Forum Discussion

CLewis's avatar
CLewis
Occasional Contributor
16 years ago

2.5 Beta - WS-Security SKI Change

Just tried out 2.5 beta. All of our WS-Security configurations use SKI.

In 2.5, I get the following error now:

Wed Oct 01 11:12:05 EDT 2008:ERROR:An error occured [An unsupported token was provided (An X509 certificate with version 3 must be used for SKI. The presented cert has version: 1)], see error log for details

Error log:
Wed Oct 01 11:12:05 EDT 2008:ERROR:org.apache.ws.security.WSSecurityException: An unsupported token was provided (An X509 certificate with version 3 must be used for SKI. The presented cert has version: 1)
  org.apache.ws.security.WSSecurityException: An unsupported token was provided (An X509 certificate with version 3 must be used for SKI. The presented cert has version: 1)
  at org.apache.ws.security.message.token.SecurityTokenReference.setKeyIdentifierSKI(SecurityTokenReference.java:272)
  at org.apache.ws.security.message.WSSecSignature.prepare(WSSecSignature.java:404)
  at org.apache.ws.security.message.WSSecSignature.build(WSSecSignature.java:721)
  at com.eviware.soapui.impl.wsdl.support.wss.entries.AddSignatureEntry.process(AddSignatureEntry.java:168)
  at com.eviware.soapui.impl.wsdl.support.wss.OutgoingWss.processOutgoing(OutgoingWss.java:156)
  at com.eviware.soapui.impl.wsdl.submit.filters.WssRequestFilter.filterWsdlRequest(WssRequestFilter.java:54)
  at com.eviware.soapui.impl.wsdl.submit.filters.AbstractRequestFilter.filterAbstractHttpRequest(AbstractRequestFilter.java:35)
  at com.eviware.soapui.impl.wsdl.submit.filters.AbstractRequestFilter.filterRequest(AbstractRequestFilter.java:29)
  at com.eviware.soapui.impl.wsdl.submit.transports.http.HttpClientRequestTransport.sendRequest(HttpClientRequestTransport.java:116)
  at com.eviware.soapui.impl.wsdl.WsdlSubmit.run(WsdlSubmit.java:118)
  at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
  at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)
  at java.util.concurrent.FutureTask.run(Unknown Source)
  at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)
  at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
  at java.lang.Thread.run(Unknown Source)


So am I out of luck here?

2 Replies

  • omatzura's avatar
    omatzura
    Super Contributor
    Hi,

    thanks for the report. We've updated the wss4j library that is reporting the error, I'll see if there is some compatibility setting to work around this, sorry for the hassle..

    regards,

    /Ole
    eviware.com
  • omatzura's avatar
    omatzura
    Super Contributor
    Hi,

    Apparently the WS-Security specification requires V3 certificates to be used for SKI. Is it possible for you to create a corresponding V3 certificate instead?

    regards!

    /Ole
    eviware.com