• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Liutauras Vilda
  • Bear Bibeault
  • Tim Cooke
  • Junilu Lacar
Sheriffs:
  • Paul Clapham
  • Devaka Cooray
  • Knute Snortum
Saloon Keepers:
  • Ron McLeod
  • Tim Moores
  • Stephan van Hulst
  • Tim Holloway
  • Frits Walraven
Bartenders:
  • Carey Brown
  • salvin francis
  • Claude Moore

WS Security Signature problem: spot the difference between two soap messages  RSS feed

 
Greenhorn
Posts: 13
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

I'm developing a client who will consume an external web service which I don't control. I have to add security to the messages, specifically a Timestamp and a signature using DirectReference (BST). I got what looks like an ok message but I receive a fault about the signature beeing wrong. I compared a capture of the request against a good one generated by SoapUI to spot the differences but I couldn't find the one.

The client is being developed using Spring boot and security is being added via Wss4jSecurityInterceptor. The fault I'm getting is:



I'm using no encryption, so the fault must be caused by the signature.

Both soap messages are in the following link under the names "bad message.txt" and "good message.txt" inside "soap.zip" file:
http://s000.tinyupload.com/?file_id=57660653696216385241

Mirror which requires an email to download the file:
https://www.filehosting.org/file/details/791316/soap.zip

The aaa, bbb... thing is just me hiding some URLS, but they are in both messages so that souldn't be the problem. Im pretty sure I'm using the same certificate for both so, can anyone spot why one works and the other doesn't? The only "difference" I saw until now is that in the bad message IDs are shown with hyphens while in the right one they doesn't.

Thanks in advance,
Frege.
soap.zip.png
[Thumbnail for soap.zip.png]
 
frege fregenal
Greenhorn
Posts: 13
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Sorry for double-posting, but does anyone knows how can I upload the Soap messages so you can also have a look at them?
Posting in OP: post too long. Tried .xml, .txt, .log, .zip and .rar -> none of this extension is allowed for attachments.

I uploaded the files in another host. Here is the link:
https://www.filehosting.org/file/details/791316/soap.zip
 
Saloon Keeper
Posts: 5412
143
Android Firefox Browser Mac OS X Safari Tomcat Server VI Editor
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
You can only attach image files. If the SOAP isn't too long you can include it in a post; make sure to use CODE tags and set the type to XML.
 
frege fregenal
Greenhorn
Posts: 13
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator

Tim Moores wrote:You can only attach image files. If the SOAP isn't too long you can include it in a post; make sure to use CODE tags and set the type to XML.



The Soap messages are too long for post, in my previous message I provided a link to another hosting with both files inside a zip.
 
Saloon Keeper
Posts: 2504
321
Android Angular Framework Eclipse IDE Java Linux MySQL Database Redhat TypeScript
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator

frege fregenal wrote:I provided a link to another hosting with both files inside a zip.


The download link requires that an email address be provided to get the content - likely that will discourage most from taking a look at your message.
 
frege fregenal
Greenhorn
Posts: 13
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator

Ron McLeod wrote:

frege fregenal wrote:I provided a link to another hosting with both files inside a zip.


The download link requires that an email address be provided to get the content - likely that will discourage most from taking a look at your message.



Thanks for the advice, didn't noticed it required an email to download the file too. I edited the OP with the new link, leaving the old one as a mirror warning about the email thing. The new link is

http://s000.tinyupload.com/?file_id=57660653696216385241
 
frege fregenal
Greenhorn
Posts: 13
  • Likes 1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Solved. Some of the header tags were soap-env instead of SOAP:ENVELOPE. Thanks all for your help.
 
You don't like waffles? Well, do you like this tiny ad?
Create Edit Print & Convert PDF Using Free API with Java
https://coderanch.com/wiki/703735/Create-Convert-PDF-Free-Spire
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!