Policy Sample 04 on application scope fails with "Error in key derivation"
--------------------------------------------------------------------------

                 Key: RAMPART-116
                 URL: https://issues.apache.org/jira/browse/RAMPART-116
             Project: Rampart
          Issue Type: Bug
    Affects Versions: 1.2
         Environment: Windows XP SP2, Java 1.6.0_02, Axis2 1.2
            Reporter: David Karnok


When I try to run the policy sample 04 application with service 
scope='application' (or any service based on those policy configurations) I get 
the following exception. If it is in request scope no exception is raised and 
works OK.

org.apache.ws.security.WSSecurityException: Error in key derivation; nested 
exception is: 
        org.apache.ws.security.conversation.ConversationException: Error in key 
derivation
        at 
org.apache.ws.security.processor.DerivedKeyTokenProcessor.deriveKey(DerivedKeyTokenProcessor.java:104)
        at 
org.apache.ws.security.processor.DerivedKeyTokenProcessor.handleToken(DerivedKeyTokenProcessor.java:82)
        at 
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:284)
        at 
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:206)
        at 
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:159)
        at org.apache.rampart.RampartEngine.process(RampartEngine.java:65)
        at 
org.apache.rampart.handler.RampartReceiver.invoke(RampartReceiver.java:71)
        at org.apache.axis2.engine.Phase.invoke(Phase.java:383)
        at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:203)
        at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:131)
        at 
org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPostRequest(HTTPTransportUtils.java:279)
        at 
org.apache.axis2.transport.http.HTTPWorker.service(HTTPWorker.java:216)
        at 
org.apache.axis2.transport.http.server.AxisHttpService.doService(AxisHttpService.java:275)
        at 
org.apache.axis2.transport.http.server.AxisHttpService.handleRequest(AxisHttpService.java:184)
        at 
org.apache.axis2.transport.http.server.HttpServiceProcessor.run(HttpServiceProcessor.java:74)
        at 
edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:665)
        at 
edu.emory.mathcs.backport.java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:690)
        at java.lang.Thread.run(Thread.java:619)
Caused by: org.apache.ws.security.conversation.ConversationException: Error in 
key derivation
        at 
org.apache.ws.security.conversation.dkalgo.P_SHA1.createKey(P_SHA1.java:65)
        at 
org.apache.ws.security.processor.DerivedKeyTokenProcessor.deriveKey(DerivedKeyTokenProcessor.java:101)
        ... 17 more
Caused by: java.lang.IllegalArgumentException: Missing argument
        at javax.crypto.spec.SecretKeySpec.<init>(DashoA13*..)
        at 
org.apache.ws.security.conversation.dkalgo.P_SHA1.P_hash(P_SHA1.java:86)
        at 
org.apache.ws.security.conversation.dkalgo.P_SHA1.createKey(P_SHA1.java:55)
        ... 18 more

Seems, that the sct token is incorrectrly created at the client side.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to