XMLSignatureException

hi,

I have deployed SourceId.JAVA on IBM WebSphere 4.0.3 which supports jdk 1.3 and servlets 2.2

I have made changes in the servlet classes and web.xml to make it compatible with servlet 2.2
Now, I am getting following error when IDP has to sign a XML document and sent to SP. Here is the stack trace...

throwable class name: org.apache.xml.security.signature.XMLSignatureException
toString(): org.apache.xml.security.signature.XMLSignatureException: The requested algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1 does not exist. Original Message was: null
Original Exception was java.lang.NullPointerException
getMessage(): The requested algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1 does not exist. Original Message was: null
Stack Trace: org.apache.xml.security.signature.XMLSignatureException: The requested algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1 does not exist. Original Message was: null
Original Exception was java.lang.NullPointerException
	at org.apache.xml.security.algorithms.SignatureAlgorithm.<init>(SignatureAlgorithm.java:148)
	at org.apache.xml.security.signature.SignedInfo.<init>(SignedInfo.java:154)
	at org.apache.xml.security.signature.XMLSignature.<init>(XMLSignature.java:236)
	at org.apache.xml.security.signature.XMLSignature.<init>(XMLSignature.java:214)
	at org.sourceid.sso.util.XMLUtils.sign(XMLUtils.java:433)
	at org.sourceid.sso.servlets.Authenticator.handleAuthReturnToSP(Authenticator.java:521)
	at org.sourceid.sso.servlets.Authenticator.handleAppAuthenticated(Authenticator.java:298)
	at org.sourceid.sso.servlets.Authenticator.service(Authenticator.java:95)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
	at com.ibm.servlet.engine.webapp.StrictServletInstance.doService(ServletManager.java:827)
	at com.ibm.servlet.engine.webapp.StrictLifecycleServlet._service(StrictLifecycleServlet.java:167)
	at com.ibm.servlet.engine.webapp.IdleServletState.service(StrictLifecycleServlet.java:297)
	at com.ibm.servlet.engine.webapp.StrictLifecycleServlet.service(StrictLifecycleServlet.java:110)
	at com.ibm.servlet.engine.webapp.ServletInstance.service(ServletManager.java:472)
	at com.ibm.servlet.engine.webapp.ValidServletReferenceState.dispatch(ServletManager.java:1012)
	at com.ibm.servlet.engine.webapp.ServletInstanceReference.dispatch(ServletManager.java:913)
	at com.ibm.servlet.engine.webapp.WebAppNamedDispatcher.handleWebAppDispatch(WebAppNamedDispatcher.java:278)
	at com.ibm.servlet.engine.webapp.WebAppNamedDispatcher.dispatch(WebAppNamedDispatcher.java:146)
	at com.ibm.servlet.engine.webapp.WebAppNamedDispatcher.forward(WebAppNamedDispatcher.java:80)
	at idp._logon_0002dpost_jsp_0._jspService(_logon_0002dpost_jsp_0.java:179)
	at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:142)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
	at org.apache.jasper.runtime.JspServlet$JspServletWrapper.service(JspServlet.java:300)
	at org.apache.jasper.runtime.JspServlet.serviceJspFile(JspServlet.java:430)
	at org.apache.jasper.runtime.JspServlet.service(JspServlet.java:565)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
	at com.ibm.servlet.engine.webapp.StrictServletInstance.doService(ServletManager.java:827)
	at com.ibm.servlet.engine.webapp.StrictLifecycleServlet._service(StrictLifecycleServlet.java:167)
	at com.ibm.servlet.engine.webapp.IdleServletState.service(StrictLifecycleServlet.java:297)
	at com.ibm.servlet.engine.webapp.StrictLifecycleServlet.service(StrictLifecycleServlet.java:110)
	at com.ibm.servlet.engine.webapp.ServletInstance.service(ServletManager.java:472)
	at com.ibm.servlet.engine.webapp.ValidServletReferenceState.dispatch(ServletManager.java:1012)
	at com.ibm.servlet.engine.webapp.ServletInstanceReference.dispatch(ServletManager.java:913)
	at com.ibm.servlet.engine.webapp.WebAppRequestDispatcher.handleWebAppDispatch(WebAppRequestDispatcher.java:523)
	at com.ibm.servlet.engine.webapp.WebAppRequestDispatcher.dispatch(WebAppRequestDispatcher.java:282)
	at com.ibm.servlet.engine.webapp.WebAppRequestDispatcher.forward(WebAppRequestDispatcher.java:112)
	at com.ibm.servlet.engine.srt.WebAppInvoker.doForward(WebAppInvoker.java:91)
	at com.ibm.servlet.engine.srt.WebAppInvoker.handleInvocationHook(WebAppInvoker.java:184)
	at com.ibm.servlet.engine.invocation.CachedInvocation.handleInvocation(CachedInvocation.java:67)
	at com.ibm.servlet.engine.srp.ServletRequestProcessor.dispatchByURI(ServletRequestProcessor.java:122)
	at com.ibm.servlet.engine.oselistener.OSEListenerDispatcher.service(OSEListener.java:315)
	at com.ibm.servlet.engine.http11.HttpConnection.handleRequest(HttpConnection.java:60)
	at com.ibm.ws.http.HttpConnection.readAndHandleRequest(HttpConnection.java:323)
	at com.ibm.ws.http.HttpConnection.run(HttpConnection.java:252)
	at com.ibm.ws.util.CachedThread.run(ThreadPool.java:122)
java.lang.NullPointerException
	at org.apache.xml.security.algorithms.implementations.SignatureBaseRSA.<init>(SignatureBaseRSA.java:111)
	at org.apache.xml.security.algorithms.implementations.SignatureBaseRSA$SignatureRSASHA1.<init>(SignatureBaseRSA.java:368)
	at java.lang.Class.newInstance0(Native Method)
	at java.lang.Class.newInstance(Class.java(Compiled Code))
	at org.apache.xml.security.algorithms.SignatureAlgorithm.<init>(SignatureAlgorithm.java:127)
	at org.apache.xml.security.signature.SignedInfo.<init>(SignedInfo.java:154)
	at org.apache.xml.security.signature.XMLSignature.<init>(XMLSignature.java:236)
	at org.apache.xml.security.signature.XMLSignature.<init>(XMLSignature.java:214)
	at org.sourceid.sso.util.XMLUtils.sign(XMLUtils.java:433)
	at org.sourceid.sso.servlets.Authenticator.handleAuthReturnToSP(Authenticator.java:521)
	at org.sourceid.sso.servlets.Authenticator.handleAppAuthenticated(Authenticator.java:298)
	at org.sourceid.sso.servlets.Authenticator.service(Authenticator.java:95)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
	at com.ibm.servlet.engine.webapp.StrictServletInstance.doService(ServletManager.java:827)
	at com.ibm.servlet.engine.webapp.StrictLifecycleServlet._service(StrictLifecycleServlet.java:167)
	at com.ibm.servlet.engine.webapp.IdleServletState.service(StrictLifecycleServlet.java:297)
	at com.ibm.servlet.engine.webapp.StrictLifecycleServlet.service(StrictLifecycleServlet.java:110)
	at com.ibm.servlet.engine.webapp.ServletInstance.service(ServletManager.java:472)
	at com.ibm.servlet.engine.webapp.ValidServletReferenceState.dispatch(ServletManager.java:1012)
	at com.ibm.servlet.engine.webapp.ServletInstanceReference.dispatch(ServletManager.java:913)
	at com.ibm.servlet.engine.webapp.WebAppNamedDispatcher.handleWebAppDispatch(WebAppNamedDispatcher.java:278)
	at com.ibm.servlet.engine.webapp.WebAppNamedDispatcher.dispatch(WebAppNamedDispatcher.java:146)
	at com.ibm.servlet.engine.webapp.WebAppNamedDispatcher.forward(WebAppNamedDispatcher.java:80)
	at idp._logon_0002dpost_jsp_0._jspService(_logon_0002dpost_jsp_0.java:179)
	at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:142)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
	at org.apache.jasper.runtime.JspServlet$JspServletWrapper.service(JspServlet.java:300)
	at org.apache.jasper.runtime.JspServlet.serviceJspFile(JspServlet.java:430)
	at org.apache.jasper.runtime.JspServlet.service(JspServlet.java:565)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
	at com.ibm.servlet.engine.webapp.StrictServletInstance.doService(ServletManager.java:827)
	at com.ibm.servlet.engine.webapp.StrictLifecycleServlet._service(StrictLifecycleServlet.java:167)
	at com.ibm.servlet.engine.webapp.IdleServletState.service(StrictLifecycleServlet.java:297)
	at com.ibm.servlet.engine.webapp.StrictLifecycleServlet.service(StrictLifecycleServlet.java:110)
	at com.ibm.servlet.engine.webapp.ServletInstance.service(ServletManager.java:472)
	at com.ibm.servlet.engine.webapp.ValidServletReferenceState.dispatch(ServletManager.java:1012)
	at com.ibm.servlet.engine.webapp.ServletInstanceReference.dispatch(ServletManager.java:913)
	at com.ibm.servlet.engine.webapp.WebAppRequestDispatcher.handleWebAppDispatch(WebAppRequestDispatcher.java:523)
	at com.ibm.servlet.engine.webapp.WebAppRequestDispatcher.dispatc
[10/4/03 12:26:28:484 GMT+05:30] 69e135f8 SystemOut     U h(WebAppRequestDispatcher.java:282)
	at com.ibm.servlet.engine.webapp.WebAppRequestDispatcher.forward(WebAppRequestDispatcher.java:112)
	at com.ibm.servlet.engine.srt.WebAppInvoker.doForward(WebAppInvoker.java:91)
	at com.ibm.servlet.engine.srt.WebAppInvoker.handleInvocationHook(WebAppInvoker.java:184)
	at com.ibm.servlet.engine.invocation.CachedInvocation.handleInvocation(CachedInvocation.java:67)
	at com.ibm.servlet.engine.srp.ServletRequestProcessor.dispatchByURI(ServletRequestProcessor.java:122)
	at com.ibm.servlet.engine.oselistener.OSEListenerDispatcher.service(OSEListener.java:315)
	at com.ibm.servlet.engine.http11.HttpConnection.handleRequest(HttpConnection.java:60)
	at com.ibm.ws.http.HttpConnection.readAndHandleRequest(HttpConnection.java:323)
	at com.ibm.ws.http.HttpConnection.run(HttpConnection.java:252)
	at com.ibm.ws.util.CachedThread.run(ThreadPool.java:122)



=== Parameters (Form and/or Querystring) ===
Unparsed QueryString: userID=ytyr&password=tyry
password: tyry
userID: ytyr
=== Request Attributes ===
com.ibm.servlet.engine.webapp.dispatch_type: forward
UserID: ytyr
AuthnMethod: urn:oasis:names:tc:SAML:1.0:am:password
com.ibm.websphere.olt.forward.request: JSP 1.1 Processor
com.ibm.websphere.olt.include.bool: false
=== Session Attributes ===
Session ID: JWX1XBJV2UDC1TY2UXP4DMA
sso-sample.userID: ytyr
org.sourceid.sso.authnRequest: org.sourceid.sso.xml.lib.AuthnRequestType@7fb735f9
org.sourceid.sso.userID: ytyr
org.sourceid.sso.authnMethod: urn:oasis:names:tc:SAML:1.0:am:password
org.sourceid.sso.session: [IDPSession userID=ytyr sessionIndex=1]
=== HTTP Header contents ===
Method: GET
accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*
referer: http://localhost:8080/MyIDP/sso/authn?RequestID=iml567j&MajorVersion=1&MinorVersion=0&IssueInstant=2003-10-04T06:56:20Z&ProviderID=MySP&ForceAuthn=false&IsPassive=false&Federate=true&ProtocolProfile=http://projectliberty.org/profiles/brws-art&SigAlg=http://www.w3.org/2000/09/xmldsig#rsa-sha1&Signature=ubaG4KJKPnFn6znaxbqtCf1zHA9+lzGnRu+mdNoi9ES77YsF6aNI9g7lBP6lsuRqSqqGmZua5NqO
exJIu3D3yWHKl2jjbjXjI9MFwm7OQdILgwVA3mue7cav5ykxaU0fy5sx/PuvWULn/Q+maTnqFvB3
xi3f8QjPCKas6IbzyZk=
accept-language: en-us
accept-encoding: gzip, deflate
user-agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
host: localhost:8080
connection: Keep-Alive
cookie: JSESSIONID=0000JWX1XBJV2UDC1TY2UXP4DMA:-1


Why this message?
The requested algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1 does not exist.

kindly explain.

Thank you,
Praveen

__________________________________________
Looking for safe email solutions for your school or district?
http://www.epals.com/schoolmail/