@Isura I had left the default alias wso2carbon.cert. Changed to wso2carbon and it worked.
Thanks ! On Fri, Oct 31, 2014 at 7:31 AM, Isura Karunaratne <[email protected]> wrote: > > > On Friday, October 31, 2014, Maheeka Jayasuriya <[email protected]> wrote: > >> @TharinduE I did as you have mentioned but still the same error exists. >> >> @Isura I tried doing the same but still it gives the error. >> >> Went through [1] as well for an idea but something seems to be wrong. >> Anything else I need to check out? >> > > In Identity Server SSO configurations, you might enable signature > validation. What is the alias you selected? It should be wso2carbon (not > wso2carbon.cert) > > Thanks > >> >> >> >> [1] >> http://logicoy.com/blogs/ssl-keystore-truststore-and-mutual-authentication/ >> >> > > >> Thanks. >> >> On Thu, Oct 30, 2014 at 5:45 PM, Isura Karunaratne <[email protected]> >> wrote: >> >>> >>> >>> On Thu, Oct 30, 2014 at 4:27 PM, Isura Karunaratne <[email protected]> >>> wrote: >>> >>>> Hi, >>>> >>>> You have to import the public certificate of IS to wso2carbon.jks >>>> keystore inside the travelociy. You can use java keytool to export and >>>> import certificate. Thanks. >>>> >>> >>> >>> And also you have to import the public certificate of travelocity >>> application to Identity Server keystore too. >>> >>>> >>>> Regards, >>>> Isura. >>>> >>>> >>>> On Thu, Oct 30, 2014 at 4:11 PM, Maheeka Jayasuriya <[email protected]> >>>> wrote: >>>> >>>>> Hi, >>>>> >>>>> I am executing $subject sample [1]. >>>>> >>>>> When I try to login to travelocity.com with SAML2 using Identity >>>>> Server as in the sample, I am getting error as "Error when processing the >>>>> authentication request! " [2] >>>>> >>>>> I have attached the debug log also below [3] which says "Signature >>>>> validation for Authentication Request failed." >>>>> >>>>> Any idea if am I doing something wrong here? >>>>> >>>>> [1] https://docs.wso2.com/display/IS500/Configuring+SAML2+SSO >>>>> >>>>> [2] >>>>> https://docs.google.com/a/wso2.com/file/d/0B_Ml_gi-3jYrak96XzFNNThFZTQ/edit >>>>> >>>>> [3] >>>>> >>>>> [2014-10-30 15:59:08,425] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultAuthenticationRequestHandler} >>>>> - In authentication flow >>>>> [2014-10-30 15:59:08,426] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>>> - Executing the Step Based Authentication... >>>>> [2014-10-30 15:59:08,426] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>>> - Starting Step: 1 >>>>> [2014-10-30 15:59:08,426] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.util.FrameworkUtils} >>>>> - Finding already authenticated IdPs of the Step >>>>> [2014-10-30 15:59:08,426] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.step.impl.DefaultStepHandler} >>>>> - Receive a response from the external party >>>>> [2014-10-30 15:59:08,426] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.step.impl.DefaultStepHandler} >>>>> - BasicAuthenticator can handle the request. >>>>> [2014-10-30 15:59:08,436] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.step.impl.DefaultStepHandler} >>>>> - BasicAuthenticator returned: SUCCESS_COMPLETED >>>>> [2014-10-30 15:59:08,436] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>>> - Step 1 is completed. Going to get the next one. >>>>> [2014-10-30 15:59:08,437] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>>> - There are no more steps to execute >>>>> [2014-10-30 15:59:08,437] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>>> - Request is successfully authenticated >>>>> [2014-10-30 15:59:08,437] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>>> - Handling Post Authentication tasks >>>>> [2014-10-30 15:59:08,437] DEBUG >>>>> {org.wso2.carbon.identity.application.common.util.IdentityApplicationManagementUtil} >>>>> - JWT Header :{"typ":"JWT", "alg":"none"} >>>>> [2014-10-30 15:59:08,437] DEBUG >>>>> {org.wso2.carbon.identity.application.common.util.IdentityApplicationManagementUtil} >>>>> - JWT Body >>>>> :{"iss":"wso2","exp":14146649484373000,"iat":1414664948437,"idps":[{"idp":"LOCAL","authenticator":"BasicAuthenticator"}]} >>>>> [2014-10-30 15:59:08,442] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler} >>>>> - Step processing is completed >>>>> [2014-10-30 15:59:08,442] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultAuthenticationRequestHandler} >>>>> - Concluding the Authentication Flow >>>>> [2014-10-30 15:59:08,444] DEBUG >>>>> {org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultAuthenticationRequestHandler} >>>>> - Sending response back to: /samlsso... >>>>> commonAuthAuthenticated: true >>>>> authenticatedUser: admin >>>>> authenticatedIdPs: >>>>> eyJ0eXAiOiJKV1QiLCAiYWxnIjoibm9uZSJ9.eyJpc3MiOiJ3c28yIiwiZXhwIjoxNDE0NjY0OTQ4NDM3MzAwMCwiaWF0IjoxNDE0NjY0OTQ4NDM3LCJpZHBzIjpbeyJpZHAiOiJMT0NBTCIsImF1dGhlbnRpY2F0b3IiOiJCYXNpY0F1dGhlbnRpY2F0b3IifV19. >>>>> sessionDataKey: 10c24bb5-c8a2-485b-a8c1-714bf1942765 >>>>> [2014-10-30 15:59:08,448] DEBUG >>>>> {org.wso2.carbon.identity.sso.saml.servlet.SAMLSSOProviderServlet} - >>>>> Query >>>>> string : sessionDataKey=10c24bb5-c8a2-485b-a8c1-714bf1942765 >>>>> [2014-10-30 15:59:08,454] DEBUG >>>>> {org.wso2.carbon.identity.sso.saml.util.SAMLSSOUtil} - Validating SAML >>>>> Request signature >>>>> [2014-10-30 15:59:08,454] DEBUG >>>>> {org.wso2.carbon.identity.sso.saml.util.SAMLSSOUtil} - Request message >>>>> <?xml version="1.0" encoding="UTF-8"?><samlp:AuthnRequest >>>>> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" >>>>> AssertionConsumerServiceURL=" >>>>> http://localhost:8080/travelocity.com/home.jsp"; Destination=" >>>>> https://localhost:9443/samlsso"; ForceAuthn="false" ID="0" >>>>> IsPassive="false" IssueInstant="2014-10-30T10:28:43.580Z" >>>>> ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" >>>>> Version="2.0"><samlp:Issuer >>>>> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:assertion">travelocity.com</samlp:Issuer><saml2p:NameIDPolicy >>>>> xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" AllowCreate="true" >>>>> Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" >>>>> SPNameQualifier="Issuer"/><saml2p:RequestedAuthnContext >>>>> xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" >>>>> Comparison="exact"><saml:AuthnContextClassRef >>>>> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml2p:RequestedAuthnContext></samlp:AuthnRequest> >>>>> [2014-10-30 15:59:08,459] DEBUG >>>>> {org.wso2.carbon.identity.sso.saml.validators.SAML2HTTPRedirectDeflateSignatureValidator} >>>>> - Constructing signed content string from URL query string >>>>> SAMLRequest=nZPdjtMwEIVfJfJ9fpoWKVhNVqXVikoLhDbLxd4Zd0qNHDt4Jt3u2%2BMkLQQEVbW3npkzZ74Zz%2B9OtQ6O4FBZk7NJlLAAjLQ7Zb7l7LG6DzN2V8xR1Lrhi5YOZgM%2FWkAKfJ1B3gdy1jrDrUCF3IgakJPk28WHB55GCW%2BcJSutZsECERz5RktrsK3BbcEdlYTHzUPODkQNj2NtpdAHi8SzJEticuII%2Fk3RSyRtHR9sDdF3bFiw8iaUEdT77orxj%2Bq3s9k07twhWhbcWyeht5%2BzvdAILFivcuaHXWMpENURfgcQW1gbJGEoZ2kymYWTJJwm1SThacZn0%2BhNljyxoDzP9U6ZgdY1CF%2BHJOTvq6oMy0%2FbigVfLtR9Arsw7ru72%2BmKC1NW%2FMVqHo8VB%2F204R%2B9xHpVWq3ky6hNevsWtbbPSweCPDNyLfR4a0HXBboXtQv3fSpvutmRwBALtmXn6XMrtNorcDkbHLP4l%2BfzzcGuX6G%2FHoITvcr80taNcAo77HASks7g%2BVh5qT3VDexHHW5ewtU0yWUn7Z%2B7o3u2btcdEUg%2FWeWEwcY6Gtb2Tz%2FFEPsfkOKy8fE%2FLX4C&SigAlg=http%3A%2F% >>>>> 2Fwww.w3.org >>>>> %2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=TTSDF7uYaFw%2FEu%2B0oUOm71%2B4ZMn4nYl3NQV5TyNv45vJWZW%2BT%2BSNwwJbc6rt7A5kgN8L88mY8H%2BMOyKM%2FGW7CS%2FXn4ZIwM9rpPjBrZCHsXWRdnfXr5WK0qH5Hiqj2448GsLlTYVtwU%2FOPHBufe2eES4w8quMFhXlJC4jBsdOmX0%3D >>>>> [2014-10-30 15:59:08,459] DEBUG >>>>> {org.wso2.carbon.identity.sso.saml.validators.SAML2HTTPRedirectDeflateSignatureValidator} >>>>> - Constructed signed content string for HTTP-Redirect DEFLATE >>>>> SAMLRequest=nZPdjtMwEIVfJfJ9fpoWKVhNVqXVikoLhDbLxd4Zd0qNHDt4Jt3u2%2BMkLQQEVbW3npkzZ74Zz%2B9OtQ6O4FBZk7NJlLAAjLQ7Zb7l7LG6DzN2V8xR1Lrhi5YOZgM%2FWkAKfJ1B3gdy1jrDrUCF3IgakJPk28WHB55GCW%2BcJSutZsECERz5RktrsK3BbcEdlYTHzUPODkQNj2NtpdAHi8SzJEticuII%2Fk3RSyRtHR9sDdF3bFiw8iaUEdT77orxj%2Bq3s9k07twhWhbcWyeht5%2BzvdAILFivcuaHXWMpENURfgcQW1gbJGEoZ2kymYWTJJwm1SThacZn0%2BhNljyxoDzP9U6ZgdY1CF%2BHJOTvq6oMy0%2FbigVfLtR9Arsw7ru72%2BmKC1NW%2FMVqHo8VB%2F204R%2B9xHpVWq3ky6hNevsWtbbPSweCPDNyLfR4a0HXBboXtQv3fSpvutmRwBALtmXn6XMrtNorcDkbHLP4l%2BfzzcGuX6G%2FHoITvcr80taNcAo77HASks7g%2BVh5qT3VDexHHW5ewtU0yWUn7Z%2B7o3u2btcdEUg%2FWeWEwcY6Gtb2Tz%2FFEPsfkOKy8fE%2FLX4C&SigAlg=http%3A%2F% >>>>> 2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1 >>>>> [2014-10-30 15:59:08,471] WARN >>>>> {org.wso2.carbon.identity.sso.saml.processors.SPInitSSOAuthnRequestProcessor} >>>>> - Signature validation for Authentication Request failed. >>>>> >>>>> Thanks, >>>>> >>>>> Maheeka Jayasuriya >>>>> Software Engineer >>>>> Mobile : +94777750661 >>>>> >>>>> _______________________________________________ >>>>> Dev mailing list >>>>> [email protected] >>>>> http://wso2.org/cgi-bin/mailman/listinfo/dev >>>>> >>>>> >>>> >>>> >>>> -- >>>> Isura Dilhara Karunaratne >>>> Software Engineer >>>> >>>> Mob +94 772 254 810 >>>> >>>> >>> >>> >>> -- >>> Isura Dilhara Karunaratne >>> Software Engineer >>> >>> Mob +94 772 254 810 >>> >>> >> >> >> -- >> >> Maheeka Jayasuriya >> Software Engineer >> Mobile : +94777750661 >> > > > -- > Isura Dilhara Karunaratne > Software Engineer > > Mob +94 772 254 810 > > > -- Maheeka Jayasuriya Software Engineer Mobile : +94777750661
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
