Regression from 2.3.5 : An invalid security token was provided (Bad TokenType
"")
---------------------------------------------------------------------------------
Key: CXF-3592
URL: https://issues.apache.org/jira/browse/CXF-3592
Project: CXF
Issue Type: Bug
Components: WS-* Components
Affects Versions: 2.4.1
Environment: Mac os X
Reporter: Stephane Chomat
The server with metro and glassfish.
The client is running with cxf.
The client running with a wsdl and interpret the security policy. It runs fine
with cxf 2.3.5
but it cannot read the response with cxf 2.4.1. It throws
org.apache.ws.security.WSSecurityException: An invalid security token was
provided (Bad TokenType "").
--- trace with cxf 2.4.1 and wss4j 1.6.1 or 1.6.0
15 juin 2011 17:28:15
org.apache.cxf.service.factory.ReflectionServiceFactoryBean buildServiceFromWSDL
INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from
WSDL:
http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
15 juin 2011 17:28:15
org.apache.cxf.service.factory.ReflectionServiceFactoryBean buildServiceFromWSDL
INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from
WSDL:
http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
15 juin 2011 17:28:17 org.apache.cxf.interceptor.AbstractLoggingInterceptor log
INFO: Outbound Message
---------------------------
ID: 1
Address:
http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService
Encoding: UTF-8
Content-Type: text/xml
Headers: {Accept=[*/*], SOAPAction=["add"]}
Payload: <soap:Envelope
xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/";><soap:Header><Action
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-697606008">add</Action><MessageID
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-1230624895">urn:uuid:a11ca17c-d4a8-4693-a65e-473c661596ed</MessageID><To
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-1532712380">http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService</To><ReplyTo
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-1784954589"><Address>http://www.w3.org/2005/08/addressing/anonymous</Address></ReplyTo><wsse:Security
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
soap:mustUnderstand="1"><wsu:Timestamp
wsu:Id="TS-1"><wsu:Created>2011-06-15T15:28:16.437Z</wsu:Created><wsu:Expires>2011-06-15T15:33:16.437Z</wsu:Expires></wsu:Timestamp><xenc:EncryptedKey
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";
Id="EK-B4ECDC98AEA8F58C1313081516968151"><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";><wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";><wsse:KeyIdentifier
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier";>thYJff4nVK/4RwZSJkgNY8n/leI=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>uLn0SQU6EllSYYuMGhD91I3dE1BCle1IT8s3r8JxZY9+5P1hq9YYTiHGPrio5gpkfHfUDqEJOgD8j1PRgiiSf8+xksG2zb7alxhvMz/SNd4wv2HS3yfBv2fM2OBKP6AIqpzQiNAZ0OUG7Djj5f8o5Kfsa4viQY+Bcc1rE9MY3NU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey><xenc:ReferenceList
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";><xenc:DataReference
URI="#ED-4"/><xenc:DataReference
URI="#ED-5"/></xenc:ReferenceList><xenc:EncryptedData
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; Id="ED-5"
Type="http://www.w3.org/2001/04/xmlenc#Element";><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey";><wsse:Reference
URI="#EK-B4ECDC98AEA8F58C1313081516968151"/></wsse:SecurityTokenReference>
</ds:KeyInfo><xenc:CipherData><xenc:CipherValue>CF8f130CUWq7A6r0GqqYwffZ9rP5HaZZ7VShIO3n5KR5sh+e3BR1xKRdokojGMzGxvswMUWnmsAd
EH2KF74f7mgLoMtNLHPf7dOj/KX2hLD8Cb+EDP8WAxH4R2YH4GM4leLDCPchGoIA4eRMtrp6acoE
yx/5nA/LVpY9qi5LOHkDtSGjfOglzTDZt4mVD8VRSvrnt8DmdhZ/xp9f14sYnv0HkrC7hPbn2+Lu
AgXx4nrImTCryTveIUf8i5QqewXD804Ha5bvDvuDncEsN5X4JwyEp1aETidevi3fEJLGYGppzsLh
GREYCRf1oy4+sgIlToxCccAo58mBfp/CuRwS6StZTDeqaVYVkFB8wU7fMtU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData><ds:Signature
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
Id="SIG-3"><ds:SignedInfo><ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
PrefixList="soap"/></ds:CanonicalizationMethod><ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><ds:Reference
URI="#Id-911767762"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
PrefixList=""/></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Um8pRjA8bb07rMROIQzEBUbtpUk=</ds:DigestValue></ds:Reference><ds:Reference
URI="#Id-1784954589"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>rsaq3DW6CevsNUqEgPsHx9/FIvY=</ds:DigestValue></ds:Reference><ds:Reference
URI="#Id-1532712380"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>TCeWvmMqBAyceHjwTT9Utb96nLI=</ds:DigestValue></ds:Reference><ds:Reference
URI="#Id-1230624895"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Q16J5bLFRiImkPdlS3X4yveKpmc=</ds:DigestValue></ds:Reference><ds:Reference
URI="#Id-697606008"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Zy+UIJzBJyDuoEPxXIJgM6nJXZA=</ds:DigestValue></ds:Reference><ds:Reference
URI="#TS-1"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; PrefixList="wsse
soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>drXL3gj9LuKW0eMwh1ggWuUndms=</ds:DigestValue></ds:Reference><ds:Reference
URI="#UsernameToken-2"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>RZjirIYLnwze6FsKusnPYS2f8/0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>6HPCyMQlsSGrGet40PnCwWcOmOI=</ds:SignatureValue><ds:KeyInfo
Id="KI-B4ECDC98AEA8F58C1313081516968372"><wsse:SecurityTokenReference
xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey";
wsu:Id="STR-B4ECDC98AEA8F58C1313081516968373"><wsse:Reference
URI="#EK-B4ECDC98AEA8F58C1313081516968151"
ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey"/></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></soap:Header><soap:Body
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-911767762"><xenc:EncryptedData
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; Id="ED-4"
Type="http://www.w3.org/2001/04/xmlenc#Content";><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey";><wsse:Reference
URI="#EK-B4ECDC98AEA8F58C1313081516968151"/></wsse:SecurityTokenReference>
</ds:KeyInfo><xenc:CipherData><xenc:CipherValue>AoA35gu8SRZb8jPnO427b44NLt267NrCN/02AqpvEJNBaIUFBHe5dtHQ4qCz7wGLLzVGcK08iRFo
z8wvi2D2HrXxSMQj4jThfaLZ+Ojgy2U6eGIW2bB4JfUNFgW5asd7pBizqLwkT8trwcPgEr21XqQh
qCq+yxkr0GHmKcp8am6I4+kUxxqBsyhHw6ggPOOyYYRlcjPWBZmAO8xZ2LmdRJhd+2oAihguboDt
bb5OSgP1gQoHRlqfL9Q0CNva0IsTyXvuV80J5HjCeo2CtiGw3uwRBFQjlqupOtbxC2dottvaEEwz
gKCoPuzzwgEzx2y9</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></soap:Body></soap:Envelope>
--------------------------------------
15 juin 2011 17:28:17 org.apache.cxf.interceptor.AbstractLoggingInterceptor log
INFO: Inbound Message
----------------------------
ID: 1
Response-Code: 200
Encoding: UTF-8
Content-Type: text/xml;charset=utf-8
Headers: {content-type=[text/xml;charset=utf-8], Date=[Wed, 15 Jun 2011
15:27:59 GMT], Server=[GlassFish Server Open Source Edition 3.1],
transfer-encoding=[chunked], X-Powered-By=[Servlet/3.0 JSP/2.2 (GlassFish
Server Open Source Edition 3.1 Java/Oracle Corporation/1.7)]}
Payload: <?xml version='1.0' encoding='UTF-8'?><S:Envelope
xmlns:S="http://schemas.xmlsoap.org/soap/envelope/";
xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
xmlns:xs="http://www.w3.org/2001/XMLSchema";
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";
xmlns:exc14n="http://www.w3.org/2001/10/xml-exc-c14n#";><S:Header><To
xmlns="http://www.w3.org/2005/08/addressing";
wsu:Id="_5005">http://www.w3.org/2005/08/addressing/anonymous</To><Action
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:S="http://schemas.xmlsoap.org/soap/envelope/"; S:mustUnderstand="1"
wsu:Id="_5003">http://calculator.me.org/CalculatorWS/addResponse</Action><MessageID
xmlns="http://www.w3.org/2005/08/addressing";
wsu:Id="_5002">uuid:0688dfb4-7b67-441e-9072-5b46c8a1d942</MessageID><RelatesTo
xmlns="http://www.w3.org/2005/08/addressing";
wsu:Id="_5004">urn:uuid:a11ca17c-d4a8-4693-a65e-473c661596ed</RelatesTo><wsse:Security
S:mustUnderstand="1"><wsu:Timestamp
xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";
wsu:Id="_3"><wsu:Created>2011-06-15T15:27:59Z</wsu:Created><wsu:Expires>2011-06-15T15:32:59Z</wsu:Expires></wsu:Timestamp><xenc:ReferenceList
xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";><xenc:DataReference
URI="#_5007" /></xenc:ReferenceList><ds:Signature
xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";
Id="_1"><ds:SignedInfo><ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="wsse S" /></ds:CanonicalizationMethod><ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"; /><ds:Reference
URI="#_5002"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>bcnLSlFsom4X6WCQqBtKQ8jaUrw=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_5003"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>AmZ7hFb58NXg+JWKY6TuSE4peho=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_5004"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>tawDeUn6/ZPuC5rVIeYwTHIC68k=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_5005"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>Nd/8wVmBdLowQKMblBRYK+6xcjA=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_5006"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>DdV2kRGL8sX2eRCRdXtZ5mMtetw=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_3"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="wsu wsse S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>s7Vbn/hZ0/iJZfsdHRWn85Oh6mM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>9N7IiHXuYSVFnGImAsF2ERkN7hw=</ds:SignatureValue><ds:KeyInfo><wsse:SecurityTokenReference><wsse:KeyIdentifier
ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1";
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";>FMmZRiaRNpWZs8d2dp2M7ogfNNs=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></S:Header><S:Body
wsu:Id="_5006"><xenc:EncryptedData
xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
xmlns:ns17="http://www.w3.org/2003/05/soap-envelope"; Id="_5007"
Type="http://www.w3.org/2001/04/xmlenc#Content";><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"; /><ds:KeyInfo
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:type="KeyInfoType"><wsse:SecurityTokenReference><wsse:KeyIdentifier
ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1";
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";>FMmZRiaRNpWZs8d2dp2M7ogfNNs=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>iUSBLes/6+nzKMEKdjdJgd/E1vmEijXOKhd4SM+sz7H1Zk1EERDAZscFLWXXbL43F+txK/MQPi9048S9HatdDuA9ZjQiBvizNas6VuYQbxqFe7LyliVwCCNGGADxMXAwiu5mEp8YinzrdLzG1PyBgQ==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></S:Body></S:Envelope>
--------------------------------------
15 juin 2011 17:28:17 org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor
handleMessage
ATTENTION:
org.apache.ws.security.WSSecurityException: An invalid security token was
provided (Bad TokenType "")
at
org.apache.ws.security.str.BSPEnforcer.checkEncryptedKeyBSPCompliance(BSPEnforcer.java:115)
at
org.apache.ws.security.str.SecurityTokenRefSTRParser.parseSecurityTokenReference(SecurityTokenRefSTRParser.java:116)
at
org.apache.ws.security.processor.ReferenceListProcessor.decryptDataRefEmbedded(ReferenceListProcessor.java:154)
at
org.apache.ws.security.processor.ReferenceListProcessor.handleReferenceList(ReferenceListProcessor.java:96)
at
org.apache.ws.security.processor.ReferenceListProcessor.handleToken(ReferenceListProcessor.java:63)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:249)
at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85)
at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:762)
at
org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1582)
at
org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1467)
at
org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1375)
at
org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
at
org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
at
org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:623)
at
org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:510)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:343)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:295)
at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
at
org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
at $Proxy25.add(Unknown Source)
at CxfClient.main(CxfClient.java:117)
15 juin 2011 17:28:17 org.apache.cxf.phase.PhaseInterceptorChain
doDefaultLogging
ATTENTION: Interceptor for
{http://calculator.me.org/}CalculatorWSService#{http://calculator.me.org/}add
has thrown exception, unwinding now
org.apache.cxf.binding.soap.SoapFault: An invalid security token was provided
(Bad TokenType "")
at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.createSoapFault(WSS4JInInterceptor.java:644)
at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:308)
at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85)
at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:762)
at
org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1582)
at
org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1467)
at
org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1375)
at
org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
at
org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
at
org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:623)
at
org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:510)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:343)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:295)
at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
at
org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
at $Proxy25.add(Unknown Source)
at CxfClient.main(CxfClient.java:117)
Caused by: org.apache.ws.security.WSSecurityException: An invalid security
token was provided (Bad TokenType "")
at
org.apache.ws.security.str.BSPEnforcer.checkEncryptedKeyBSPCompliance(BSPEnforcer.java:115)
at
org.apache.ws.security.str.SecurityTokenRefSTRParser.parseSecurityTokenReference(SecurityTokenRefSTRParser.java:116)
at
org.apache.ws.security.processor.ReferenceListProcessor.decryptDataRefEmbedded(ReferenceListProcessor.java:154)
at
org.apache.ws.security.processor.ReferenceListProcessor.handleReferenceList(ReferenceListProcessor.java:96)
at
org.apache.ws.security.processor.ReferenceListProcessor.handleToken(ReferenceListProcessor.java:63)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:249)
... 20 more
Exception in thread "main" javax.xml.ws.WebServiceException: An invalid
security token was provided (Bad TokenType "")
at
org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:135)
at $Proxy25.add(Unknown Source)
at CxfClient.main(CxfClient.java:117)
Caused by: org.apache.ws.security.WSSecurityException: An invalid security
token was provided (Bad TokenType "")
at
org.apache.ws.security.str.BSPEnforcer.checkEncryptedKeyBSPCompliance(BSPEnforcer.java:115)
at
org.apache.ws.security.str.SecurityTokenRefSTRParser.parseSecurityTokenReference(SecurityTokenRefSTRParser.java:116)
at
org.apache.ws.security.processor.ReferenceListProcessor.decryptDataRefEmbedded(ReferenceListProcessor.java:154)
at
org.apache.ws.security.processor.ReferenceListProcessor.handleReferenceList(ReferenceListProcessor.java:96)
at
org.apache.ws.security.processor.ReferenceListProcessor.handleToken(ReferenceListProcessor.java:63)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:249)
at
org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85)
at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:762)
at
org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1582)
at
org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1467)
at
org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1375)
at
org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
at
org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
at
org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:623)
at
org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:510)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:343)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:295)
at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
at
org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
... 2 more
--------- Trace with cxf 2.3.5
15 juin 2011 17:46:49
org.springframework.context.support.AbstractApplicationContext prepareRefresh
INFO: Refreshing org.apache.cxf.bus.spring.BusApplicationContext@2353f67e:
startup date [Wed Jun 15 17:46:49 CEST 2011]; root of context hierarchy
15 juin 2011 17:46:50
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-jaxrs-binding.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-xml.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-http.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-ws-security.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-soap.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-jaxws.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-addr.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-policy.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-http-jetty.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.xml.XmlBeanDefinitionReader
loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource
[META-INF/cxf/cxf-extension-http.xml]
15 juin 2011 17:46:51
org.springframework.beans.factory.support.DefaultListableBeanFactory
registerBeanDefinition
INFO: Overriding bean definition for bean
'org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder': replacing
[Generic bean: class
[org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder]; scope=;
abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in
class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic bean:
class [org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder];
scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in
class path resource [META-INF/cxf/cxf-extension-http.xml]]
15 juin 2011 17:46:51
org.springframework.beans.factory.support.DefaultListableBeanFactory
registerBeanDefinition
INFO: Overriding bean definition for bean
'org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder': replacing
[Generic bean: class
[org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder]; scope=;
abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in
class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic bean:
class [org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder];
scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in
class path resource [META-INF/cxf/cxf-extension-http.xml]]
15 juin 2011 17:46:51
org.springframework.beans.factory.support.DefaultListableBeanFactory
registerBeanDefinition
INFO: Overriding bean definition for bean
'org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider': replacing
[Generic bean: class
[org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider]; scope=;
abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in
class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic bean:
class [org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider];
scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in
class path resource [META-INF/cxf/cxf-extension-http.xml]]
15 juin 2011 17:46:51
org.springframework.beans.factory.support.DefaultListableBeanFactory
registerBeanDefinition
INFO: Overriding bean definition for bean
'org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory': replacing
[Generic bean: class
[org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory]; scope=;
abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in
class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic bean:
class [org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory]; scope=;
abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined in
class path resource [META-INF/cxf/cxf-extension-http.xml]]
15 juin 2011 17:46:51
org.springframework.beans.factory.support.DefaultListableBeanFactory
preInstantiateSingletons
INFO: Pre-instantiating singletons in
org.springframework.beans.factory.support.DefaultListableBeanFactory@1fcef4f7:
defining beans
[cxf,org.apache.cxf.bus.spring.BusApplicationListener,org.apache.cxf.bus.spring.BusWiringBeanFactoryPostProcessor,org.apache.cxf.bus.spring.Jsr250BeanPostProcessor,org.apache.cxf.bus.spring.BusExtensionPostProcessor,org.apache.cxf.resource.ResourceManager,org.apache.cxf.configuration.Configurer,org.apache.cxf.binding.BindingFactoryManager,org.apache.cxf.transport.DestinationFactoryManager,org.apache.cxf.transport.ConduitInitiatorManager,org.apache.cxf.wsdl.WSDLManager,org.apache.cxf.phase.PhaseManager,org.apache.cxf.workqueue.WorkQueueManager,org.apache.cxf.buslifecycle.BusLifeCycleManager,org.apache.cxf.endpoint.ServerRegistry,org.apache.cxf.endpoint.ServerLifeCycleManager,org.apache.cxf.endpoint.ClientLifeCycleManager,org.apache.cxf.transports.http.QueryHandlerRegistry,org.apache.cxf.endpoint.EndpointResolverRegistry,org.apache.cxf.headers.HeaderManager,org.apache.cxf.catalog.OASISCatalogManager,org.apache.cxf.service.factory.FactoryBeanListenerManager,org.apache.cxf.endpoint.ServiceContractResolverRegistry,org.apache.cxf.binding.xml.XMLBindingFactory,org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder,org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder,org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider,org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory,org.apache.cxf.ws.security.policy.WSSecurityPolicyLoader,org.apache.cxf.binding.soap.SoapBindingFactory,org.apache.cxf.binding.soap.SoapTransportFactory,org.apache.cxf.binding.soap.customEditorConfigurer,org.apache.cxf.jaxws.context.WebServiceContextResourceResolver,org.apache.cxf.jaxws.context.WebServiceContextImpl,org.apache.cxf.ws.addressing.policy.AddressingAssertionBuilder,org.apache.cxf.ws.addressing.policy.AddressingPolicyInterceptorProvider,org.apache.cxf.ws.addressing.policy.UsingAddressingAssertionBuilder,org.apache.cxf.ws.policy.AssertionBuilderRegistry,org.apache.cxf.ws.policy.PolicyInterceptorProviderRegistry,org.apache.cxf.ws.policy.attachment.external.DomainExpressionBuilderRegistry,org.apache.cxf.ws.policy.attachment.external.EndpointReferenceDomainExpressionBuilder,org.apache.cxf.ws.policy.PolicyBuilder,org.apache.cxf.ws.policy.PolicyEngine,org.apache.cxf.ws.policy.attachment.wsdl11.Wsdl11AttachmentPolicyProvider,org.apache.cxf.ws.policy.attachment.ServiceModelPolicyProvider,org.apache.cxf.ws.policy.mtom.MTOMAssertionBuilder,org.apache.cxf.ws.policy.mtom.MTOMPolicyInterceptorProvider,org.apache.cxf.transport.http_jetty.JettyHTTPTransportFactory];
root of factory hierarchy
Service ==================
15 juin 2011 17:46:54
org.apache.cxf.service.factory.ReflectionServiceFactoryBean buildServiceFromWSDL
INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from
WSDL:
http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
15 juin 2011 17:46:57
org.apache.cxf.service.factory.ReflectionServiceFactoryBean buildServiceFromWSDL
INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from
WSDL:
http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
15 juin 2011 17:47:00 org.apache.cxf.interceptor.AbstractLoggingInterceptor log
INFO: Outbound Message
---------------------------
ID: 1
Address:
http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService
Encoding: UTF-8
Content-Type: text/xml
Headers: {Accept=[*/*], SOAPAction=["add"]}
Payload: <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/";
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";><soap:Header><Action
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-920482395">add</Action><MessageID
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-1615363167">urn:uuid:de69c745-497a-4b32-980a-8e28fa633d3d</MessageID><To
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-563831333">http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService</To><ReplyTo
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-1238538872"><Address>http://www.w3.org/2005/08/addressing/anonymous</Address></ReplyTo><wsse:Security
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
soap:mustUnderstand="1"><wsu:Timestamp
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Timestamp-3"><wsu:Created>2011-06-15T15:46:58.563Z</wsu:Created><wsu:Expires>2011-06-15T15:51:58.563Z</wsu:Expires></wsu:Timestamp><xenc:EncryptedKey
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";
Id="EncKeyId-ACC6DD7816E9A2847413081528198822"><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";><wsse:KeyIdentifier
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier";>thYJff4nVK/4RwZSJkgNY8n/leI=</wsse:KeyIdentifier></wsse:SecurityTokenReference>
</ds:KeyInfo><xenc:CipherData><xenc:CipherValue>TBgxpGd7Ko/8uThPSzicdtseLmnd7O64OovL4DqAyHVuP/ICbAhe2D0FfHj6EBi8u/y9IuiXc++A4lnpcHt3KV6EUCyYkMgC9wxTb2QtWBhf+0vgdflCbcFJf+tNmSo2TYLgSAtIVdXnwEJi8ymzjVRTWbIpwr34YhrgA8fI0IY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey><xenc:ReferenceList
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";><xenc:DataReference
URI="#EncDataId-6"/><xenc:DataReference
URI="#EncDataId-7"/></xenc:ReferenceList><xenc:EncryptedData
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; Id="EncDataId-7"
Type="http://www.w3.org/2001/04/xmlenc#Element";><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";><wsse:Reference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
URI="#EncKeyId-ACC6DD7816E9A2847413081528198822"/></wsse:SecurityTokenReference>
</ds:KeyInfo><xenc:CipherData><xenc:CipherValue>/ao9FkkBsF+EnUrFTp7EYpw9785NjBcoXmA+CEpWM1gWFB1/UFhdsgYiy/eenCX4bgWttF1F+uyV
5+PoeKkC6U4ZEpjFPmMJmqHBEPuR9AHon5TNIooHVd8OwI0KX3qYymgk1FLFLIkmnRo7opUuac0A
3+pPA5maub9cEcdHN3BqtpZSciGlahI/YxKgJhL/8oJK26YOQaBeYVliMXSK9yIVja/uAuLu6EwM
r5o2/sXHQaGRSNqwRDfe7cGUNbpC3RkMWBbxTRMp2VJUP9N0rY1MB4KQaC440HUjUKHzcNI77VjY
+Sn6iDSV++eZM9FiLabyAaNZd2XuH6PY7fZaOqZHxzuPp7zwhBIhhXV32OJ2fYodZfMyMpfwWKnx
D7xwPxbxGDAIQHsZhVb6tSvQAeHuMWsIJektwe1cbrdi9kFBxABLFWUAqpBcTZsAOosik4ExsVUf
62btnsDGV6MqD0ydIbAY0MOYMJnLjstzPT7fVLHvhK5Br0oaJcKGQGiVPWVUH4JcwF2KcS0FyLXr
Bn6/Br12P5tOVOeHJcPcbxRJn/PLlgaOXDQh+oCD7I8zYfHNJ2SSVvTj3ZQc+zjZ9Z7Ykh2hp2VW
Svv+XIFXI5M=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData><ds:Signature
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; Id="Signature-5">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/>
<ds:Reference URI="#Id-112258534">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>WVUx0bfLqREMBnbFfjSvhn3N1Ig=</ds:DigestValue>
</ds:Reference>
<ds:Reference URI="#Id-1238538872">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>EfIGoVIvhWNCGN07fW7fg4BzttA=</ds:DigestValue>
</ds:Reference>
<ds:Reference URI="#Id-563831333">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>7jg4jJfUrfEIAA8vGOg440hnb74=</ds:DigestValue>
</ds:Reference>
<ds:Reference URI="#Id-1615363167">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>vnFedd5iyMprVfehEa71alepUqA=</ds:DigestValue>
</ds:Reference>
<ds:Reference URI="#Id-920482395">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>CxJfCxPkSUmyvkVVj9m7lQvtsR0=</ds:DigestValue>
</ds:Reference>
<ds:Reference URI="#Timestamp-3">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>AowppheezBWAdDF5+tGwW+FJlog=</ds:DigestValue>
</ds:Reference>
<ds:Reference URI="#UsernameToken-4">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>qgHOLz+6KaWLhx/5/QvRGou2Zwk=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>rJ7+/dPb2L8cyfxg2BS2qwIw/LU=</ds:SignatureValue>
<ds:KeyInfo Id="KeyId-ACC6DD7816E9A2847413081528199813">
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="STRId-ACC6DD7816E9A2847413081528199814"><wsse:Reference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
URI="#EncKeyId-ACC6DD7816E9A2847413081528198822"
ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey"/></wsse:SecurityTokenReference>
</ds:KeyInfo>
</ds:Signature></wsse:Security></soap:Header><soap:Body
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-112258534"><xenc:EncryptedData
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; Id="EncDataId-6"
Type="http://www.w3.org/2001/04/xmlenc#Content";><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";><wsse:Reference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
URI="#EncKeyId-ACC6DD7816E9A2847413081528198822"/></wsse:SecurityTokenReference>
</ds:KeyInfo><xenc:CipherData><xenc:CipherValue>Z6Z5TqeuuNX9otsCBUJ0nHg7r7rLaonPcloiQxrk3w6v8J9X/DqylDz+T58kH5izL9oJfRLiyIL9
v24g0PIUaYiBHE1OwfIZ1WBGjqgiFF8ILq4+xr/c0BewIg+1aOX2tNYDSl7fynXouD3uEV5zO82I
yH/2I6u5TnSS5kArkgN0PW90bkgl67TSNTBUafcYv+GO2k4Yt4vSlAtGY+mOkgyNWdWp9z6IQmmL
vhPXMI9sdjO9+nAATB8fdRICxVoBZ4O7cSkLzsyzB5cCNkRHWoj2J2J2wX6ePodTpOOLuAKM6td9
x7kdojYNgQXDVekx3AAbi3a3/Pge+hG/lPYD9f+/lTbGpQDrIgJPRoJJDnGFcE2AAYySmJOn7pze
5nan</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></soap:Body></soap:Envelope>
--------------------------------------
15 juin 2011 17:47:00 org.apache.cxf.interceptor.AbstractLoggingInterceptor log
INFO: Inbound Message
----------------------------
ID: 1
Response-Code: 200
Encoding: UTF-8
Content-Type: text/xml;charset=utf-8
Headers: {content-type=[text/xml;charset=utf-8], Date=[Wed, 15 Jun 2011
15:46:42 GMT], Server=[GlassFish Server Open Source Edition 3.1],
transfer-encoding=[chunked], X-Powered-By=[Servlet/3.0 JSP/2.2 (GlassFish
Server Open Source Edition 3.1 Java/Oracle Corporation/1.7)]}
Payload: <?xml version='1.0' encoding='UTF-8'?><S:Envelope
xmlns:S="http://schemas.xmlsoap.org/soap/envelope/";
xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
xmlns:xs="http://www.w3.org/2001/XMLSchema";
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";
xmlns:exc14n="http://www.w3.org/2001/10/xml-exc-c14n#";><S:Header><To
xmlns="http://www.w3.org/2005/08/addressing";
wsu:Id="_5005">http://www.w3.org/2005/08/addressing/anonymous</To><Action
xmlns="http://www.w3.org/2005/08/addressing";
xmlns:S="http://schemas.xmlsoap.org/soap/envelope/"; S:mustUnderstand="1"
wsu:Id="_5003">http://calculator.me.org/CalculatorWS/addResponse</Action><MessageID
xmlns="http://www.w3.org/2005/08/addressing";
wsu:Id="_5002">uuid:74b175e8-a26d-451f-9a91-43b44ab5c440</MessageID><RelatesTo
xmlns="http://www.w3.org/2005/08/addressing";
wsu:Id="_5004">urn:uuid:de69c745-497a-4b32-980a-8e28fa633d3d</RelatesTo><wsse:Security
S:mustUnderstand="1"><wsu:Timestamp
xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";
wsu:Id="_3"><wsu:Created>2011-06-15T15:46:42Z</wsu:Created><wsu:Expires>2011-06-15T15:51:42Z</wsu:Expires></wsu:Timestamp><xenc:ReferenceList
xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";><xenc:DataReference
URI="#_5007" /></xenc:ReferenceList><ds:Signature
xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";
Id="_1"><ds:SignedInfo><ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="wsse S" /></ds:CanonicalizationMethod><ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"; /><ds:Reference
URI="#_5002"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>8rIil0YLhCXApz3m2LLNw+hyCfg=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_5003"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>AmZ7hFb58NXg+JWKY6TuSE4peho=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_5004"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>x0m4+V7SB9qZTYG1Jma3LyN3Udo=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_5005"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>Nd/8wVmBdLowQKMblBRYK+6xcjA=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_5006"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>DdV2kRGL8sX2eRCRdXtZ5mMtetw=</ds:DigestValue></ds:Reference><ds:Reference
URI="#_3"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
PrefixList="wsu wsse S" /></ds:Transform></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
/><ds:DigestValue>gVnY4glzzN0coUKH0YOtLoYzJzU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>EKSf/J9nJRgXOpnFLjL9GrdZ8v4=</ds:SignatureValue><ds:KeyInfo><wsse:SecurityTokenReference><wsse:KeyIdentifier
ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1";
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";>GOLuRal0DdjB+XWqLeILV+j/bn4=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></S:Header><S:Body
wsu:Id="_5006"><xenc:EncryptedData
xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
xmlns:ns17="http://www.w3.org/2003/05/soap-envelope"; Id="_5007"
Type="http://www.w3.org/2001/04/xmlenc#Content";><xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"; /><ds:KeyInfo
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:type="KeyInfoType"><wsse:SecurityTokenReference><wsse:KeyIdentifier
ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1";
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";>GOLuRal0DdjB+XWqLeILV+j/bn4=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>9wm0h8fiyQMirDnLQFHMRmEAQzHJrkDxgPSW3m/R5r8hp0HDzJL9xEcf5Xd8XOgtV+ByJuGtiAa++M4h+thCMaNCjsbPR5Bnd99yf4LUJEw4UgWaT5qpLeOUJzVrSH1rTPZD18tKsnEf8W4RRIvJ3Q==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></S:Body></S:Envelope>
--------------------------------------
Result 1 + 1 = 2
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
