A quick update, I found that I add UsernameToken into Action, now the private
key password works.
But when I try to remove the keystone password or modify wrong one,
PasswordCallback is constructed but never call handle method and throw such
exception:

Caused by: org.apache.wss4j.common.ext.WSSecurityException: Failed to load
credentials.
Original Exception was java.io.IOException: Keystore was tampered with, or
password was incorrect
        at org.apache.wss4j.common.crypto.Merlin.load(Merlin.java:397)
        at org.apache.wss4j.common.crypto.Merlin.loadProperties(Merlin.java:218)
        at org.apache.wss4j.common.crypto.Merlin.<init>(Merlin.java:151)
        at
org.apache.wss4j.common.crypto.CryptoFactory.getInstance(CryptoFactory.java:127)
        ... 46 more
Caused by: java.io.IOException: Keystore was tampered with, or password was
incorrect
        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780)
        at 
sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
        at
sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
        at
sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
        at java.security.KeyStore.load(KeyStore.java:1445)
        at org.apache.wss4j.common.crypto.Merlin.load(Merlin.java:391)
        ... 49 more
Caused by: java.security.UnrecoverableKeyException: Password verification
failed
        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:778)
        ... 54 more



--
View this message in context: 
http://cxf.547215.n5.nabble.com/Password-Callback-did-not-fire-tp5770579p5770580.html
Sent from the cxf-user mailing list archive at Nabble.com.

Reply via email to