Guy, whatis your test configuration? Which certificates do you use?
What is the exception that xml-sec throws? Thanks, Werner > -----Ursprüngliche Nachricht----- > Von: Guy Rixon [mailto:[EMAIL PROTECTED] > Gesendet: Donnerstag, 16. März 2006 17:11 > An: Dittmann, Werner > Cc: [EMAIL PROTECTED]; [email protected] > Betreff: Re: AW: AW: Problems with signatures > > I've set the options on both client and service and the > verification still > fails. I've dumped the raw XML messages with and without the > options and there > doesn't seem to be any difference. > > On Thu, 16 Mar 2006, Dittmann, Werner wrote: > > > Probably on both if the service responds with signed messages. > > > > Regards, > > Werner > > > > > -----Ursprüngliche Nachricht----- > > > Von: Guy Rixon [mailto:[EMAIL PROTECTED] > > > Gesendet: Donnerstag, 16. März 2006 16:29 > > > An: [EMAIL PROTECTED] > > > Cc: Dittmann, Werner; [email protected] > > > Betreff: Re: AW: Problems with signatures > > > > > > Thanks. > > > > > > Do these parameters have to be set on the client, the > service or both? > > > Setting them just on the service doesn't fix the problem, and > > > to set them on > > > the client I have to find out how to do it programmatically. > > > > > > On Thu, 16 Mar 2006 [EMAIL PROTECTED] wrote: > > > > > > > Hi Guy > > > > setting these 2 props works for me. > > > > <parameter name="enableNamespacePrefixOptimization" > > > value="false" /> > > > > <parameter name="disablePrettyXML" value="true"/> > > > > > > > > thanks > > > > Anamitra > > > > > > > > > > > > > > > > "Dittmann, > > > > Werner" > > > > <werner.dittmann@ > > > To > > > > siemens.com> "Guy Rixon" > > > <[EMAIL PROTECTED]>, > > > > <[email protected]> > > > > 03/16/2006 09:10 > > > cc > > > > AM > > > > > > > Subject > > > > AW: Problems > with signatures > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > AFAIK there is a switch / parameter in the Axis WSDD files > > > > to disable XML pretty printing. Maybe this "feature" is enabled > > > > by default - pretty printing always destroys the signature > > > > hashes. > > > > > > > > Also there is a parameter for Axis to disable some sort > > > > of namespace optimization - sorry but I haven't the parameter > > > > names at hand. > > > > > > > > Regards, > > > > Werner > > > > > > > > > -----Ursprüngliche Nachricht----- > > > > > Von: Guy Rixon [mailto:[EMAIL PROTECTED] > > > > > Gesendet: Donnerstag, 16. März 2006 14:01 > > > > > An: [email protected] > > > > > Betreff: Problems with signatures > > > > > > > > > > Hi, > > > > > > > > > > can you help me with a signature problem? I have a client > > > > > and service, both > > > > > using WSS4J 1.0.0. The client signs the SOAP body of the > > > > > request, but the > > > > > signature checking in the service always fails at the XMLSec > > > > > level. The > > > > > signature uses a direct reference to a BinarySecurityToken, > > > > > and the service > > > > > seems to be reading the token properly; at least, it gets the > > > > > subject DN > > > > > right. > > > > > > > > > > I've checked the signature in the client immediately after > > > > > signing and it > > > > > verifies correctly there. Something bad seems to be happening > > > > > to the XML on > > > > > the way to the service, but I can't think what. No other > > > > > special handlers are > > > > > involved. > > > > > > > > > > This is all with Axis 1.3 and "local" transport, BTW. > > > > > > > > > > Thanks, > > > > > Guy > > > > > > > > > > Guy Rixon > > > > [EMAIL PROTECTED] > > > > > Institute of Astronomy Tel: > > > +44-1223-337542 > > > > > Madingley Road, Cambridge, UK, CB3 0HA > Fax: > > > > > +44-1223-337523 > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > Guy Rixon > [EMAIL PROTECTED] > > > Institute of Astronomy Tel: +44-1223-337542 > > > Madingley Road, Cambridge, UK, CB3 0HA Fax: > > > +44-1223-337523 > > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > Guy Rixon [EMAIL PROTECTED] > Institute of Astronomy Tel: +44-1223-337542 > Madingley Road, Cambridge, UK, CB3 0HA Fax: > +44-1223-337523 > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
