I get this error during signature
verification. Any thoughts? ERROR: ====== WARN -
Reference.verify(?) | Verification failed for URI "#id-19537476" DEBUG -
Manifest.verifyReferences(?) | The Reference has Type org.apache.ws.security.WSSecurityException:
The signature verification failed at
org.apache.ws.security.WSSecurityEngine.verifyXMLSignature(WSSecurity Engine.java:634) at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecur ityEngine.java:327) at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecur ityEngine.java:250) at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecur ityEngine.java:198) SIGNED
MESSAGE =============== <soapenv:Envelope
xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <soapenv:Header> <wsse:Security><ds:Signature
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:SignedInfo> <ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:CanonicalizationMethod> <ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod> <ds:Reference
URI="#id-19537476"> <ds:Transforms> <ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform> </ds:Transforms> <ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod> <ds:DigestValue>fE1tW8/x1/+9YexmIxFSIGegJhw=</ds:DigestValue> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue> JOL2vQgyK1fj//5Tpi+3VO/TbSQE+0IxipWeAYSPrGikirfRL4Nrrfz/en8eExBG1Z164EBsh6Ef HKfG/oziXA== </ds:SignatureValue> <ds:KeyInfo
Id="KeyId-11423854"> <wsse:SecurityTokenReference
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
wsu:Id="STRId-30817849"><ds:X509IssuerSerial> <ds:X509IssuerName>CN=dims</ds:X509IssuerName> <ds:X509SerialNumber>44369778256217224370984914847992022613</ds:X509SerialNumber> </ds:X509IssuerSerial></wsse:SecurityTokenReference> </ds:KeyInfo> </ds:Signature></wsse:Security></soapenv:Header> <soapenv:Body
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
wsu:Id="id-19537476"> <ns1:getVersion
xmlns:ns1="http://axis.apache.org"
soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> </ns1:getVersion> </soapenv:Body> </soapenv:Envelope> <soapenv:Envelope
xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <soapenv:Header> <wsse:Security><ds:Signature
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:SignedInfo> <ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:CanonicalizationMethod> <ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod> <ds:Reference
URI="#id-19537476"> <ds:Transforms> <ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform> </ds:Transforms> <ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod> <ds:DigestValue>fE1tW8/x1/+9YexmIxFSIGegJhw=</ds:DigestValue> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue> JOL2vQgyK1fj//5Tpi+3VO/TbSQE+0IxipWeAYSPrGikirfRL4Nrrfz/en8eExBG1Z164EBsh6Ef HKfG/oziXA== </ds:SignatureValue> <ds:KeyInfo
Id="KeyId-11423854"> <wsse:SecurityTokenReference
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
wsu:Id="STRId-30817849"><ds:X509IssuerSerial> <ds:X509IssuerName>CN=dims</ds:X509IssuerName> <ds:X509SerialNumber>44369778256217224370984914847992022613</ds:X509SerialNumber> </ds:X509IssuerSerial></wsse:SecurityTokenReference> </ds:KeyInfo> </ds:Signature></wsse:Security></soapenv:Header> <soapenv:Body
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
wsu:Id="id-19537476"> <ns1:getVersion xmlns:ns1="http://axis.apache.org"
soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> </ns1:getVersion> </soapenv:Body> </soapenv:Envelope> |
- SAMLToken sample problem... Brian Woo
- Verification failed for URI "#id-19537476" Soumadeep