ws-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (WSS-520) Searching in wrong path for the message.
Date Tue, 09 Dec 2014 15:22:12 GMT

    [ https://issues.apache.org/jira/browse/WSS-520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14239527#comment-14239527
] 

Colm O hEigeartaigh commented on WSS-520:
-----------------------------------------


How are you configuring WSS4J? The default configuration creates the WSS4JResourceBundle which
wraps the message properties in XML Security. Are you by any chance calling XML Security's
Init.init() instead of the WSS4J WSSConfig methods?

Colm.

> Searching in wrong path for the message.
> ----------------------------------------
>
>                 Key: WSS-520
>                 URL: https://issues.apache.org/jira/browse/WSS-520
>             Project: WSS4J
>          Issue Type: Bug
>            Reporter: renu
>            Assignee: Colm O hEigeartaigh
>
>  Getting exception:
> Caused by: org.apache.wss4j.common.ext.WSSecurityException: No message with ID "certpath"
found in resource bundle "org/apache/xml/security/resource/xmlsecurity". Original Exception
was a java.security.cert.CertPathValidatorException and message basic constraints check failed:
this is not a CA certificate 
> Original Exception was java.security.cert.CertPathValidatorException: basic constraints
check failed: this is not a CA certificate 
>  at org.apache.wss4j.common.crypto.Merlin.verifyTrust(Merlin.java:933) 
>  at org.apache.wss4j.dom.validate.SignatureTrustValidator.verifyTrustInCerts(SignatureTrustValidator.java:108)

>  at org.apache.wss4j.dom.validate.SignatureTrustValidator.validate(SignatureTrustValidator.java:64)

>  at org.apache.wss4j.dom.validate.SamlAssertionValidator.verifySignedAssertion(SamlAssertionValidator.java:130)

>  at org.apache.wss4j.dom.validate.SamlAssertionValidator.validate(SamlAssertionValidator.java:109)

> Instead of searching the message in the resource bundle of wss4j , message is searched
in xml security and thus causing the exception.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org


Mime
View raw message