Hi Ambarish,

We had an earlier thread about this issue:

http://groups.google.com/group/google-apps-apis/browse_thread/thread/cdd450e716a3cc88

Basically you need to make sure you have the right enveloped transform
algorithm like what you have in Tomcat.

Merry Christmas,

--Tony

On Dec 24, 3:48 am, ambarish <[email protected]> wrote:
> Hi all,
>
> I could successfully build the sample client SSO application in Java
> and deploy on tomcat. The environment is:
>
> JDK/JRE: 1.4.2
> Tomcat: 5.5.16
>
> However, the same application when deployed on a SAP Netweaver
> instance fails. When I click on "Generate SAML Response" button, it
> gives the following error on the browser:
>
> Error signing SAML element: class configured for TransformService:
> org.jcp.xml.dsig.internal.dom.DOMEnvelopedTransform not a
> TransformService
>
> I investigated and found the error to come from XmlDigitalSigner.java
> file in the lines:
>
> XMLSignatureFactory sigFactory = XMLSignatureFactory.getInstance
> ("DOM",
>                 (Provider) Class.forName(providerName).newInstance());
>
>           // Create a Reference to the enveloped document (we are
>           // signing the whole document, so a URI of "" signifies that) and
>           // also specify the SHA1 digest algorithm and the ENVELOPED
> Transform.
> List envelopedTransform = Collections.singletonList(sigFactory
>                 .newTransform(Transform.ENVELOPED, (TransformParameterSpec) 
> null));
>
> I am not sure why this works in JRE 1.4.2 in Tomcat, but fails in the
> the same JRE version in Netweaver. Any clues?
>
> Just a thought: Does the Servlet API version have any impact on this?
>
> Thanks.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Apps APIs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/google-apps-apis?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to