ws-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ivica Loncar (JIRA)" <>
Subject [jira] [Commented] (WSS-410) Reduce dependency on xmlsec library
Date Tue, 30 Oct 2012 13:26:12 GMT


Ivica Loncar commented on WSS-410:


Signing works.

OTOH it fails if I use IBM provided SAAJ. I don't have time to trace this issue right now
so I have just bundled servicemix bundle with my app. 

I don't have a ready example that tests encryption, but quick grep shows that some classes
used in the process rely on and I feel that (de/en)cryption would

Btw. Is there a plan/work in progress for WSS4J to completely rely on JSR-105 API?

> Reduce dependency on xmlsec library
> -----------------------------------
>                 Key: WSS-410
>                 URL:
>             Project: WSS4J
>          Issue Type: Sub-task
>          Components: WSS4J Core
>    Affects Versions: 1.6.7
>         Environment: WAS 8.5
>            Reporter: Ivica Loncar
>            Assignee: Colm O hEigeartaigh
>              Labels: santuario, was, websphere, xmlsec
>             Fix For: 1.6.8
>         Attachments: wss4j_patch.diff
>   Original Estimate: 2h
>  Remaining Estimate: 2h
> I've replaced static call to the with
>    addJceProvider("ApacheXMLDSig", "");
> but there is another dependency. Namely, setXmlSecIgnoreLineBreak initializes
> Of course I've got: java.lang.NoClassDefFoundError: 
> Since I don't want to use but IBM provided classes I have added
another option  useApacheXmlSecurity. It is modeled after addJceProviders.
> Afterwards I have met another issue: 
> 29.10.12. 16:32:39:512 CET] 0000029a servlet       E
service Uncaught service() exception thrown by servlet InvestFundsServlet: java.lang.NoClassDefFoundError:
> 	at<init>(
> 	at
> 	at
> 	at
> 	at$200(
> 	at$WSS4JOutInterceptorInternal.handleMessage(
> 	at$WSS4JOutInterceptorInternal.handleMessage(
> 	at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(
> 	at org.apache.cxf.endpoint.ClientImpl.doInvoke(
> 	at org.apache.cxf.endpoint.ClientImpl.invoke(
> 	at org.apache.cxf.endpoint.ClientImpl.invoke(
> 	at org.apache.cxf.endpoint.ClientImpl.invoke(
> 	at org.apache.cxf.frontend.ClientProxy.invokeSync(
> ...
> Caused by: java.lang.ClassNotFoundException:
> 	at
> This is an isolated utility class which can be safely transfered to project. 
> After I have copied from Santuario I was
able to invoke web service that required signed request using CXF client running on IBM WAS
8.5 without adding extra JCE providers.
> All I had to do is creat servlet listener that enabled two properties in question:
>     	WSSConfig.setUseApacheXmlSecurity(false);
>         WSSConfig.setAddJceProviders(false);

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message