On Friday, October 31, 2014, Maheeka Jayasuriya <[email protected]> wrote:
> @TharinduE I did as you have mentioned but still the same error exists. > > @Isura I tried doing the same but still it gives the error. > > Went through [1] as well for an idea but something seems to be wrong. > Anything else I need to check out? > In Identity Server SSO configurations, you might enable signature validation. What is the alias you selected? It should be wso2carbon (not wso2carbon.cert) Thanks > > > > [1] > http://logicoy.com/blogs/ssl-keystore-truststore-and-mutual-authentication/ > > > Thanks. > > On Thu, Oct 30, 2014 at 5:45 PM, Isura Karunaratne <[email protected] > <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: > >> >> >> On Thu, Oct 30, 2014 at 4:27 PM, Isura Karunaratne <[email protected] >> <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: >> >>> Hi, >>> >>> You have to import the public certificate of IS to wso2carbon.jks >>> keystore inside the travelociy. You can use java keytool to export and >>> import certificate. Thanks. >>> >> >> >> And also you have to import the public certificate of travelocity >> application to Identity Server keystore too. >> >>> >>> Regards, >>> Isura. >>> >>> >>> On Thu, Oct 30, 2014 at 4:11 PM, Maheeka Jayasuriya <[email protected] >>> <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: >>> >>>> Hi, >>>> >>>> I am executing $subject sample [1]. >>>> >>>> When I try to login to travelocity.com with SAML2 using Identity >>>> Server as in the sample, I am getting error as "Error when processing the >>>> authentication request! " [2] >>>> >>>> I have attached the debug log also below [3] which says "Signature >>>> validation for Authentication Request failed." >>>> >>>> Any idea if am I doing something wrong here? >>>> >>>> [1] https://docs.wso2.com/display/IS500/Configuring+SAML2+SSO >>>> >>>> [2] >>>> https://docs.google.com/a/wso2.com/file/d/0B_Ml_gi-3jYrak96XzFNNThFZTQ/edit >>>> >>>> [3] >>>> >>>> [2014-10-30 15:59:08,425] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultAuthenticationRequestHandler} >>>> - In authentication flow >>>> [2014-10-30 15:59:08,426] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>> - Executing the Step Based Authentication... >>>> [2014-10-30 15:59:08,426] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>> - Starting Step: 1 >>>> [2014-10-30 15:59:08,426] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.util.FrameworkUtils} >>>> - Finding already authenticated IdPs of the Step >>>> [2014-10-30 15:59:08,426] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.step.impl.DefaultStepHandler} >>>> - Receive a response from the external party >>>> [2014-10-30 15:59:08,426] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.step.impl.DefaultStepHandler} >>>> - BasicAuthenticator can handle the request. >>>> [2014-10-30 15:59:08,436] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.step.impl.DefaultStepHandler} >>>> - BasicAuthenticator returned: SUCCESS_COMPLETED >>>> [2014-10-30 15:59:08,436] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>> - Step 1 is completed. Going to get the next one. >>>> [2014-10-30 15:59:08,437] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>> - There are no more steps to execute >>>> [2014-10-30 15:59:08,437] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>> - Request is successfully authenticated >>>> [2014-10-30 15:59:08,437] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>> - Handling Post Authentication tasks >>>> [2014-10-30 15:59:08,437] DEBUG >>>> {org.wso2.carbon.identity.application.common.util.IdentityApplicationManagementUtil} >>>> - JWT Header :{"typ":"JWT", "alg":"none"} >>>> [2014-10-30 15:59:08,437] DEBUG >>>> {org.wso2.carbon.identity.application.common.util.IdentityApplicationManagementUtil} >>>> - JWT Body >>>> :{"iss":"wso2","exp":14146649484373000,"iat":1414664948437,"idps":[{"idp":"LOCAL","authenticator":"BasicAuthenticator"}]} >>>> [2014-10-30 15:59:08,442] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>> - Step processing is completed >>>> [2014-10-30 15:59:08,442] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultAuthenticationRequestHandler} >>>> - Concluding the Authentication Flow >>>> [2014-10-30 15:59:08,444] DEBUG >>>> {org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultAuthenticationRequestHandler} >>>> - Sending response back to: /samlsso... >>>> commonAuthAuthenticated: true >>>> authenticatedUser: admin >>>> authenticatedIdPs: >>>> eyJ0eXAiOiJKV1QiLCAiYWxnIjoibm9uZSJ9.eyJpc3MiOiJ3c28yIiwiZXhwIjoxNDE0NjY0OTQ4NDM3MzAwMCwiaWF0IjoxNDE0NjY0OTQ4NDM3LCJpZHBzIjpbeyJpZHAiOiJMT0NBTCIsImF1dGhlbnRpY2F0b3IiOiJCYXNpY0F1dGhlbnRpY2F0b3IifV19. >>>> sessionDataKey: 10c24bb5-c8a2-485b-a8c1-714bf1942765 >>>> [2014-10-30 15:59:08,448] DEBUG >>>> {org.wso2.carbon.identity.sso.saml.servlet.SAMLSSOProviderServlet} - Query >>>> string : sessionDataKey=10c24bb5-c8a2-485b-a8c1-714bf1942765 >>>> [2014-10-30 15:59:08,454] DEBUG >>>> {org.wso2.carbon.identity.sso.saml.util.SAMLSSOUtil} - Validating SAML >>>> Request signature >>>> [2014-10-30 15:59:08,454] DEBUG >>>> {org.wso2.carbon.identity.sso.saml.util.SAMLSSOUtil} - Request message >>>> <?xml version="1.0" encoding="UTF-8"?><samlp:AuthnRequest >>>> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" >>>> AssertionConsumerServiceURL=" >>>> http://localhost:8080/travelocity.com/home.jsp"; Destination=" >>>> https://localhost:9443/samlsso"; ForceAuthn="false" ID="0" >>>> IsPassive="false" IssueInstant="2014-10-30T10:28:43.580Z" >>>> ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" >>>> Version="2.0"><samlp:Issuer >>>> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:assertion">travelocity.com</samlp:Issuer><saml2p:NameIDPolicy >>>> xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" AllowCreate="true" >>>> Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" >>>> SPNameQualifier="Issuer"/><saml2p:RequestedAuthnContext >>>> xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" >>>> Comparison="exact"><saml:AuthnContextClassRef >>>> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml2p:RequestedAuthnContext></samlp:AuthnRequest> >>>> [2014-10-30 15:59:08,459] DEBUG >>>> {org.wso2.carbon.identity.sso.saml.validators.SAML2HTTPRedirectDeflateSignatureValidator} >>>> - Constructing signed content string from URL query string >>>> SAMLRequest=nZPdjtMwEIVfJfJ9fpoWKVhNVqXVikoLhDbLxd4Zd0qNHDt4Jt3u2%2BMkLQQEVbW3npkzZ74Zz%2B9OtQ6O4FBZk7NJlLAAjLQ7Zb7l7LG6DzN2V8xR1Lrhi5YOZgM%2FWkAKfJ1B3gdy1jrDrUCF3IgakJPk28WHB55GCW%2BcJSutZsECERz5RktrsK3BbcEdlYTHzUPODkQNj2NtpdAHi8SzJEticuII%2Fk3RSyRtHR9sDdF3bFiw8iaUEdT77orxj%2Bq3s9k07twhWhbcWyeht5%2BzvdAILFivcuaHXWMpENURfgcQW1gbJGEoZ2kymYWTJJwm1SThacZn0%2BhNljyxoDzP9U6ZgdY1CF%2BHJOTvq6oMy0%2FbigVfLtR9Arsw7ru72%2BmKC1NW%2FMVqHo8VB%2F204R%2B9xHpVWq3ky6hNevsWtbbPSweCPDNyLfR4a0HXBboXtQv3fSpvutmRwBALtmXn6XMrtNorcDkbHLP4l%2BfzzcGuX6G%2FHoITvcr80taNcAo77HASks7g%2BVh5qT3VDexHHW5ewtU0yWUn7Z%2B7o3u2btcdEUg%2FWeWEwcY6Gtb2Tz%2FFEPsfkOKy8fE%2FLX4C&SigAlg=http%3A%2F% >>>> 2Fwww.w3.org >>>> %2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=TTSDF7uYaFw%2FEu%2B0oUOm71%2B4ZMn4nYl3NQV5TyNv45vJWZW%2BT%2BSNwwJbc6rt7A5kgN8L88mY8H%2BMOyKM%2FGW7CS%2FXn4ZIwM9rpPjBrZCHsXWRdnfXr5WK0qH5Hiqj2448GsLlTYVtwU%2FOPHBufe2eES4w8quMFhXlJC4jBsdOmX0%3D >>>> [2014-10-30 15:59:08,459] DEBUG >>>> {org.wso2.carbon.identity.sso.saml.validators.SAML2HTTPRedirectDeflateSignatureValidator} >>>> - Constructed signed content string for HTTP-Redirect DEFLATE >>>> SAMLRequest=nZPdjtMwEIVfJfJ9fpoWKVhNVqXVikoLhDbLxd4Zd0qNHDt4Jt3u2%2BMkLQQEVbW3npkzZ74Zz%2B9OtQ6O4FBZk7NJlLAAjLQ7Zb7l7LG6DzN2V8xR1Lrhi5YOZgM%2FWkAKfJ1B3gdy1jrDrUCF3IgakJPk28WHB55GCW%2BcJSutZsECERz5RktrsK3BbcEdlYTHzUPODkQNj2NtpdAHi8SzJEticuII%2Fk3RSyRtHR9sDdF3bFiw8iaUEdT77orxj%2Bq3s9k07twhWhbcWyeht5%2BzvdAILFivcuaHXWMpENURfgcQW1gbJGEoZ2kymYWTJJwm1SThacZn0%2BhNljyxoDzP9U6ZgdY1CF%2BHJOTvq6oMy0%2FbigVfLtR9Arsw7ru72%2BmKC1NW%2FMVqHo8VB%2F204R%2B9xHpVWq3ky6hNevsWtbbPSweCPDNyLfR4a0HXBboXtQv3fSpvutmRwBALtmXn6XMrtNorcDkbHLP4l%2BfzzcGuX6G%2FHoITvcr80taNcAo77HASks7g%2BVh5qT3VDexHHW5ewtU0yWUn7Z%2B7o3u2btcdEUg%2FWeWEwcY6Gtb2Tz%2FFEPsfkOKy8fE%2FLX4C&SigAlg=http%3A%2F% >>>> 2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1 >>>> [2014-10-30 15:59:08,471] WARN >>>> {org.wso2.carbon.identity.sso.saml.processors.SPInitSSOAuthnRequestProcessor} >>>> - Signature validation for Authentication Request failed. >>>> >>>> Thanks, >>>> >>>> Maheeka Jayasuriya >>>> Software Engineer >>>> Mobile : +94777750661 >>>> >>>> _______________________________________________ >>>> Dev mailing list >>>> [email protected] <javascript:_e(%7B%7D,'cvml','[email protected]');> >>>> http://wso2.org/cgi-bin/mailman/listinfo/dev >>>> >>>> >>> >>> >>> -- >>> Isura Dilhara Karunaratne >>> Software Engineer >>> >>> Mob +94 772 254 810 >>> >>> >> >> >> -- >> Isura Dilhara Karunaratne >> Software Engineer >> >> Mob +94 772 254 810 >> >> > > > -- > > Maheeka Jayasuriya > Software Engineer > Mobile : +94777750661 > -- Isura Dilhara Karunaratne Software Engineer Mob +94 772 254 810
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
