Has anyone used WSS4J with JDK 1.6 and Tomcat 6.0?

 

I still have a problem with a web service signing its response message using an 
X509 certifcate, WSS4J 1.5.1, Axis 1.4, JDK 1.6 and Tomcat 6.0  

 

The same WSDD files and crypto.properties files are used successfully under JDK 
1.5 and Tomcat 5.0..28.

 

Thanks

George  

 

From: George Cowe [mailto:[EMAIL PROTECTED] 
Sent: 28 September 2007 15:03
To: wss4j-dev@ws.apache.org
Subject: JDK 1.6 issues

 

JDK 1.6 / Tomcat 6.0 Issue

 

Don't know if anyone else has seen this problem-

I have been using WSS4J 1.5.1 and Axis 1.4 in a web service which is 
implemented in Tomcat 5.0.28 using JDK 1.5 and it signs messages without any 
problem.

 

However when I upgrade to Tomcat 6.0 and JDK 1.6 I start getting problems with 
server side signing. I get the message

 

org.apache.ws.security.WSSecurityException: WSHandler: Signature: error during 
message procesingorg.apache.ws.security.WSSecurityException: General security 
error (Unexpected number of X509Data: for Signature)

 

which usually means that the alias for the private key has not been set 
correctly.

 

However the same configuration files (.wsdd files) are being used in Tomcat 5 
and Tomcat 6 so I would expect the same result.

 

What makes it stranger is that I have a client application which is running 
under Tomcat 6 which signs the inbound message which is then successfully 
verified by the web service also running under Tomcat 6. The web service then 
attempts to sign the response and gets the exception above.

 

Anyone seen this already?

 

Thanks

George           

 

 

E-mail disclaimer

 

The information in this e-mail is sent in confidence for the addressee only and 
may be legally privileged. Unauthorised recipients must preserve this 
confidentiality and should please advise the sender immediately of the error in 
transmission and then delete this e-mail. If you are not the intended 
recipient, any disclosure, copying, distribution or any action taken in 
reliance on its content is prohibited and may be unlawful.

Origo Services Limited accepts no responsibility for any loss or damage 
resulting directly or indirectly from the use of this e-mail or the contents.  
It is your responsibility to scan for viruses.  Origo Services Limited reserves 
the right to monitor e-mails sent to or from addresses under its control.  When 
you reply to this e-mail, you are consenting to Origo Services Limited 
monitoring the content of the e-mails you send to or receive from Origo 
Services Limited.  If this e-mail is non-business related
Origo Services Limited is not liable for any opinions expressed by the sender.  
The contents of this e-mail are protected by copyright.  All rights reserved.

 

Origo Services Limited is a company incorporated in Scotland (company number 
115061) having its registered office at 4th floor, Saltire Court, 20 Castle 
Terrace, Edinburgh EH1 2EN.



E-mail disclaimer

The information in this e-mail is sent in confidence for the addressee only and 
may be legally privileged. Unauthorised recipients must preserve this 
confidentiality and should please advise the sender immediately of the error in 
transmission and then delete this e-mail. If you are not the intended 
recipient, any disclosure, copying, distribution or any action taken in 
reliance on its content is prohibited and may be unlawful.

Origo Services Limited accepts no responsibility for any loss or damage 
resulting directly or indirectly from the use of this e-mail or the contents.  
It is your responsibility to scan for viruses.  Origo Services Limited reserves 
the right to monitor e-mails sent to or from addresses under its control.  When 
you reply to this e-mail, you are consenting to Origo Services Limited 
monitoring the content of the e-mails you send to or receive from Origo 
Services Limited.  If this e-mail is non-business related Origo Services 
Limited is not liable for any opinions expressed by the sender.  The contents 
of this e-mail are protected by copyright.  All rights reserved.

Origo Services Limited is a company incorporated in Scotland (company number 
115061) having its registered office at 4th floor, Saltire Court, 20 Castle 
Terrace, Edinburgh EH1 2EN.

Reply via email to