Re: WS-Security Signature not working via SoapUI

Colm O hEigeartaigh Wed, 05 Nov 2014 09:15:11 -0800

Ok cool. For the record, this is the issue you ran into:
https://issues.apache.org/jira/browse/CXF-5724


Colm.

On Wed, Nov 5, 2014 at 5:11 PM, garethahealy <[email protected]> wrote:

> So after a bit of playing around, as i'd seen your comment about
> whitespaces
> in other posts, i've got it working.
>
> So what i did:
>
> -Create a new request in SoapUI
> -Click Auth tab at bottom of request screen
> -Add new auth - Basic
> -Select 'Outgoing WS-S' with a valid option
>
> At this point, i still get the invalid exception. I then removed the
> whitespaces at the end, i.e.:
>
> &lt;soapenv:Envelope
> xmlns:hel=&quot;http://helloworld.garethahealy.com&quot;
> xmlns:soapenv=&quot;http://schemas.xmlsoap.org/soap/envelope/&quot;&gt;
>    &lt;soapenv:Header&gt;&lt;wsse:Security
> soapenv:mustUnderstand=&quot;1&quot;
> xmlns:wsse=&quot;
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd&quot
> ;
> xmlns:wsu=&quot;
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd&quot;&gt;&lt;wsse:UsernameToken
>
> wsu:Id=&quot;UsernameToken-175BD6F71725864A01141520724606034&quot;&gt;&lt;wsse:Username&gt;clientx509v1&lt;/wsse:Username&gt;&lt;wsse:Password
>
> Type=&quot;http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText&quot;&gt;storepassword&lt;/wsse:Password&gt;&lt;/wsse:UsernameToken&gt;&lt;wsu:Timestamp
>
> wsu:Id=&quot;TS-175BD6F71725864A01141520724606033&quot;&gt;&lt;wsu:Created&gt;2014-11-05T17:07:26.060Z&lt;/wsu:Created&gt;&lt;wsu:Expires&gt;2014-11-05T17:24:06.060Z&lt;/wsu:Expires&gt;&lt;/wsu:Timestamp&gt;&lt;ds:Signature
> Id=&quot;SIG-175BD6F71725864A01141520724605532&quot;
> xmlns:ds=&quot;
> http://www.w3.org/2000/09/xmldsig#&quot;&gt;&lt;ds:SignedInfo&gt;&lt;ds:CanonicalizationMethod
>
> Algorithm=&quot;http://www.w3.org/2001/10/xml-exc-c14n#&quot;&gt;&lt;ec:InclusiveNamespaces
> PrefixList=&quot;hel soapenv&quot;
> xmlns:ec=&quot;
> http://www.w3.org/2001/10/xml-exc-c14n#&quot;/&gt;&lt;/ds:CanonicalizationMethod&gt;&lt;ds:SignatureMethod
>
> Algorithm=&quot;http://www.w3.org/2000/09/xmldsig#rsa-sha1&quot;/&gt;&lt;ds:Reference
>
> URI=&quot;#id-175BD6F71725864A01141520724605431&quot;&gt;&lt;ds:Transforms&gt;&lt;ds:Transform
>
> Algorithm=&quot;http://www.w3.org/2001/10/xml-exc-c14n#&quot;&gt;&lt;ec:InclusiveNamespaces
> PrefixList=&quot;hel&quot;
> xmlns:ec=&quot;
> http://www.w3.org/2001/10/xml-exc-c14n#&quot;/&gt;&lt;/ds:Transform&gt;&lt;/ds:Transforms&gt;&lt;ds:DigestMethod
>
> Algorithm=&quot;http://www.w3.org/2000/09/xmldsig#sha1&quot;/&gt;&lt;ds:DigestValue&gt;0q6mB5bOxArPfLv8rnk3sQmnrIY=&lt;/ds:DigestValue&gt;&lt;/ds:Reference&gt;&lt;/ds:SignedInfo&gt;&lt;ds:SignatureValue&gt;DxVV7o52d0CkHQdDDwSQtSGNT/A/MUUdF56oWscYTzrOleVrqPL/npSf6z330BO2WGFQTrzGAl9Q
>
> RRwIblO+8/QJoAlBmQrVR+c4mu1I03bw9N+VZ/4jEJtyH3UkloNjZK6iWVGf1+D/YsSSfV75z/Ke
> /SVhHzZNrG5FrfK2Zkk=&lt;/ds:SignatureValue&gt;&lt;ds:KeyInfo
>
> Id=&quot;KI-175BD6F71725864A01141520724605429&quot;&gt;&lt;wsse:SecurityTokenReference
>
> wsu:Id=&quot;STR-175BD6F71725864A01141520724605430&quot;&gt;&lt;ds:X509Data&gt;&lt;ds:X509IssuerSerial&gt;&lt;ds:X509IssuerName&gt;CN=Mayank
>
> Mishra,OU=Dev,O=Apache,L=INDORE,ST=MP,C=IN&lt;/ds:X509IssuerName&gt;&lt;ds:X509SerialNumber&gt;1245002984&lt;/ds:X509SerialNumber&gt;&lt;/ds:X509IssuerSerial&gt;&lt;/ds:X509Data&gt;&lt;/wsse:SecurityTokenReference&gt;&lt;/ds:KeyInfo&gt;&lt;/ds:Signature&gt;&lt;/wsse:Security&gt;&lt;/soapenv:Header&gt;
>    &lt;soapenv:Body wsu:Id=&quot;id-175BD6F71725864A01141520724605431&quot;
> xmlns:wsu=&quot;
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd&quot;&gt
> ;
>       &lt;hel:helloWorldRequest&gt;
>          &lt;hello&gt;hello&lt;/hello&gt;
>
>
> &lt;/hel:helloWorldRequest&gt;&lt;/soapenv:Body&gt;&lt;/soapenv:Envelope&gt;
>
> And it works.
>
>
>
> --
> View this message in context:
> http://cxf.547215.n5.nabble.com/WS-Security-Signature-not-working-via-SoapUI-tp5750745p5750751.html
> Sent from the cxf-user mailing list archive at Nabble.com.
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: WS-Security Signature not working via SoapUI

Reply via email to