A quick update, I found that I add UsernameToken into Action, now the private
key password works.
But when I try to remove the keystone password or modify wrong one,
PasswordCallback is constructed but never call handle method and throw such
exception:
Caused by: org.apache.wss4j.common.ext.WSSecurityException: Failed to load
credentials.
Original Exception was java.io.IOException: Keystore was tampered with, or
password was incorrect
at org.apache.wss4j.common.crypto.Merlin.load(Merlin.java:397)
at org.apache.wss4j.common.crypto.Merlin.loadProperties(Merlin.java:218)
at org.apache.wss4j.common.crypto.Merlin.<init>(Merlin.java:151)
at
org.apache.wss4j.common.crypto.CryptoFactory.getInstance(CryptoFactory.java:127)
... 46 more
Caused by: java.io.IOException: Keystore was tampered with, or password was
incorrect
at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780)
at
sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
at
sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
at
sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
at java.security.KeyStore.load(KeyStore.java:1445)
at org.apache.wss4j.common.crypto.Merlin.load(Merlin.java:391)
... 49 more
Caused by: java.security.UnrecoverableKeyException: Password verification
failed
at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:778)
... 54 more
--
View this message in context:
http://cxf.547215.n5.nabble.com/Password-Callback-did-not-fire-tp5770579p5770580.html
Sent from the cxf-user mailing list archive at Nabble.com.