[
https://issues.apache.org/jira/browse/CXF-3592?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Stephane Chomat closed CXF-3592.
--------------------------------
Estimated Complexity: Advanced (was: Unknown)
The problem is probably on Metro.
> Regression from 2.3.5 : An invalid security token was provided (Bad TokenType
> "")
> ---------------------------------------------------------------------------------
>
> Key: CXF-3592
> URL: https://issues.apache.org/jira/browse/CXF-3592
> Project: CXF
> Issue Type: Bug
> Components: WS-* Components
> Affects Versions: 2.4.1
> Environment: Mac os X
> Reporter: Stephane Chomat
> Assignee: Colm O hEigeartaigh
>
> The server with metro and glassfish.
> The client is running with cxf.
> The client running with a wsdl and interpret the security policy. It runs
> fine with cxf 2.3.5
> but it cannot read the response with cxf 2.4.1. It throws
> org.apache.ws.security.WSSecurityException: An invalid security token was
> provided (Bad TokenType "").
> --- trace with cxf 2.4.1 and wss4j 1.6.1 or 1.6.0
> 15 juin 2011 17:28:15
> org.apache.cxf.service.factory.ReflectionServiceFactoryBean
> buildServiceFromWSDL
> INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from
> WSDL:
> http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
> 15 juin 2011 17:28:15
> org.apache.cxf.service.factory.ReflectionServiceFactoryBean
> buildServiceFromWSDL
> INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from
> WSDL:
> http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
> 15 juin 2011 17:28:17 org.apache.cxf.interceptor.AbstractLoggingInterceptor
> log
> INFO: Outbound Message
> ---------------------------
> ID: 1
> Address:
> http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService
> Encoding: UTF-8
> Content-Type: text/xml
> Headers: {Accept=[*/*], SOAPAction=["add"]}
> Payload: <soap:Envelope
> xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/";><soap:Header><Action
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
> wsu:Id="Id-697606008">add</Action><MessageID
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
>
> wsu:Id="Id-1230624895">urn:uuid:a11ca17c-d4a8-4693-a65e-473c661596ed</MessageID><To
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
>
> wsu:Id="Id-1532712380">http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService</To><ReplyTo
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
>
> wsu:Id="Id-1784954589"><Address>http://www.w3.org/2005/08/addressing/anonymous</Address></ReplyTo><wsse:Security
>
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
>
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
> soap:mustUnderstand="1"><wsu:Timestamp
> wsu:Id="TS-1"><wsu:Created>2011-06-15T15:28:16.437Z</wsu:Created><wsu:Expires>2011-06-15T15:33:16.437Z</wsu:Expires></wsu:Timestamp><xenc:EncryptedKey
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";
> Id="EK-B4ECDC98AEA8F58C1313081516968151"><xenc:EncryptionMethod
> Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><ds:KeyInfo
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";><wsse:SecurityTokenReference
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";><wsse:KeyIdentifier
>
> EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
>
> ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier";>thYJff4nVK/4RwZSJkgNY8n/leI=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>uLn0SQU6EllSYYuMGhD91I3dE1BCle1IT8s3r8JxZY9+5P1hq9YYTiHGPrio5gpkfHfUDqEJOgD8j1PRgiiSf8+xksG2zb7alxhvMz/SNd4wv2HS3yfBv2fM2OBKP6AIqpzQiNAZ0OUG7Djj5f8o5Kfsa4viQY+Bcc1rE9MY3NU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey><xenc:ReferenceList
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";><xenc:DataReference
> URI="#ED-4"/><xenc:DataReference
> URI="#ED-5"/></xenc:ReferenceList><xenc:EncryptedData
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; Id="ED-5"
> Type="http://www.w3.org/2001/04/xmlenc#Element";><xenc:EncryptionMethod
> Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <wsse:SecurityTokenReference
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
>
> xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
>
> wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey";><wsse:Reference
> URI="#EK-B4ECDC98AEA8F58C1313081516968151"/></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>CF8f130CUWq7A6r0GqqYwffZ9rP5HaZZ7VShIO3n5KR5sh+e3BR1xKRdokojGMzGxvswMUWnmsAd
> EH2KF74f7mgLoMtNLHPf7dOj/KX2hLD8Cb+EDP8WAxH4R2YH4GM4leLDCPchGoIA4eRMtrp6acoE
> yx/5nA/LVpY9qi5LOHkDtSGjfOglzTDZt4mVD8VRSvrnt8DmdhZ/xp9f14sYnv0HkrC7hPbn2+Lu
> AgXx4nrImTCryTveIUf8i5QqewXD804Ha5bvDvuDncEsN5X4JwyEp1aETidevi3fEJLGYGppzsLh
> GREYCRf1oy4+sgIlToxCccAo58mBfp/CuRwS6StZTDeqaVYVkFB8wU7fMtU=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData><ds:Signature
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
> Id="SIG-3"><ds:SignedInfo><ds:CanonicalizationMethod
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
> PrefixList="soap"/></ds:CanonicalizationMethod><ds:SignatureMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><ds:Reference
> URI="#Id-911767762"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
> PrefixList=""/></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Um8pRjA8bb07rMROIQzEBUbtpUk=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#Id-1784954589"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
> PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>rsaq3DW6CevsNUqEgPsHx9/FIvY=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#Id-1532712380"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
> PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>TCeWvmMqBAyceHjwTT9Utb96nLI=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#Id-1230624895"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
> PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Q16J5bLFRiImkPdlS3X4yveKpmc=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#Id-697606008"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
> PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>Zy+UIJzBJyDuoEPxXIJgM6nJXZA=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#TS-1"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; PrefixList="wsse
> soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>drXL3gj9LuKW0eMwh1ggWuUndms=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#UsernameToken-2"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><ec:InclusiveNamespaces
> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#";
> PrefixList="soap"/></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>RZjirIYLnwze6FsKusnPYS2f8/0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>6HPCyMQlsSGrGet40PnCwWcOmOI=</ds:SignatureValue><ds:KeyInfo
> Id="KI-B4ECDC98AEA8F58C1313081516968372"><wsse:SecurityTokenReference
> xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
>
> wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey";
> wsu:Id="STR-B4ECDC98AEA8F58C1313081516968373"><wsse:Reference
> URI="#EK-B4ECDC98AEA8F58C1313081516968151"
> ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey"/></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></soap:Header><soap:Body
>
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
> wsu:Id="Id-911767762"><xenc:EncryptedData
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; Id="ED-4"
> Type="http://www.w3.org/2001/04/xmlenc#Content";><xenc:EncryptionMethod
> Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <wsse:SecurityTokenReference
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
>
> xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
>
> wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey";><wsse:Reference
> URI="#EK-B4ECDC98AEA8F58C1313081516968151"/></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>AoA35gu8SRZb8jPnO427b44NLt267NrCN/02AqpvEJNBaIUFBHe5dtHQ4qCz7wGLLzVGcK08iRFo
> z8wvi2D2HrXxSMQj4jThfaLZ+Ojgy2U6eGIW2bB4JfUNFgW5asd7pBizqLwkT8trwcPgEr21XqQh
> qCq+yxkr0GHmKcp8am6I4+kUxxqBsyhHw6ggPOOyYYRlcjPWBZmAO8xZ2LmdRJhd+2oAihguboDt
> bb5OSgP1gQoHRlqfL9Q0CNva0IsTyXvuV80J5HjCeo2CtiGw3uwRBFQjlqupOtbxC2dottvaEEwz
> gKCoPuzzwgEzx2y9</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></soap:Body></soap:Envelope>
> --------------------------------------
> 15 juin 2011 17:28:17 org.apache.cxf.interceptor.AbstractLoggingInterceptor
> log
> INFO: Inbound Message
> ----------------------------
> ID: 1
> Response-Code: 200
> Encoding: UTF-8
> Content-Type: text/xml;charset=utf-8
> Headers: {content-type=[text/xml;charset=utf-8], Date=[Wed, 15 Jun 2011
> 15:27:59 GMT], Server=[GlassFish Server Open Source Edition 3.1],
> transfer-encoding=[chunked], X-Powered-By=[Servlet/3.0 JSP/2.2 (GlassFish
> Server Open Source Edition 3.1 Java/Oracle Corporation/1.7)]}
> Payload: <?xml version='1.0' encoding='UTF-8'?><S:Envelope
> xmlns:S="http://schemas.xmlsoap.org/soap/envelope/";
> xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
>
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
>
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
> xmlns:xs="http://www.w3.org/2001/XMLSchema";
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";
> xmlns:exc14n="http://www.w3.org/2001/10/xml-exc-c14n#";><S:Header><To
> xmlns="http://www.w3.org/2005/08/addressing";
> wsu:Id="_5005">http://www.w3.org/2005/08/addressing/anonymous</To><Action
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:S="http://schemas.xmlsoap.org/soap/envelope/"; S:mustUnderstand="1"
> wsu:Id="_5003">http://calculator.me.org/CalculatorWS/addResponse</Action><MessageID
> xmlns="http://www.w3.org/2005/08/addressing";
> wsu:Id="_5002">uuid:0688dfb4-7b67-441e-9072-5b46c8a1d942</MessageID><RelatesTo
> xmlns="http://www.w3.org/2005/08/addressing";
> wsu:Id="_5004">urn:uuid:a11ca17c-d4a8-4693-a65e-473c661596ed</RelatesTo><wsse:Security
> S:mustUnderstand="1"><wsu:Timestamp
> xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
> xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";
> wsu:Id="_3"><wsu:Created>2011-06-15T15:27:59Z</wsu:Created><wsu:Expires>2011-06-15T15:32:59Z</wsu:Expires></wsu:Timestamp><xenc:ReferenceList
> xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
> xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";><xenc:DataReference
> URI="#_5007" /></xenc:ReferenceList><ds:Signature
> xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
> xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";
> Id="_1"><ds:SignedInfo><ds:CanonicalizationMethod
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="wsse S" /></ds:CanonicalizationMethod><ds:SignatureMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"; /><ds:Reference
> URI="#_5002"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>bcnLSlFsom4X6WCQqBtKQ8jaUrw=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_5003"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>AmZ7hFb58NXg+JWKY6TuSE4peho=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_5004"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>tawDeUn6/ZPuC5rVIeYwTHIC68k=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_5005"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>Nd/8wVmBdLowQKMblBRYK+6xcjA=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_5006"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>DdV2kRGL8sX2eRCRdXtZ5mMtetw=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_3"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="wsu wsse S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>s7Vbn/hZ0/iJZfsdHRWn85Oh6mM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>9N7IiHXuYSVFnGImAsF2ERkN7hw=</ds:SignatureValue><ds:KeyInfo><wsse:SecurityTokenReference><wsse:KeyIdentifier
>
> ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1";
>
> EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";>FMmZRiaRNpWZs8d2dp2M7ogfNNs=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></S:Header><S:Body
> wsu:Id="_5006"><xenc:EncryptedData
> xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
> xmlns:ns17="http://www.w3.org/2003/05/soap-envelope"; Id="_5007"
> Type="http://www.w3.org/2001/04/xmlenc#Content";><xenc:EncryptionMethod
> Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"; /><ds:KeyInfo
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
> xsi:type="KeyInfoType"><wsse:SecurityTokenReference><wsse:KeyIdentifier
> ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1";
>
> EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";>FMmZRiaRNpWZs8d2dp2M7ogfNNs=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>iUSBLes/6+nzKMEKdjdJgd/E1vmEijXOKhd4SM+sz7H1Zk1EERDAZscFLWXXbL43F+txK/MQPi9048S9HatdDuA9ZjQiBvizNas6VuYQbxqFe7LyliVwCCNGGADxMXAwiu5mEp8YinzrdLzG1PyBgQ==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></S:Body></S:Envelope>
> --------------------------------------
> 15 juin 2011 17:28:17 org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor
> handleMessage
> ATTENTION:
> org.apache.ws.security.WSSecurityException: An invalid security token was
> provided (Bad TokenType "")
> at
> org.apache.ws.security.str.BSPEnforcer.checkEncryptedKeyBSPCompliance(BSPEnforcer.java:115)
> at
> org.apache.ws.security.str.SecurityTokenRefSTRParser.parseSecurityTokenReference(SecurityTokenRefSTRParser.java:116)
> at
> org.apache.ws.security.processor.ReferenceListProcessor.decryptDataRefEmbedded(ReferenceListProcessor.java:154)
> at
> org.apache.ws.security.processor.ReferenceListProcessor.handleReferenceList(ReferenceListProcessor.java:96)
> at
> org.apache.ws.security.processor.ReferenceListProcessor.handleToken(ReferenceListProcessor.java:63)
> at
> org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
> at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:249)
> at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85)
> at
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:762)
> at
> org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1582)
> at
> org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1467)
> at
> org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1375)
> at
> org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
> at
> org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
> at
> org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
> at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:623)
> at
> org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
> at
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:510)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:343)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:295)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
> at
> org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
> at $Proxy25.add(Unknown Source)
> at CxfClient.main(CxfClient.java:117)
> 15 juin 2011 17:28:17 org.apache.cxf.phase.PhaseInterceptorChain
> doDefaultLogging
> ATTENTION: Interceptor for
> {http://calculator.me.org/}CalculatorWSService#{http://calculator.me.org/}add
> has thrown exception, unwinding now
> org.apache.cxf.binding.soap.SoapFault: An invalid security token was provided
> (Bad TokenType "")
> at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.createSoapFault(WSS4JInInterceptor.java:644)
> at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:308)
> at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85)
> at
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:762)
> at
> org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1582)
> at
> org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1467)
> at
> org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1375)
> at
> org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
> at
> org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
> at
> org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
> at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:623)
> at
> org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
> at
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:510)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:343)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:295)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
> at
> org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
> at $Proxy25.add(Unknown Source)
> at CxfClient.main(CxfClient.java:117)
> Caused by: org.apache.ws.security.WSSecurityException: An invalid security
> token was provided (Bad TokenType "")
> at
> org.apache.ws.security.str.BSPEnforcer.checkEncryptedKeyBSPCompliance(BSPEnforcer.java:115)
> at
> org.apache.ws.security.str.SecurityTokenRefSTRParser.parseSecurityTokenReference(SecurityTokenRefSTRParser.java:116)
> at
> org.apache.ws.security.processor.ReferenceListProcessor.decryptDataRefEmbedded(ReferenceListProcessor.java:154)
> at
> org.apache.ws.security.processor.ReferenceListProcessor.handleReferenceList(ReferenceListProcessor.java:96)
> at
> org.apache.ws.security.processor.ReferenceListProcessor.handleToken(ReferenceListProcessor.java:63)
> at
> org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
> at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:249)
> ... 20 more
> Exception in thread "main" javax.xml.ws.WebServiceException: An invalid
> security token was provided (Bad TokenType "")
> at
> org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:135)
> at $Proxy25.add(Unknown Source)
> at CxfClient.main(CxfClient.java:117)
> Caused by: org.apache.ws.security.WSSecurityException: An invalid security
> token was provided (Bad TokenType "")
> at
> org.apache.ws.security.str.BSPEnforcer.checkEncryptedKeyBSPCompliance(BSPEnforcer.java:115)
> at
> org.apache.ws.security.str.SecurityTokenRefSTRParser.parseSecurityTokenReference(SecurityTokenRefSTRParser.java:116)
> at
> org.apache.ws.security.processor.ReferenceListProcessor.decryptDataRefEmbedded(ReferenceListProcessor.java:154)
> at
> org.apache.ws.security.processor.ReferenceListProcessor.handleReferenceList(ReferenceListProcessor.java:96)
> at
> org.apache.ws.security.processor.ReferenceListProcessor.handleToken(ReferenceListProcessor.java:63)
> at
> org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
> at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:249)
> at
> org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85)
> at
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:762)
> at
> org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponseInternal(HTTPConduit.java:1582)
> at
> org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleResponse(HTTPConduit.java:1467)
> at
> org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1375)
> at
> org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
> at
> org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
> at
> org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
> at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:623)
> at
> org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
> at
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:510)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:440)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:343)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:295)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
> at
> org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
> ... 2 more
> --------- Trace with cxf 2.3.5
> 15 juin 2011 17:46:49
> org.springframework.context.support.AbstractApplicationContext prepareRefresh
> INFO: Refreshing org.apache.cxf.bus.spring.BusApplicationContext@2353f67e:
> startup date [Wed Jun 15 17:46:49 CEST 2011]; root of context hierarchy
> 15 juin 2011 17:46:50
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-jaxrs-binding.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-xml.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-http.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-ws-security.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-soap.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-jaxws.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-addr.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-policy.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-http-jetty.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.xml.XmlBeanDefinitionReader
> loadBeanDefinitions
> INFO: Loading XML bean definitions from class path resource
> [META-INF/cxf/cxf-extension-http.xml]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.support.DefaultListableBeanFactory
> registerBeanDefinition
> INFO: Overriding bean definition for bean
> 'org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder': replacing
> [Generic bean: class
> [org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder]; scope=;
> abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
> autowireCandidate=true; primary=false; factoryBeanName=null;
> factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined
> in class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic
> bean: class
> [org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder]; scope=;
> abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
> autowireCandidate=true; primary=false; factoryBeanName=null;
> factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined
> in class path resource [META-INF/cxf/cxf-extension-http.xml]]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.support.DefaultListableBeanFactory
> registerBeanDefinition
> INFO: Overriding bean definition for bean
> 'org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder': replacing
> [Generic bean: class
> [org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder]; scope=;
> abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
> autowireCandidate=true; primary=false; factoryBeanName=null;
> factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined
> in class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic
> bean: class
> [org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder]; scope=;
> abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
> autowireCandidate=true; primary=false; factoryBeanName=null;
> factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined
> in class path resource [META-INF/cxf/cxf-extension-http.xml]]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.support.DefaultListableBeanFactory
> registerBeanDefinition
> INFO: Overriding bean definition for bean
> 'org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider':
> replacing [Generic bean: class
> [org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider]; scope=;
> abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
> autowireCandidate=true; primary=false; factoryBeanName=null;
> factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined
> in class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic
> bean: class
> [org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider]; scope=;
> abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
> autowireCandidate=true; primary=false; factoryBeanName=null;
> factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined
> in class path resource [META-INF/cxf/cxf-extension-http.xml]]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.support.DefaultListableBeanFactory
> registerBeanDefinition
> INFO: Overriding bean definition for bean
> 'org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory': replacing
> [Generic bean: class
> [org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory]; scope=;
> abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
> autowireCandidate=true; primary=false; factoryBeanName=null;
> factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined
> in class path resource [META-INF/cxf/cxf-extension-http.xml]] with [Generic
> bean: class [org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory];
> scope=; abstract=false; lazyInit=true; autowireMode=0; dependencyCheck=0;
> autowireCandidate=true; primary=false; factoryBeanName=null;
> factoryMethodName=null; initMethodName=null; destroyMethodName=null; defined
> in class path resource [META-INF/cxf/cxf-extension-http.xml]]
> 15 juin 2011 17:46:51
> org.springframework.beans.factory.support.DefaultListableBeanFactory
> preInstantiateSingletons
> INFO: Pre-instantiating singletons in
> org.springframework.beans.factory.support.DefaultListableBeanFactory@1fcef4f7:
> defining beans
> [cxf,org.apache.cxf.bus.spring.BusApplicationListener,org.apache.cxf.bus.spring.BusWiringBeanFactoryPostProcessor,org.apache.cxf.bus.spring.Jsr250BeanPostProcessor,org.apache.cxf.bus.spring.BusExtensionPostProcessor,org.apache.cxf.resource.ResourceManager,org.apache.cxf.configuration.Configurer,org.apache.cxf.binding.BindingFactoryManager,org.apache.cxf.transport.DestinationFactoryManager,org.apache.cxf.transport.ConduitInitiatorManager,org.apache.cxf.wsdl.WSDLManager,org.apache.cxf.phase.PhaseManager,org.apache.cxf.workqueue.WorkQueueManager,org.apache.cxf.buslifecycle.BusLifeCycleManager,org.apache.cxf.endpoint.ServerRegistry,org.apache.cxf.endpoint.ServerLifeCycleManager,org.apache.cxf.endpoint.ClientLifeCycleManager,org.apache.cxf.transports.http.QueryHandlerRegistry,org.apache.cxf.endpoint.EndpointResolverRegistry,org.apache.cxf.headers.HeaderManager,org.apache.cxf.catalog.OASISCatalogManager,org.apache.cxf.service.factory.FactoryBeanListenerManager,org.apache.cxf.endpoint.ServiceContractResolverRegistry,org.apache.cxf.binding.xml.XMLBindingFactory,org.apache.cxf.transport.http.policy.HTTPClientAssertionBuilder,org.apache.cxf.transport.http.policy.HTTPServerAssertionBuilder,org.apache.cxf.transport.http.policy.NoOpPolicyInterceptorProvider,org.apache.cxf.transport.http.ClientOnlyHTTPTransportFactory,org.apache.cxf.ws.security.policy.WSSecurityPolicyLoader,org.apache.cxf.binding.soap.SoapBindingFactory,org.apache.cxf.binding.soap.SoapTransportFactory,org.apache.cxf.binding.soap.customEditorConfigurer,org.apache.cxf.jaxws.context.WebServiceContextResourceResolver,org.apache.cxf.jaxws.context.WebServiceContextImpl,org.apache.cxf.ws.addressing.policy.AddressingAssertionBuilder,org.apache.cxf.ws.addressing.policy.AddressingPolicyInterceptorProvider,org.apache.cxf.ws.addressing.policy.UsingAddressingAssertionBuilder,org.apache.cxf.ws.policy.AssertionBuilderRegistry,org.apache.cxf.ws.policy.PolicyInterceptorProviderRegistry,org.apache.cxf.ws.policy.attachment.external.DomainExpressionBuilderRegistry,org.apache.cxf.ws.policy.attachment.external.EndpointReferenceDomainExpressionBuilder,org.apache.cxf.ws.policy.PolicyBuilder,org.apache.cxf.ws.policy.PolicyEngine,org.apache.cxf.ws.policy.attachment.wsdl11.Wsdl11AttachmentPolicyProvider,org.apache.cxf.ws.policy.attachment.ServiceModelPolicyProvider,org.apache.cxf.ws.policy.mtom.MTOMAssertionBuilder,org.apache.cxf.ws.policy.mtom.MTOMPolicyInterceptorProvider,org.apache.cxf.transport.http_jetty.JettyHTTPTransportFactory];
> root of factory hierarchy
> Service ==================
> 15 juin 2011 17:46:54
> org.apache.cxf.service.factory.ReflectionServiceFactoryBean
> buildServiceFromWSDL
> INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from
> WSDL:
> http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
> 15 juin 2011 17:46:57
> org.apache.cxf.service.factory.ReflectionServiceFactoryBean
> buildServiceFromWSDL
> INFO: Creating Service {http://calculator.me.org/}CalculatorWSService from
> WSDL:
> http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService?wsdl
> 15 juin 2011 17:47:00 org.apache.cxf.interceptor.AbstractLoggingInterceptor
> log
> INFO: Outbound Message
> ---------------------------
> ID: 1
> Address:
> http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService
> Encoding: UTF-8
> Content-Type: text/xml
> Headers: {Accept=[*/*], SOAPAction=["add"]}
> Payload: <soap:Envelope
> xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/";
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";><soap:Header><Action
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
> wsu:Id="Id-920482395">add</Action><MessageID
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
>
> wsu:Id="Id-1615363167">urn:uuid:de69c745-497a-4b32-980a-8e28fa633d3d</MessageID><To
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
>
> wsu:Id="Id-563831333">http://fr00003593.eur.gad.schneider-electric.com:8080/SecureCalculatorApp/CalculatorWSService</To><ReplyTo
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
>
> wsu:Id="Id-1238538872"><Address>http://www.w3.org/2005/08/addressing/anonymous</Address></ReplyTo><wsse:Security
>
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
> soap:mustUnderstand="1"><wsu:Timestamp
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
>
> wsu:Id="Timestamp-3"><wsu:Created>2011-06-15T15:46:58.563Z</wsu:Created><wsu:Expires>2011-06-15T15:51:58.563Z</wsu:Expires></wsu:Timestamp><xenc:EncryptedKey
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";
> Id="EncKeyId-ACC6DD7816E9A2847413081528198822"><xenc:EncryptionMethod
> Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><ds:KeyInfo
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <wsse:SecurityTokenReference
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";><wsse:KeyIdentifier
>
> EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
>
> ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier";>thYJff4nVK/4RwZSJkgNY8n/leI=</wsse:KeyIdentifier></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>TBgxpGd7Ko/8uThPSzicdtseLmnd7O64OovL4DqAyHVuP/ICbAhe2D0FfHj6EBi8u/y9IuiXc++A4lnpcHt3KV6EUCyYkMgC9wxTb2QtWBhf+0vgdflCbcFJf+tNmSo2TYLgSAtIVdXnwEJi8ymzjVRTWbIpwr34YhrgA8fI0IY=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey><xenc:ReferenceList
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";><xenc:DataReference
> URI="#EncDataId-6"/><xenc:DataReference
> URI="#EncDataId-7"/></xenc:ReferenceList><xenc:EncryptedData
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; Id="EncDataId-7"
> Type="http://www.w3.org/2001/04/xmlenc#Element";><xenc:EncryptionMethod
> Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <wsse:SecurityTokenReference
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";><wsse:Reference
>
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
>
> URI="#EncKeyId-ACC6DD7816E9A2847413081528198822"/></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>/ao9FkkBsF+EnUrFTp7EYpw9785NjBcoXmA+CEpWM1gWFB1/UFhdsgYiy/eenCX4bgWttF1F+uyV
> 5+PoeKkC6U4ZEpjFPmMJmqHBEPuR9AHon5TNIooHVd8OwI0KX3qYymgk1FLFLIkmnRo7opUuac0A
> 3+pPA5maub9cEcdHN3BqtpZSciGlahI/YxKgJhL/8oJK26YOQaBeYVliMXSK9yIVja/uAuLu6EwM
> r5o2/sXHQaGRSNqwRDfe7cGUNbpC3RkMWBbxTRMp2VJUP9N0rY1MB4KQaC440HUjUKHzcNI77VjY
> +Sn6iDSV++eZM9FiLabyAaNZd2XuH6PY7fZaOqZHxzuPp7zwhBIhhXV32OJ2fYodZfMyMpfwWKnx
> D7xwPxbxGDAIQHsZhVb6tSvQAeHuMWsIJektwe1cbrdi9kFBxABLFWUAqpBcTZsAOosik4ExsVUf
> 62btnsDGV6MqD0ydIbAY0MOYMJnLjstzPT7fVLHvhK5Br0oaJcKGQGiVPWVUH4JcwF2KcS0FyLXr
> Bn6/Br12P5tOVOeHJcPcbxRJn/PLlgaOXDQh+oCD7I8zYfHNJ2SSVvTj3ZQc+zjZ9Z7Ykh2hp2VW
> Svv+XIFXI5M=</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData><ds:Signature
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; Id="Signature-5">
> <ds:SignedInfo>
> <ds:CanonicalizationMethod
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/>
> <ds:Reference URI="#Id-112258534">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>WVUx0bfLqREMBnbFfjSvhn3N1Ig=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Id-1238538872">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>EfIGoVIvhWNCGN07fW7fg4BzttA=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Id-563831333">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>7jg4jJfUrfEIAA8vGOg440hnb74=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Id-1615363167">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>vnFedd5iyMprVfehEa71alepUqA=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Id-920482395">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>CxJfCxPkSUmyvkVVj9m7lQvtsR0=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#Timestamp-3">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>AowppheezBWAdDF5+tGwW+FJlog=</ds:DigestValue>
> </ds:Reference>
> <ds:Reference URI="#UsernameToken-4">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <ds:DigestValue>qgHOLz+6KaWLhx/5/QvRGou2Zwk=</ds:DigestValue>
> </ds:Reference>
> </ds:SignedInfo>
> <ds:SignatureValue>rJ7+/dPb2L8cyfxg2BS2qwIw/LU=</ds:SignatureValue>
> <ds:KeyInfo Id="KeyId-ACC6DD7816E9A2847413081528199813">
> <wsse:SecurityTokenReference
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
>
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
> wsu:Id="STRId-ACC6DD7816E9A2847413081528199814"><wsse:Reference
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
> URI="#EncKeyId-ACC6DD7816E9A2847413081528198822"
> ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey"/></wsse:SecurityTokenReference>
> </ds:KeyInfo>
> </ds:Signature></wsse:Security></soap:Header><soap:Body
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
> wsu:Id="Id-112258534"><xenc:EncryptedData
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; Id="EncDataId-6"
> Type="http://www.w3.org/2001/04/xmlenc#Content";><xenc:EncryptionMethod
> Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <wsse:SecurityTokenReference
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";><wsse:Reference
>
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
>
> URI="#EncKeyId-ACC6DD7816E9A2847413081528198822"/></wsse:SecurityTokenReference>
> </ds:KeyInfo><xenc:CipherData><xenc:CipherValue>Z6Z5TqeuuNX9otsCBUJ0nHg7r7rLaonPcloiQxrk3w6v8J9X/DqylDz+T58kH5izL9oJfRLiyIL9
> v24g0PIUaYiBHE1OwfIZ1WBGjqgiFF8ILq4+xr/c0BewIg+1aOX2tNYDSl7fynXouD3uEV5zO82I
> yH/2I6u5TnSS5kArkgN0PW90bkgl67TSNTBUafcYv+GO2k4Yt4vSlAtGY+mOkgyNWdWp9z6IQmmL
> vhPXMI9sdjO9+nAATB8fdRICxVoBZ4O7cSkLzsyzB5cCNkRHWoj2J2J2wX6ePodTpOOLuAKM6td9
> x7kdojYNgQXDVekx3AAbi3a3/Pge+hG/lPYD9f+/lTbGpQDrIgJPRoJJDnGFcE2AAYySmJOn7pze
> 5nan</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></soap:Body></soap:Envelope>
> --------------------------------------
> 15 juin 2011 17:47:00 org.apache.cxf.interceptor.AbstractLoggingInterceptor
> log
> INFO: Inbound Message
> ----------------------------
> ID: 1
> Response-Code: 200
> Encoding: UTF-8
> Content-Type: text/xml;charset=utf-8
> Headers: {content-type=[text/xml;charset=utf-8], Date=[Wed, 15 Jun 2011
> 15:46:42 GMT], Server=[GlassFish Server Open Source Edition 3.1],
> transfer-encoding=[chunked], X-Powered-By=[Servlet/3.0 JSP/2.2 (GlassFish
> Server Open Source Edition 3.1 Java/Oracle Corporation/1.7)]}
> Payload: <?xml version='1.0' encoding='UTF-8'?><S:Envelope
> xmlns:S="http://schemas.xmlsoap.org/soap/envelope/";
> xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd";
>
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
>
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
> xmlns:xs="http://www.w3.org/2001/XMLSchema";
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
> xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";
> xmlns:exc14n="http://www.w3.org/2001/10/xml-exc-c14n#";><S:Header><To
> xmlns="http://www.w3.org/2005/08/addressing";
> wsu:Id="_5005">http://www.w3.org/2005/08/addressing/anonymous</To><Action
> xmlns="http://www.w3.org/2005/08/addressing";
> xmlns:S="http://schemas.xmlsoap.org/soap/envelope/"; S:mustUnderstand="1"
> wsu:Id="_5003">http://calculator.me.org/CalculatorWS/addResponse</Action><MessageID
> xmlns="http://www.w3.org/2005/08/addressing";
> wsu:Id="_5002">uuid:74b175e8-a26d-451f-9a91-43b44ab5c440</MessageID><RelatesTo
> xmlns="http://www.w3.org/2005/08/addressing";
> wsu:Id="_5004">urn:uuid:de69c745-497a-4b32-980a-8e28fa633d3d</RelatesTo><wsse:Security
> S:mustUnderstand="1"><wsu:Timestamp
> xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
> xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";
> wsu:Id="_3"><wsu:Created>2011-06-15T15:46:42Z</wsu:Created><wsu:Expires>2011-06-15T15:51:42Z</wsu:Expires></wsu:Timestamp><xenc:ReferenceList
> xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
> xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";><xenc:DataReference
> URI="#_5007" /></xenc:ReferenceList><ds:Signature
> xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
> xmlns:ns17="http://www.w3.org/2003/05/soap-envelope";
> Id="_1"><ds:SignedInfo><ds:CanonicalizationMethod
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="wsse S" /></ds:CanonicalizationMethod><ds:SignatureMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"; /><ds:Reference
> URI="#_5002"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>8rIil0YLhCXApz3m2LLNw+hyCfg=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_5003"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>AmZ7hFb58NXg+JWKY6TuSE4peho=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_5004"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>x0m4+V7SB9qZTYG1Jma3LyN3Udo=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_5005"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>Nd/8wVmBdLowQKMblBRYK+6xcjA=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_5006"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>DdV2kRGL8sX2eRCRdXtZ5mMtetw=</ds:DigestValue></ds:Reference><ds:Reference
> URI="#_3"><ds:Transforms><ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";><exc14n:InclusiveNamespaces
> PrefixList="wsu wsse S" /></ds:Transform></ds:Transforms><ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> /><ds:DigestValue>gVnY4glzzN0coUKH0YOtLoYzJzU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>EKSf/J9nJRgXOpnFLjL9GrdZ8v4=</ds:SignatureValue><ds:KeyInfo><wsse:SecurityTokenReference><wsse:KeyIdentifier
>
> ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1";
>
> EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";>GOLuRal0DdjB+XWqLeILV+j/bn4=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></S:Header><S:Body
> wsu:Id="_5006"><xenc:EncryptedData
> xmlns:ns18="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512";
> xmlns:ns17="http://www.w3.org/2003/05/soap-envelope"; Id="_5007"
> Type="http://www.w3.org/2001/04/xmlenc#Content";><xenc:EncryptionMethod
> Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"; /><ds:KeyInfo
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
> xsi:type="KeyInfoType"><wsse:SecurityTokenReference><wsse:KeyIdentifier
> ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1";
>
> EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";>GOLuRal0DdjB+XWqLeILV+j/bn4=</wsse:KeyIdentifier></wsse:SecurityTokenReference></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>9wm0h8fiyQMirDnLQFHMRmEAQzHJrkDxgPSW3m/R5r8hp0HDzJL9xEcf5Xd8XOgtV+ByJuGtiAa++M4h+thCMaNCjsbPR5Bnd99yf4LUJEw4UgWaT5qpLeOUJzVrSH1rTPZD18tKsnEf8W4RRIvJ3Q==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></S:Body></S:Envelope>
> --------------------------------------
> Result 1 + 1 = 2
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
