eclipse-ee4j / eclipse-ee4j/metro-wsit

Empty Body after turning on SecurityTubeFactory dump

Open
#330 0 comments 0 reactions 0 assignees View on GitHub
3-1-2_exclude Component: security ERR: Assignee metro2_1-waived metro2_2-waived Priority: Minor Type: Bug
Dominant language
Java
Stars
6
Forks
21
Avg merge
10h 2m
Merged PRs (30d)
1

Description

Created WS-Trust client over SSL. If the following properties are used, the message body is empty.

-Dcom.sun.xml.ws.transport.http.client.HttpTransportPipe.dump=true
-Dcom.sun.xml.wss.provider.wsit.SecurityTubeFactory.dump=true

The dumps are:

Dec 15, 2010 2:06:46 PM com.sun.xml.ws.dump.MessageDumper dump
INFO: Request message processed in Tube [ com.sun.xml.wss.jaxws.impl.SecurityClientTube ] Instance [ 5 ] Engine [ JAX-WS RI 2.2.2-hudson-101-: Stub for [https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport](https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport) ] Thread [ main ]:

[https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport](https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport)
[http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue)

[http://www.w3.org/2005/08/addressing/anonymous](http://www.w3.org/2005/08/addressing/anonymous)

uuid:03a53f84-5d08-4c7b-9350-a0e799f3b0f5

2010-12-15T22:06:46Z
2010-12-15T22:11:46Z

username
password

[http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue)

[https://localhost/ws/Service1.svc/CustomEndpoint](https://localhost/ws/Service1.svc/CustomEndpoint)

[http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1](http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1)
[http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey](http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey)

z8FWcJDo7tegBuG7VJQoJdHY9lWRDaaVC6WPcdCCKWs=

[http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1](http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1)

--[HTTP request - https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport]--
Accept: application/soap+xml, multipart/related
Content-Type: application/soap+xml; charset=utf-8;action="http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue"
User-Agent: JAX-WS RI 2.2.2-hudson-101-
[https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport](https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport)[http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue)

[http://www.w3.org/2005/08/addressing/anonymous](http://www.w3.org/2005/08/addressing/anonymous)

uuid:03a53f84-5d08-4c7b-9350-a0e799f3b0f52010-12-15T22:06:46Z2010-12-15T22:11:46Zcctestpassword--------------------

If remove the SecurityTubeFactory dump, everything is fine and the dumps are:

--[HTTP request - https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport]--
Accept: application/soap+xml, multipart/related
Content-Type: application/soap+xml; charset=utf-8;action="http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue"
User-Agent: JAX-WS RI 2.2.2-hudson-101-
[https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport](https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport)[http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue)

[http://www.w3.org/2005/08/addressing/anonymous](http://www.w3.org/2005/08/addressing/anonymous)

uuid:a031d416-9516-4145-b4fb-4adb23a7db142010-12-15T22:20:11Z2010-12-15T22:25:11Zusernamepassword[http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue)[https://localhost/ws/Service1.svc/CustomEndpoint](https://localhost/ws/Service1.svc/CustomEndpoint)[http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1](http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1)[http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey](http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey)JFP+PwnUNGnhq0cZx63mYH4D/woLG41DPyjxRP1UBV4=[http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1](http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1)--------------------
--[HTTP response - https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport - 200]--
null: HTTP/1.1 200 OK
Content-Length: 6544
Content-Type: application/soap+xml; charset=utf-8
Date: Wed, 15 Dec 2010 22:20:11 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
[http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTRC/IssueFinal](http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTRC/IssueFinal)uuid:a031d416-9516-4145-b4fb-4adb23a7db142010-12-15T22:20:12.000Z2010-12-15T22:25:12.000Z12GMx8x2GyU+dJu3DgkEnw2qsBO7tpBe/xiqHY5pGjY=2562010-12-15T22:20:11.984Z2010-12-15T22:20:41.984Z[https://localhost/ws/Service1.svc/CustomEndpoint](https://localhost/ws/Service1.svc/CustomEndpoint)[https://localhost/ws/Service1.svc/CustomEndpoint](https://localhost/ws/Service1.svc/CustomEndpoint)urn:oasis:names:tc:SAML:1.0:cm:holder-of-keyos2wUC1UMLZNW5IDuzXQ1G9luMqivOrGPYr+9ZyFlh8=cctest041CustomSTS9dOafR7ckE2NxKk9XKUHGM1HPi/PGvV62sCy3jnfJnE=H3mJeH/36PM5erUlYS7UhHLW2HsaH9V0hD/2b7EQhGIUwOFigpeQ0m7aL8/V5c5+QsTcA1qq/qjIaY8wCw8+duxcxuN00nmkgFJuN8tLyXKdazv5bZwRepS8qJatroYJg36MGzpDRbxqB77WOG9WgaMnFuZ2RWzElRv/41ITjaY=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[http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1](http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1)_69d6ea61-3dc8-4697-9768-e5698ba698fa_69d6ea61-3dc8-4697-9768-e5698ba698faurn:oasis:names:tc:SAML:1.0:assertion[http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue)[http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey](http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey)--------------------
#### Environment
Metro 2.1-b15, WS-Trust over SSL
#### Affected Versions
[2.1]

Source: [https://github.com/javaee/metro-wsit/issues/1513](https://github.com/javaee/metro-wsit/issues/1513)
Author: glassfishrobot

Contributor guide

Open the contributing guide

Research direction

Reproduce the WS-Trust-over-SSL request with both com.sun.xml.ws.transport.http.client.HttpTransportPipe.dump and com.sun.xml.wss.provider.wsit.SecurityTubeFactory.dump enabled, then compare it with SecurityTubeFactory.dump disabled. Inspect the SecurityTubeFactory and HttpTransportPipe dump paths; done means enabling the security dump no longer causes the transmitted SOAP Body to be empty.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.