Then I tried with the 6th scenario with the same procedure.
This time server side works well. but got this exception at the client side.
Jan 16, 2010 8:05:50 AM org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#Id-412537538"
Jan 16, 2010 8:05:50 AM org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#Timestamp-1"
Jan 16, 2010 8:05:50 AM org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#SigConf-2"
Exception in thread "main" java.lang.NoSuchMethodError:
org.apache.ws.security.WSDataRef.getAlgo()Ljava/lang/String;
at
org.apache.rampart.PolicyBasedResultsValidator.validateEncryptionAlgorithm(PolicyBasedResultsValidator.java:874)
at
org.apache.rampart.PolicyBasedResultsValidator.validateEncryptedParts(PolicyBasedResultsValidator.java:407)
at
org.apache.rampart.PolicyBasedResultsValidator.validate(PolicyBasedResultsValidator.java:119)
at org.apache.rampart.RampartEngine.process(RampartEngine.java:255)
at
org.apache.rampart.handler.RampartReceiver.invoke(RampartReceiver.java:92)
at org.apache.axis2.engine.Phase.invoke(Phase.java:318)
at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:256)
at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:165)
at
org.apache.axis2.description.OutInAxisOperationClient.handleResponse(OutInAxisOperation.java:364)
at
org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:417)
at
org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229)
at
org.apache.axis2.client.OperationClient.execute(OperationClient.java:165)
at org.wso2.www.types.HelloServiceStub.greet(HelloServiceStub.java:190)
at org.wso2.www.types.TestStub.testStub(TestStub.java:44)
at org.wso2.www.types.TestStub.main(TestStub.java:58)
Amila.
On Fri, Jan 15, 2010 at 7:44 PM, Thilina Mahesh Buddhika
<[email protected]>wrote:
> Hi Amila,
>
> I will try the sample code you have given.
>
> Thanks.
> /thilina
>
>
> On Fri, Jan 15, 2010 at 7:42 PM, Amila Suriarachchi <[email protected]>wrote:
>
>>
>>
>> On Fri, Jan 15, 2010 at 5:15 PM, Charitha Kankanamge
>> <[email protected]>wrote:
>>
>>> We usually test all 16 security scenarios through the selenium test
>>> framework and all were successful in WSAS-3.1.2 release. However we do not
>>> use code generated client in there.
>>
>>
>> if you have a time please have a look with method I have given. I think
>> that is the most likely path any new comer would follow.
>>
>> Amila.
>>
>>
>>> We set the client side policy using
>>> opts.setProperty(RampartMessageData.KEY_RAMPART_POLICY,
>>> loadPolicy("client-policy-path"-policy.xml"));
>>>
>>> Regards
>>> Charitha
>>>
>>> Charitha Kankanamge
>>> WSO2 Inc.
>>> http://wso2.org
>>> email: [email protected]
>>> cell: +94 718 359 265
>>> blog: http://charithaka.blogspot.com
>>>
>>>
>>> On Fri, Jan 15, 2010 at 4:41 PM, Amila Suriarachchi <[email protected]>wrote:
>>>
>>>> hi,
>>>>
>>>> I tried to this in order to create a secure service.
>>>>
>>>> 1. Start the WSO2wsas 3.1.2 and goto HelloService.
>>>> 2. Then enable security using Admin console and selet the 'Sign and
>>>> encrypt - X509 Authentication' (5 th case)
>>>> 3. Click on the Generate Client and generate the code with adb.
>>>> 4. Geneate the maven project with the generated pom.xml
>>>>
>>>> Invoke the service with the following client code.
>>>>
>>>> try {
>>>> HelloServiceStub stub = new HelloServiceStub("
>>>> http://127.0.0.1:8088/services/HelloService.HelloServiceHttpSoap11Endpoint/
>>>> ");
>>>> stub._getServiceClient().engageModule("rampart");
>>>> StAXOMBuilder builder = new
>>>> StAXOMBuilder("conf/policy.xml");
>>>> Policy policy =
>>>> PolicyEngine.getPolicy(builder.getDocumentElement());
>>>>
>>>> stub._getServiceClient().getAxisService().getPolicySubject().attachPolicy(policy);
>>>> stub.greet("hellow");
>>>> } catch (AxisFault axisFault) {
>>>> axisFault.printStackTrace();
>>>> } catch (java.rmi.RemoteException e) {
>>>> e.printStackTrace();
>>>> } catch (XMLStreamException e) {
>>>> e.printStackTrace();
>>>> } catch (FileNotFoundException e) {
>>>> e.printStackTrace();
>>>> }
>>>>
>>>> Policy.xml contains following. I added the rampart mar to classpath.
>>>>
>>>> <wsp:Policy wsu:Id="SigEncr"
>>>> xmlns:wsu="
>>>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
>>>> "
>>>> xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy";>
>>>> <wsp:ExactlyOne>
>>>> <wsp:All>
>>>> <ramp:RampartConfig xmlns:ramp="
>>>> http://ws.apache.org/rampart/policy";>
>>>> <ramp:user>wso2carbon</ramp:user>
>>>> <ramp:encryptionUser>wso2carbon</ramp:encryptionUser>
>>>>
>>>> <ramp:passwordCallbackClass>org.wso2.www.types.PWCallbackHandler</ramp:passwordCallbackClass>
>>>>
>>>> <ramp:signatureCrypto>
>>>> <ramp:crypto
>>>> provider="org.apache.ws.security.components.crypto.Merlin">
>>>> <ramp:property
>>>> name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
>>>> <ramp:property
>>>> name="org.apache.ws.security.crypto.merlin.file">/home/amila/downloads/wso2wsas-3.1.2/resources/security/wso2carbon.jks</ramp:property>
>>>> <ramp:property
>>>> name="org.apache.ws.security.crypto.merlin.keystore.password">wso2carbon</ramp:property>
>>>> </ramp:crypto>
>>>> </ramp:signatureCrypto>
>>>> <ramp:encryptionCypto>
>>>> <ramp:crypto
>>>> provider="org.apache.ws.security.components.crypto.Merlin">
>>>> <ramp:property
>>>> name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
>>>> <ramp:property
>>>> name="org.apache.ws.security.crypto.merlin.file">/home/amila/downloads/wso2wsas-3.1.2/resources/security/wso2carbon.jks</ramp:property>
>>>> <ramp:property
>>>> name="org.apache.ws.security.crypto.merlin.keystore.password">wso2carbon</ramp:property>
>>>> </ramp:crypto>
>>>> </ramp:encryptionCypto>
>>>> </ramp:RampartConfig>
>>>> </wsp:All>
>>>> </wsp:ExactlyOne>
>>>> </wsp:Policy>
>>>>
>>>> Callback handler class like this
>>>>
>>>> public class PWCallbackHandler implements CallbackHandler {
>>>>
>>>> public void handle(Callback[] callbacks) throws IOException,
>>>> UnsupportedCallbackException {
>>>> for (int i = 0; i < callbacks.length; i++) {
>>>> WSPasswordCallback pwcb = (WSPasswordCallback) callbacks[i];
>>>> String id = pwcb.getIdentifer();
>>>> if ("wso2carbon".equals(id)) {
>>>> pwcb.setPassword("wso2carbon");
>>>> }
>>>> }
>>>> }
>>>> }
>>>>
>>>> Then I am getting following error at the server side.
>>>>
>>>> aused by: org.apache.ws.security.WSSecurityException: An unsupported
>>>> token was provided (Token type "
>>>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v1
>>>> ")
>>>> at
>>>> org.apache.ws.security.processor.SignatureProcessor.createSecurityToken(SignatureProcessor.java:594)
>>>> at
>>>> org.apache.ws.security.processor.SignatureProcessor.getCertificatesTokenReference(SignatureProcessor.java:558)
>>>> at
>>>> org.apache.ws.security.processor.SignatureProcessor.verifyXMLSignature(SignatureProcessor.java:274)
>>>> at
>>>> org.apache.ws.security.processor.SignatureProcessor.handleToken(SignatureProcessor.java:99)
>>>> at
>>>> org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:329)
>>>> at
>>>> org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:246)
>>>> at org.apache.rampart.RampartEngine.process(RampartEngine.java:154)
>>>> at
>>>> org.apache.rampart.handler.RampartReceiver.invoke(RampartReceiver.java:92)
>>>>
>>>> I think this senario should work out of the box. What could be the
>>>> problem?
>>>>
>>>> thanks,
>>>> Amila.
>>>>
>>>>
>>>> _______________________________________________
>>>> Carbon-dev mailing list
>>>> [email protected]
>>>> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Carbon-dev mailing list
>>> [email protected]
>>> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>>>
>>>
>>
>> _______________________________________________
>> Carbon-dev mailing list
>> [email protected]
>> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>>
>>
>
>
> --
> Thilina Mahesh Buddhika
>
> WSO2 Inc. ; http://wso2.com
> http://blog.thilinamb.com
>
> _______________________________________________
> Carbon-dev mailing list
> [email protected]
> https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>
>
_______________________________________________
Carbon-dev mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
