[
https://issues.apache.org/jira/browse/RAMPART-324?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13118981#comment-13118981
]
Andreas Veithen commented on RAMPART-324:
-----------------------------------------
Both the existing code and the proposed patch are incorrect. In order to
construct the namespace context in which the XPath expression is interpreted,
it is not sufficient to look at the namespaces declared on a single element
(the sp:XPath element in the existing code and the sp:EncryptedElements element
in the patch). Instead, the namespace context must be constructed by looking at
the namespace declarations of sp:XPath as well as all of its ancestors.
This is an example of what I described in AXIOM-388.
> Caused by: org.apache.ws.security.WSSecurityException: General security error
> (WSEncryptBody/WSSignE nvelope: Element to encrypt/sign not found:
> {http://ws.apache.org/axis2}args0)
> -----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: RAMPART-324
> URL: https://issues.apache.org/jira/browse/RAMPART-324
> Project: Rampart
> Issue Type: Bug
> Components: rampart-core, rampart-policy
> Affects Versions: 1.4
> Environment: Windows XP, Rampart 1.4,JDK1.5_06,Axis2 1.5
> Reporter: Abhinav Mishra
> Assignee: Thilina Buddhika
> Priority: Critical
> Labels: security
> Attachments: Client.java, Multiplication4.java,
> Multiplication4CallbackHandler.java, Multiplication4Stub.java,
> PWCBHandler.java, PWCBHandler.java, RAMPART-324.diff, client.jks,
> service.jks, services.xml
>
> Original Estimate: 504h
> Remaining Estimate: 504h
>
> Here I am trying to run a multiplication service in which I pass 2
> parameters. In these two parameters I am trying to encrypt and sign only
> single element. For this I am using <SignedElements> and <EncryptedElements>
> assertions. I am calling the service using Client stub in which the namaspace
> generated is xmlns:ns1="http://ws.apache.org/axis2";. I amt trying to use
> Xpath for that element as
> <sp:XPath>/soapenv:Envelope/soapenv:Body/ns1:mul/ns1:args0</sp:XPath> where
> soapenv is xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope";>.
> When this got error i changed Xpath to:
> <sp:XPath>descendant::ns1:args0</sp:XPath>
> But i am getting an error which is
> Caused by: org.apache.ws.security.WSSecurityException: General security error
> (WSEncryptBody/WSSignE nvelope: Element to encrypt/sign not found:
> {http://ws.apache.org/axis2}args0)
> Abhinav
> Abhinav Mishra
> Exception in thread "main" org.apache.axis2.AxisFault: Error during encryption
> at
> org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:70)
> at org.apache.axis2.engine.Phase.invoke(Phase.java:318)
> at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:251)
> at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:416)
> at
> org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:402)
> at
> org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java
> :229)
> at
> org.apache.axis2.client.OperationClient.execute(OperationClient.java:165)
> at
> org.apache.ws.axis2.Multiplication4Stub.mul(Multiplication4Stub.java:187)
> at org.apache.ws.axis2.Client.main(Client.java:38)
> Caused by: org.apache.rampart.RampartException: Error during encryption
> at
> org.apache.rampart.builder.AsymmetricBindingBuilder.doSignBeforeEncrypt(AsymmetricBinding
> Builder.java:544)
> at
> org.apache.rampart.builder.AsymmetricBindingBuilder.build(AsymmetricBindingBuilder.java:9
> 3)
> at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:147)
> at
> org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:64)
> ... 8 more
> Caused by: org.apache.ws.security.WSSecurityException: General security error
> (WSEncryptBody/WSSignE
> nvelope: Element to encrypt/sign not found: {http://ws.apache.org/axis2}args0)
> at
> org.apache.ws.security.message.WSSecEncrypt.doEncryption(WSSecEncrypt.java:496)
> at
> org.apache.ws.security.message.WSSecEncrypt.doEncryption(WSSecEncrypt.java:454)
> at
> org.apache.ws.security.message.WSSecEncrypt.encryptForInternalRef(WSSecEncrypt.java:351)
> at
> org.apache.rampart.builder.AsymmetricBindingBuilder.doSignBeforeEncrypt(AsymmetricBinding
> Builder.java:530)
> ... 11 more
> So,please help me to solve this issue.
> Here i am attaching my code and services.xml file.
> Thanks in advance!!!
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: java-dev-h...@axis.apache.org
