducer doesn't contain any of your business specific content, just a small project that I can run and reproduce.
Thanks Freeman On Fri, Jul 9, 2021 at 8:53 AM Yogesh Agarwal <[email protected]> wrote: > Hi All, > > I have a Spring Boot App which uses Apache CXF component and using wsdl > first approach. So i have the following route: > > Read SOAP XML message using a source when is sent to the > "cxf:bean:myService" > from cxf:bean:myService, i have configured the dataFormat="CXF_MESSAGE" i > have configured xmlsecurity-verify to verify the XML content which is > signed document, > > The issue which i am facing is that the message headers is of the type > Detached XML signature, but the Signature element in header is the child > element of wsse:Security element and i am getting error as below: > > org.apache.camel.component.xmlsecurity.api.XmlSignatureFormatException: > Message is not a correct XML signature document: 'Signature' element is > missing. Check the sent message. > > On the Server the below tag is not getting processed: > > <wsse:Security xmlns:wsse=" > > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd > " > xmlns:wsu=" > > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd > "> > <ds:Signature> > .... > </ds:Signature> > </wsse:Security > > I have spent a lot of time to find how to resolve the issue. I would need > to know whether i can tell Apache Camel CXF/xmlsecurity-verify component to > look for signature element under <wsse:Security> element. > Any help would be greatly appreciated. > > Regards, > > Yogesh Agarwal >
