Hi, The BouncyCastle exception is not a problem, it's just a message that the BouncyCastle jar (which is optional) is not being used. If it's not working with Jetty, and is working with Tomcat, then it sounds like the previous problem, which I have not yet gotten to the bottom of. Can you please confirm that the testcase still fails with JDK 1.5 on Jetty? If so, supplying the test-case would be great, as I'm having difficulty debugging the other issue due to the fact the signature verification code is in the JDK, and it works with JDK 1.5.
Colm. On Tue, Jul 5, 2011 at 6:18 PM, mickysantomax <[email protected]> wrote: > I use /slf4j/ as logger and set it to /trace/ level, but the log remain the > same. If I copy only war file from my target dir after installation with > maven (we can call it "original war file") in log there's a > java.lang.ClassNotFoundException: > org.bouncycastle.jce.provider.BouncyCastleProvider and after the > org.apache.ws.security.WSSecurityException: The signature or decryption was > invalid exception: > > http://cxf.547215.n5.nabble.com/file/n4554059/jettyLogWithoutBoucyCastleLib.log > jettyLogWithoutBoucyCastleLib.log > > If I add manually jar of boucyCastle from cxf 2.3.3 (we can call it > "modified war file") the java.lang.ClassNotFoundException: > org.bouncycastle.jce.provider.BouncyCastleProvider error is not present but > persist the org.apache.ws.security.WSSecurityException: The signature or > decryption was invalid exception: > > http://cxf.547215.n5.nabble.com/file/n4554059/jettyLogWithBoucyCastleLib.log > jettyLogWithBoucyCastleLib.log > > I tried also with /apache tomcat/ but problem doesn't occur. Below there's > also an extraction of log of tomcat: > > 1 - ["original war file"]) > http://cxf.547215.n5.nabble.com/file/n4554059/tomcatLogWithoutBoucyCastleLib.log > tomcatLogWithoutBoucyCastleLib.log > > 2 - ["modified war file"]) > http://cxf.547215.n5.nabble.com/file/n4554059/tomcatLogWithBoucyCastleLib.log > tomcatLogWithBoucyCastleLib.log > > -- > View this message in context: > http://cxf.547215.n5.nabble.com/Problem-with-WS-Security-and-CXF-2-4-0-tp4443698p4554059.html > Sent from the cxf-user mailing list archive at Nabble.com. > -- Colm O hEigeartaigh http://coheigea.blogspot.com/ Talend - http://www.talend.com
