wsalembi
15 years agoOccasional Contributor
MTOM signature bug
SOAPUI calculates the XML signature wrongly when using MTOM attachments. The body digest is based on the message in XML view (including the string "cid:749983768919" and not the attachment). The correct implementation should inline the attachment (cid:749983768919) as base64 string into the <v11:BinaryContent> tag and calculate the digest on that message.
<soapenv:Body wsu:Id="id-body" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<v1:MtomSecuredMessageRequest>
<v11:Value>test</v11:Value>
<v11:BinaryContent>cid:749983768919</v11:BinaryContent>
</v1:MtomSecuredMessageRequest>
</soapenv:Body>
Please confirm
<soapenv:Body wsu:Id="id-body" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<v1:MtomSecuredMessageRequest>
<v11:Value>test</v11:Value>
<v11:BinaryContent>cid:749983768919</v11:BinaryContent>
</v1:MtomSecuredMessageRequest>
</soapenv:Body>
Please confirm