Stack Overflow
Stack Overflow

Questions tagged [wss4j]

The Apache WSS4J™ is a Java implementation of the primary security standards for Web Services, namely the OASIS Web Services Security (WS-Security) specifications from the OASIS Web Services Security TC.

232 questions
4
votes
2 answers

SoapFault MustUnderstand headers, CXF WSS4J No crypto property file supplied

My SOAP server is receiving a SOAP message with must understand headers set to 1. In order to understand the header I am using a wss4j interceptor. My sign.properties file…
Rudder_NZ
  • 57
  • 1
  • 5
4
votes
1 answer

WSS4J - No certificates for user were found for signature

I'm trying sign a soap message using CXF, after configure my client using the knowledge I found over the internet, I'm suffering with the following error message: org.apache.ws.security.WSSecurityException: General security error (No certificates…
brevleq
  • 2,081
  • 10
  • 53
  • 97
4
votes
3 answers

Configurable location of keystore in WSS4J

I have a spring context that initializes CXF web service and wraps it with signature checking:
Leos Literak
  • 8,805
  • 19
  • 81
  • 156
4
votes
3 answers

Spring + SOAPExceptionImpl: Error during saving a multipart message

I have a spring web application with jsp pages that calls different web services and displays the results in a jsp page. The spring web application has username/login spring security attached to it. I am adding a call to a web service that handles…
htkhtk
  • 131
  • 1
  • 4
  • 13
4
votes
2 answers

wss4j: - Cannot find key for alias: monit

When I define (using axis 1.4 an wss4j) in client-config.wsdd for WSDoAllSender and WSDoAllReceiver different signaturePropFiles where I have different key stores defined with different certificates, I'm able to have different certificates for…
feiroox
  • 3,069
  • 8
  • 31
  • 31
4
votes
1 answer

UsernameToken with attribute wsu:Id="SecurityToken-..."

I am using WSS4J 1.6 and Axis 1.4. I am creating the UsernameToken using org.apache.ws.security.message.WSSecUsernameToken. What I do not understand is the wsu:Id attribute. According to the web service specs it has to be in the form of…
Bjarni Sævarsson
  • 186
  • 2
  • 8
3
votes
1 answer

convert X509 certificate tag value to base64 binary encoding in digital signature cxf wss4j

I have used CXF 3.0.1 for soap implementation and for digital signature I have used wss4j-WS-security-common 3.0.1 and CXF-rt-WS-security 3.0.1. By adding outinterceptor in non-spring settings and along with crypto.merlin properties, I do the…
mehdi hosseini
  • 141
  • 6
3
votes
1 answer

WS-Security configuration for SOAP API requests

I am trying to fetch data from a server that needs a digital certificate (JKS) in Keystore to authorize the soap request and in addition to this, it requires basic authorization with the WSS outgoing configuration. The images show the steps that I…
Rabinson
  • 91
  • 1
  • 7
3
votes
1 answer

NoSuchMethodError: What version of Apache Xml Security do I need?

I was getting this exception java.lang.NoSuchMethodError: org.apache.xml.security.utils.XMLUtils.decode Then I updated my dependencies and moved on to another similar exception which I am unable to resolve for quite a while: I am getting…
hocikto
  • 871
  • 1
  • 14
  • 29
3
votes
1 answer

How to catch SOAP request message in CXF with WSS4JOutInterceptor when connection fails

I can catch SOAP request message according to this SO answer. However if the server is unavailable I get the following exception from SAAJOutInterceptor (added by WSS4JOutInterceptor) and LoggingCallback is not invoked hence message is not…
verglor
  • 616
  • 7
  • 21
3
votes
1 answer

How to validate soap signature using wss4j library

I have a soap message as below
Srijan Mehrotra
  • 222
  • 2
  • 10
3
votes
0 answers

Sign SOAP message in java using wss4j and X509KeyIdentifier method

I need to sign a SOAP message in java using X.509 certificate. I already implemented it using libraries 'com.sun.org.apache.xml.internal.security' and 'java.security'. This is how my signed SOAP message looks like:
Akhil Tiwari
  • 264
  • 3
  • 15
3
votes
0 answers

Why am I getting error 'java.lang.NoSuchMethodError: org.apache.xml.security.utils.I18n.init' when call CryptoFactory.getInstance() method?

I'm using wss4j version 2.1.2 to do xml digital signatures and attach to the soap header. I have the following code and I get an error that a method doesn't exist ... but it does exist. In IntelliJ I can navigate to the location and the method is…
Brian T Hannan
  • 3,925
  • 18
  • 56
  • 96
3
votes
1 answer

Invalid property 'securementCallbackHandlers' in spring-ws 2.2.1

I Create Web service with spring-ws (Soap) and now, i want create encryption web service. my applicationContext.xml is:
emreh
  • 31
  • 1
3
votes
3 answers

WSS4J with Spring WS : (WSSecurityEngine: Invalid timestamp The security semantics of the message have expired)

I developped a ws (soap) based on Wss4jSecurityInterceptor's Spring implementation. The configuration is as follow : ... securementActions=Timestamp Signature…
Gustavo Bobeff
  • 31
  • 1
  • 1
  • 2
1
2
3
…
15 16