RE: Verification failed for URI "#id-19537476"

[Cileli, Aris]

The reference ID in the reference element ""#id-19537476" is not in the SOAP message. This id must reference an element with the attribute type ID. Also your ds:KeyInfo Id="KeyId-11423854" element, value of id should be start with "#" if you are using the public key in the soap message to verify. The signature class will look for element with the id type with the value in the reference element.   -----Original Message----- From: Soumadeep [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 19, 2006 5:11 PM To: wss4j-dev@ws.apache.org Subject: Verification failed for URI "#id-19537476" I get this error during signature verification. Any thoughts?   ERROR: ====== WARN - Reference.verify(?) | Verification failed for URI "#id-19537476" DEBUG - Manifest.verifyReferences(?) | The Reference has Type org.apache.ws.security.WSSecurityException: The signature verification failed         at org.apache.ws.security.WSSecurityEngine.verifyXMLSignature(WSSecurity Engine.java:634)         at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecur ityEngine.java:327)         at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecur ityEngine.java:250)         at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecur ityEngine.java:198)     SIGNED MESSAGE ===============   <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <soapenv:Header> <wsse:Security><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:SignedInfo> <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:CanonicalizationMethod> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod> <ds:Reference URI="#id-19537476"> <ds:Transforms> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform> </ds:Transforms> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod> <ds:DigestValue>fE1tW8/x1/+9YexmIxFSIGegJhw=</ds:DigestValue> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue> JOL2vQgyK1fj//5Tpi+3VO/TbSQE+0IxipWeAYSPrGikirfRL4Nrrfz/en8eExBG1Z164EBsh6Ef HKfG/oziXA== </ds:SignatureValue> <ds:KeyInfo Id="KeyId-11423854"> <wsse:SecurityTokenReference xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="STRId-30817849"><ds:X509IssuerSerial> <ds:X509IssuerName>CN=dims</ds:X509IssuerName>   <ds:X509SerialNumber>44369778256217224370984914847992022613</ds:X509SerialNumber> </ds:X509IssuerSerial></wsse:SecurityTokenReference> </ds:KeyInfo> </ds:Signature></wsse:Security></soapenv:Header>  <soapenv:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="id-19537476">   <ns1:getVersion xmlns:ns1="http://axis.apache.org" soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">                         </ns1:getVersion>  </soapenv:Body> </soapenv:Envelope>   <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <soapenv:Header> <wsse:Security><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:SignedInfo> <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:CanonicalizationMethod> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod> <ds:Reference URI="#id-19537476"> <ds:Transforms> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform> </ds:Transforms> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod> <ds:DigestValue>fE1tW8/x1/+9YexmIxFSIGegJhw=</ds:DigestValue> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue> JOL2vQgyK1fj//5Tpi+3VO/TbSQE+0IxipWeAYSPrGikirfRL4Nrrfz/en8eExBG1Z164EBsh6Ef HKfG/oziXA== </ds:SignatureValue> <ds:KeyInfo Id="KeyId-11423854"> <wsse:SecurityTokenReference xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="STRId-30817849"><ds:X509IssuerSerial> <ds:X509IssuerName>CN=dims</ds:X509IssuerName>   <ds:X509SerialNumber>44369778256217224370984914847992022613</ds:X509SerialNumber> </ds:X509IssuerSerial></wsse:SecurityTokenReference> </ds:KeyInfo> </ds:Signature></wsse:Security></soapenv:Header>  <soapenv:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="id-19537476">   <ns1:getVersion xmlns:ns1="http://axis.apache.org" soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">                         </ns1:getVersion>  </soapenv:Body> </soapenv:Envelope>