eclipse-ee4j / eclipse-ee4j/metro-wsit

SecurityPolicy:sp:AlgorithmSuite/wsp:Policy/sp:SoapNormalization10 assertion causes deploy failure

Open
#189 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Component: security-policy ERR: Assignee Priority: Major Type: Improvement
Dominant language
Java
Stars
6
Forks
21
Avg merge
10h 2m
Merged PRs (30d)
1

Description

onfiguration: jax-ws-latest-wsit.zip build 91 ; tomcat5.5.17 / glassfish-tip
(build 43,may-01-2006)

Attachments:
1)Service wsdl (PingServices42.wsdl).
2)Snip of server log showing the exception stack trace. [ catalina.out ]

Test case description :
Service wsdl has the following :
Endpoint scope policy: AsymmetricBinding with X509V3Token10 as the initiator and
recipient tokens.The sp:AlgorithmSuite assertion specifies Basic256Rsa15 as the
[AlgorithmSuite] property.Also the sp:SoapNormalization10 assertion is used to
set the [SOAP Norm] property to 'SNT'.
The use of the sp:SoapNormalization10 causes deploy failure with the following
message in the server log :

INFO: WSSERVLET12: JAX-WS context listener initializing
May 10, 2006 3:54:55 PM
com.sun.xml.ws.transport.http.servlet.WSServletContextListener contextInitialized
SEVERE: WSSERVLET11: failed to parse runtime descriptor:
java.lang.RuntimeException:
com.sun.xml.ws.security.impl.policy.UnsupportedPolicyAssertion: Policy assertion
Assertion {
assertion data

{ namespace = 'http://schemas.xmlsoap.org/ws/2005/07/securitypolicy' prefix = 'sp' local name = 'SoapNormalization10' value = 'null' no attributes }

no nested assertions
no nested policy
} is not supported under AlgorithmSuite assertion
java.lang.RuntimeException:
com.sun.xml.ws.security.impl.policy.UnsupportedPolicyAssertion: Policy assertion
Assertion {
assertion data

{ namespace = 'http://schemas.xmlsoap.org/ws/2005/07/securitypolicy' prefix = 'sp' local name = 'SoapNormalization10' value = 'null' no attributes }

no nested assertions
no nested policy
} is not supported under AlgorithmSuite assertion
at com.sun.xml.wss.jaxws.impl.SecurityPipeBase.(SecurityPipeBase.java:268)
at
com.sun.xml.wss.jaxws.impl.SecurityServerPipe.(SecurityServerPipe.java:147)
at
com.sun.xml.ws.runtime.PipelineAssemblerFactoryImpl$1.createServer(PipelineAssemblerFactoryImpl.java:208)
at com.sun.xml.ws.server.WSEndpointImpl.(WSEndpointImpl.java:91)
at com.sun.xml.ws.server.EndpointFactory.createEndpoint(EndpointFactory.java:197)
at com.sun.xml.ws.api.server.WSEndpoint.create(WSEndpoint.java:291)
at
com.sun.xml.ws.transport.http.DeploymentDescriptorParser.parseAdapters(DeploymentDescriptorParser.java:237)
at
com.sun.xml.ws.transport.http.DeploymentDescriptorParser.parse(DeploymentDescriptorParser.java:131)
at
com.sun.xml.ws.transport.http.servlet.WSServletContextListener.contextInitialized(WSServletContextListener.java:90)
at
org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3729)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:4187)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:809)
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:497)
at org.apache.catalina.startup.HostConfig.check(HostConfig.java:1204)
at sun.reflect.GeneratedMethodAccessor90.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.commons.modeler.BaseModelMBean.invoke(BaseModelMBean.java:503)
at com.sun.jmx.mbeanserver.DynamicMetaDataImpl.invoke(DynamicMetaDataImpl.java:213)
at com.sun.jmx.mbeanserver.MetaDataImpl.invoke(MetaDataImpl.java:220)
at
com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:815)
at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:784)
at org.apache.catalina.manager.ManagerServlet.check(ManagerServlet.java:1377)
at org.apache.catalina.manager.ManagerServlet.deploy(ManagerServlet.java:636)
at org.apache.catalina.manager.ManagerServlet.doPut(ManagerServlet.java:423)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:712)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:524)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
at
org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
at
org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
at
org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
at
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)
Caused by: com.sun.xml.ws.security.impl.policy.UnsupportedPolicyAssertion:
Policy assertion Assertion {
assertion data

{ namespace = 'http://schemas.xmlsoap.org/ws/2005/07/securitypolicy' prefix = 'sp' local name = 'SoapNormalization10' value = 'null' no attributes }

no nested assertions
no nested policy
} is not supported under AlgorithmSuite assertion
at
com.sun.xml.ws.security.impl.policy.AlgorithmSuite.populate(AlgorithmSuite.java:173)
at
com.sun.xml.ws.security.impl.policy.AlgorithmSuite.getDigestAlgorithm(AlgorithmSuite.java:89)
at
com.sun.xml.ws.security.impl.policyconv.SignatureTargetCreator.newQNameSignatureTarget(SignatureTargetCreator.java:74)
at
com.sun.xml.ws.security.impl.policyconv.IntegrityAssertionProcessor.process(IntegrityAssertionProcessor.java:87)
at
com.sun.xml.ws.security.impl.policyconv.BindingProcessor.addPrimaryTargets(BindingProcessor.java:149)
at
com.sun.xml.ws.security.impl.policyconv.AsymmetricBindingProcessor.process(AsymmetricBindingProcessor.java:88)
at
com.sun.xml.ws.security.impl.policyconv.XWSSPolicyGenerator.process(XWSSPolicyGenerator.java:190)
at
com.sun.xml.ws.security.impl.policyconv.XWSSPolicyGenerator.process(XWSSPolicyGenerator.java:147)
at
com.sun.xml.wss.jaxws.impl.SecurityPipeBase.constructPolicyHolder(SecurityPipeBase.java:1132)
at
com.sun.xml.wss.jaxws.impl.SecurityServerPipe.addIncomingProtocolPolicy(SecurityServerPipe.java:633)
at
com.sun.xml.wss.jaxws.impl.SecurityPipeBase.buildProtocolPolicy(SecurityPipeBase.java:1108)
at
com.sun.xml.wss.jaxws.impl.SecurityPipeBase.collectPolicies(SecurityPipeBase.java:697)
at com.sun.xml.wss.jaxws.impl.SecurityPipeBase.(SecurityPipeBase.java:265)
... 44 more
May 10, 2006 3:54:55 PM org.apache.catalina.core.StandardContext start
SEVERE: Error listenerStart
May 10, 2006 3:54:55 PM org.apache.catalina.core.StandardContext start
SEVERE: Context [/jaxws-s42] startup failed due to previous errors
May 10, 2006 3:54:55 PM
com.sun.xml.ws.transport.http.servlet.WSServletContextListener contextDestroyed
INFO: WSSERVLET13: JAX-WS context listener destroyed

      • (#1 of 1): 2006-05-10 16:13:15 IST eric.ekka@sun.com
Environment

Operating System: All
Platform: All

Affected Versions

[current]

Source: https://github.com/javaee/metro-wsit/issues/16
Author: glassfishrobot

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the failure path at com.sun.xml.ws.security.impl.policy.AlgorithmSuite.populate, reported at AlgorithmSuite.java:173, and review the attached PingServices42.wsdl and catalina.out excerpt. Reproduce deployment with the stated JAX-WS, Tomcat, and GlassFish versions using the AsymmetricBinding, Basic256Rsa15, and SoapNormalization10 assertions. Done means the service deploys without UnsupportedPolicyAssertion.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
28/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.