ws-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh (JIRA)" <>
Subject [jira] [Commented] (WSS-410) Reduce dependency on xmlsec library
Date Tue, 30 Oct 2012 09:54:15 GMT


Colm O hEigeartaigh commented on WSS-410:


I have applied a modified version of your patch. I have not added an extra "useApacheXMLSecurity"
flag to WSSConfig, but instead just placed the call to set the line breaks inside the "addJCEProviders"
flag. Could you try with a SNAPSHOT version and let me know if it works?

> Reduce dependency on xmlsec library
> -----------------------------------
>                 Key: WSS-410
>                 URL:
>             Project: WSS4J
>          Issue Type: Sub-task
>          Components: WSS4J Core
>    Affects Versions: 1.6.7
>         Environment: WAS 8.5
>            Reporter: Ivica Loncar
>            Assignee: Colm O hEigeartaigh
>              Labels: santuario, was, websphere, xmlsec
>             Fix For: 1.6.8
>         Attachments: wss4j_patch.diff
>   Original Estimate: 2h
>  Remaining Estimate: 2h
> I've replaced static call to the with
>    addJceProvider("ApacheXMLDSig", "");
> but there is another dependency. Namely, setXmlSecIgnoreLineBreak initializes
> Of course I've got: java.lang.NoClassDefFoundError: 
> Since I don't want to use but IBM provided classes I have added
another option  useApacheXmlSecurity. It is modeled after addJceProviders.
> Afterwards I have met another issue: 
> 29.10.12. 16:32:39:512 CET] 0000029a servlet       E
service Uncaught service() exception thrown by servlet InvestFundsServlet: java.lang.NoClassDefFoundError:
> 	at<init>(
> 	at
> 	at
> 	at
> 	at$200(
> 	at$WSS4JOutInterceptorInternal.handleMessage(
> 	at$WSS4JOutInterceptorInternal.handleMessage(
> 	at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(
> 	at org.apache.cxf.endpoint.ClientImpl.doInvoke(
> 	at org.apache.cxf.endpoint.ClientImpl.invoke(
> 	at org.apache.cxf.endpoint.ClientImpl.invoke(
> 	at org.apache.cxf.endpoint.ClientImpl.invoke(
> 	at org.apache.cxf.frontend.ClientProxy.invokeSync(
> ...
> Caused by: java.lang.ClassNotFoundException:
> 	at
> This is an isolated utility class which can be safely transfered to project. 
> After I have copied from Santuario I was
able to invoke web service that required signed request using CXF client running on IBM WAS
8.5 without adding extra JCE providers.
> All I had to do is creat servlet listener that enabled two properties in question:
>     	WSSConfig.setUseApacheXmlSecurity(false);
>         WSSConfig.setAddJceProviders(false);

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message