Thanks Ruchith!

I tried out giving a wrong keystore password. It throws a different
exception: java.io.IOException: Keystore was tampered with, or password was
incorrect. Which means the password I was using is a correct one. 

I have 3 certificates (root, intermediate and tmlw_docusign_low_env) in the
keystore, each have a different alias. The keystore was generated using
"tmlw_docusign_low_env" alias. Then I imported root, intermediate and
servercert into the keystore. I am using the alias when the keystore was
first generated, i.e. "tmlw_docusign_low_env". 

BTW, the keystore works fine in Axis1, but failed in Axis2. 

Anything could be wrong?





Ruchith Fernando wrote:
> 
> Hi gz_wf,
> 
> Did you set the correct password of the key "tmlw_docusign_low_env" in
> the callback handler?
> 
> Also the following might be helpful as well:
> http://wso2.org/library/116
> http://mail-archives.apache.org/mod_mbox/ws-fx-dev/200509.mbox/%[email protected]%3E
> 
> Thanks,
> Ruchith
> 
> 
> 
> 
> On Mon, Jul 18, 2011 at 11:23 AM, gz_wf <[email protected]>
> wrote:
>>
>> Hi,
>>
>> I am trying to integrate X.509 cert into Axis2 and get the following
>> error:
>>
>>
>> org.apache.axis2.AxisFault: WSHandler: Signature: error during message
>> processingorg.apache.ws.security.WSSecurityException: General security
>> error
>> (Unexpected number of X509Data: for Signature)
>>        at
>> org.apache.rampart.handler.WSDoAllSender.processMessage(WSDoAllSender.java:67)
>>        at
>> org.apache.rampart.handler.WSDoAllHandler.invoke(WSDoAllHandler.java:72)
>>        at org.apache.axis2.engine.Phase.invoke(Phase.java:317)
>>        at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:264)
>>        at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:429)
>>        at
>> org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:401)
>>        at
>> org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:228)
>>        at
>> org.apache.axis2.client.OperationClient.execute(OperationClient.java:163)
>>        at
>> net.docusign.www.api._3_0.APIServiceSoapStub.Ping(APIServiceSoapStub.java:4846)
>>        at
>> com.wellsfargo.tmlaw.docusign.wsclient.DocusignClientCert.main(DocusignClientCert.java:103)
>> Caused by: org.apache.ws.security.WSSecurityException: WSHandler:
>> Signature:
>> error during message
>> processingorg.apache.ws.security.WSSecurityException:
>> General security error (Unexpected number of X509Data: for Signature)
>>        at
>> org.apache.ws.security.action.SignatureAction.execute(SignatureAction.java:57)
>>        at
>> org.apache.ws.security.handler.WSHandler.doSenderAction(WSHandler.java:197)
>>        at
>> org.apache.rampart.handler.WSDoAllSender.processBasic(WSDoAllSender.java:201)
>>        at
>> org.apache.rampart.handler.WSDoAllSender.processMessage(WSDoAllSender.java:64)
>>        ... 9 more
>>
>> here is the detail of axis2.xml:
>>
>> <axisconfig name="AxisJava2.0">
>>        <module ref="addressing" />
>>        <module ref="rampart" />
>>
>>        <!-- Authentication: Username Token + X509 -->
>>        <parameter name="OutflowSecurity">
>>                <action>
>>                        <items>Signature UsernameToken Timestamp</items>
>>                      
>>  <user>[WELL-f7397b43-08af-4eae-89cd-0abb75ada845][email protected]</user>
>>                      
>>  <passwordCallbackClass>com.wsclient.Authenticator</passwordCallbackClass>
>>                        <passwordType>PasswordText</passwordType>
>>                      
>>  <signatureUser>tmlw_docusign_low_env</signatureUser>
>>                      
>>  <signatureKeyIdentifier>DirectReference</signatureKeyIdentifier>
>>                      
>>  <signaturePropFile>cert.properties</signaturePropFile>
>>                        <signatureCrypto>
>>                                <crypto
>> provider="org.apache.ws.security.components.crypto.Merlin">
>>                                        <property
>> name="org.apache.ws.security.crypto.merlin.keystore.type">jks</property>
>>                                        <property
>> name="org.apache.ws.security.crypto.merlin.file">tmlw_docusign_low_env.jks</property>
>>                                        <property
>> name="org.apache.ws.security.crypto.merlin.keystore.alias">tmlw_docusign_low_env</property>
>>                                        <property
>> name="org.apache.ws.security.crypto.merlin.keystore.password">mypassword</property>
>>                                </crypto>
>>                        </signatureCrypto>
>>                </action>
>>        </parameter>
>>
>>
>> cert.properties is
>>
>> org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
>> org.apache.ws.security.crypto.merlin.keystore.type=jks
>> org.apache.ws.security.crypto.merlin.file=tmlw_docusign_low_env.jks
>> org.apache.ws.security.crypto.merlin.keystore.alias=tmlw_docusign_low_env
>> org.apache.ws.security.crypto.merlin.keystore.password=mypassword
>>
>>
>> axis2.xml, cert.properties and keystore tmlw_docusign_low_env.jks are all
>> inside the same directory and within classpath.
>>
>> The keystore has 3 entries: root, intermediate and tmlw_docusign_low_env
>>
>> The alias of the last one is tmlw_docusign_low_env.
>>
>>
>> Any insight of this issue is highly appreciated!
>>
>> gz_wf
>>
>>
>>
>>
>>
>>
>> --
>> View this message in context:
>> http://old.nabble.com/Problem-while-configuring-keystore-file.-tp32085367p32085367.html
>> Sent from the Axis - Dev mailing list archive at Nabble.com.
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected]
>> For additional commands, e-mail: [email protected]
>>
>>
> 
> 
> 
> -- 
> http://ruchith.org
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
> 
> 
> 

-- 
View this message in context: 
http://old.nabble.com/Problem-while-configuring-keystore-file.-tp32085367p32103201.html
Sent from the Axis - Dev mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to