Problem with MTOM attachment in secured WS

[Grzegorz Swatowski]

Hi.
Short story:
I've got a problem with calling secured WS when attachment is in MTOM mode. Digest of request and one calculated on server side don't match.
I use soapUI 4.5.1. Digest alghorithm is default (although I tried all of them).

Long story:
Enviroment description:
WS (Axis2 1.6.2) secured with Rampart allowed to recieve MTOM attachements.
SoapUI request settings:
Enable MTOM: true
Force MTOM: true
Pretty print: false
Strip whitespaces:true

SoapUI Outgoing WS-Security Configuration:
Timestamp+Signature (in that order)

Signature:
Key Identifier Type: Binary Security Token
SA, SC and DA - default
Use single certificate: checked
Parts are empty

I have followed instructions from this topic (https://coderanch.com/t/223021/Web-Services/java/digest-value-mismatch-disabling-pretty) but with no positive result.

Any idea why?

Best regards.

services.xml

...
	<module ref="rampart" />
	<parameter name="enableMTOM">true</parameter>
	<wsp:Policy
		wsu:Id="SigOnly"
		xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
		xmlns:wsp="http://www.w3.org/ns/ws-policy">
		<wsp:ExactlyOne>
			<wsp:All>
				<sp:AsymmetricBinding
					xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<sp:InitiatorToken>
							<wsp:Policy>
								<sp:X509Token
									sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
									<wsp:Policy>
										<sp:WssX509V3Token10 />
									</wsp:Policy>
								</sp:X509Token>
							</wsp:Policy>
						</sp:InitiatorToken>
						<sp:RecipientToken>
							<wsp:Policy>
								<sp:X509Token
									sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
									<wsp:Policy>
										<sp:WssX509V3Token10 />
									</wsp:Policy>
								</sp:X509Token>
							</wsp:Policy>
						</sp:RecipientToken>
						<sp:AlgorithmSuite>
							<wsp:Policy>
								<sp:TripleDesRsa15 />
							</wsp:Policy>
						</sp:AlgorithmSuite>
						<sp:Layout>
							<wsp:Policy>
								<sp:Strict />
							</wsp:Policy>
						</sp:Layout>
						<sp:IncludeTimestamp />
						<sp:OnlySignEntireHeadersAndBody />
					</wsp:Policy>
				</sp:AsymmetricBinding>
				<sp:Wss10
					xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<sp:MustSupportRefKeyIdentifier />
						<sp:MustSupportRefIssuerSerial />
					</wsp:Policy>
				</sp:Wss10>
				<sp:SignedParts
					xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<sp:Body />
				</sp:SignedParts>
				<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy">
					<ramp:user>service</ramp:user>
					<ramp:passwordCallbackClass>zzz.PasswordHandler</ramp:passwordCallbackClass>
					<ramp:signatureCrypto>
						<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
							<ramp:property
								name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
							<ramp:property name="org.apache.ws.security.crypto.merlin.file">cert_path</ramp:property>
							<ramp:property
								name="org.apache.ws.security.crypto.merlin.keystore.password">cert_pass</ramp:property>
						</ramp:crypto>
					</ramp:signatureCrypto>
				</ramp:RampartConfig>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy> 

[Manuel Hartl]

Did you solve the problem? i have a problem with soapUI 4.5.1 using a mockedService that has to support MTOM and ws security.
also the latest snapshot (January 2013) does not work.

a non MTOM message works, with MTOM:
Tue Jan 08 12:21:35 CET 2013:ERROR:An error occured [Missing operation for soapAction [...] and body element [{...}EncryptedData] with SOAP Version [SOAP 1.1]], see error log for details

the error log only shows details..