[jira] [Resolved] (RAMPART-431) org.apache.ws.security.WSSecurityException: General security error (WSEncryptBody/WSSignEnvelope: Element to encrypt/sign not found: http://www.w3.org/2005/08/addressing, To)
"Robert Lazarski (Jira)" <[email protected]> Wed, 10 Jun 2026 16:15:00 +0000 (UTC)
| Newsgroups | gmane.text.xml.axis.devel |
|---|---|
| Message-ID | <[email protected]> |
[ https://issues.apache.org/jira/browse/RAMPART-431?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Lazarski resolved RAMPART-431.
-------------------------------------
Resolution: Fixed
Fixed in 2.0.0.
Root cause: TransportBindingBuilder built the signature part list directly from the
policy's SignedParts headers without verifying that each header is actually present
in the outgoing message. When a SignedParts header is absent - for example the
WS-Addressing wsa:To header while building an STS bootstrap / SecureConversation
request - WSS4J's addReferencesToSign failed the entire send with
"General security error (Element to encrypt/sign not found:
http://www.w3.org/2005/08/addressing, To)".
The four signing methods (X509, Kerberos, IssuedToken, SecureConversation) now add a
SignedParts header to the signature only if a matching element exists in the SOAP
header (new addSignedPartHeaderIfPresent helper). This matches RampartUtil's outbound
part resolution and the inbound validator, both of which treat an absent signed-parts
header as allowed. (The asymmetric and symmetric binding builders were not affected;
they already resolve signed parts through a presence-checked path.)
Added a regression test
(TransportBindingBuilderTest.testTransportBindingAbsentSignedHeader): a policy whose
endorsing token signs a 2005/08 wsa:To header that is not present in the message now
builds successfully. With the presence check removed, the test reproduces the
original "Element to encrypt/sign not found" error, confirming it guards the fix.
Verified with a full clean 'mvn verify -Papache-release' across all modules including
the nine policy samples on OpenJDK 17/21/25.
> org.apache.ws.security.WSSecurityException: General security error (WSEncryptBody/WSSignEnvelope: Element to encrypt/sign not found: http://www.w3.org/2005/08/addressing, To)
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: RAMPART-431
> URL: https://issues.apache.org/jira/browse/RAMPART-431
> Project: Rampart
> Issue Type: Bug
> Components: distribution, rampart-core, rampart-integration, rampart-policy
> Affects Versions: 1.6.2
> Environment: jdk 1.7.0
> axis2 1.6.2 wsdl2java
> rampart 1.6.2
> Reporter: axel de la cruz
> Assignee: Robert Lazarski
> Priority: Critical
> Labels: security
> Fix For: 2.0.0
>
> Attachments: wsdl.xsd
>
>
> Hello I hope you can help me
> When I try to make the request to the wsdl these errors are returned .
> 2016-04-11 17:48:43,229 ERROR [org.apache.ws.security.message.WSSecSignatureBase] (default task-17) : org.apache.ws.security.WSSecurityException: General security error (WSEncryptBody/WSSignEnvelope: Element to encrypt/sign not found: http://www.w3.org/2005/08/addressing, To)
> at org.apache.ws.security.message.WSSecSignatureBase.addReferencesToSign(WSSecSignatureBase.java:160) [wss4j-1.6.4.jar:1.6.4]
> at org.apache.ws.security.message.WSSecSignature.addReferencesToSign(WSSecSignature.java:409) [wss4j-1.6.4.jar:1.6.4]
> at org.apache.rampart.builder.TransportBindingBuilder.doX509TokenSignature(TransportBindingBuilder.java:278) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.builder.TransportBindingBuilder.build(TransportBindingBuilder.java:137) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:140) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:65) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:340) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.Phase.invoke(Phase.java:313) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:262) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:427) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:406) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.client.OperationClient.execute(OperationClient.java:165) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.client.ServiceClient.sendReceive(ServiceClient.java:555) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.rahas.client.STSClient.requestSecurityToken(STSClient.java:154) [rampart-trust-1.6.2.jar:1.6.2]
> at org.apache.rampart.util.RampartUtil.getToken(RampartUtil.java:773) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.util.RampartUtil.getSecConvToken(RampartUtil.java:640) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.builder.TransportBindingBuilder.handleSecureConversationTokens(TransportBindingBuilder.java:651) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.builder.TransportBindingBuilder.build(TransportBindingBuilder.java:139) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:140) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:65) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:340) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.Phase.invoke(Phase.java:313) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:262) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:427) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:406) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.client.OperationClient.execute(OperationClient.java:165) [axis2-kernel-1.6.2.jar:1.6.2]
> at mx.leaf.tokenretencion.client.AutenticacionStub.autentica(AutenticacionStub.java:205) [classes:]
> at mx.leaf.tokenretencion.rest.TokenRetRest.getTokenRet(TokenRetRest.java:58) [classes:]
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_80]
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_80]
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_80]
> at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_80]
> at org.springframework.web.bind.annotation.support.HandlerMethodInvoker.invokeHandlerMethod(HandlerMethodInvoker.java:177) [spring-web-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.mvc.annotation.AnnotationMethodHandlerAdapter.invokeHandlerMethod(AnnotationMethodHandlerAdapter.java:446) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.mvc.annotation.AnnotationMethodHandlerAdapter.handle(AnnotationMethodHandlerAdapter.java:434) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:943) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:877) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:966) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:857) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:687) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
> at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:842) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
> at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:86) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:70) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:261) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:248) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:77) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:167) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:199) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:761) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [rt.jar:1.7.0_80]
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [rt.jar:1.7.0_80]
> at java.lang.Thread.run(Thread.java:745) [rt.jar:1.7.0_80]
> 2016-04-11 17:48:43,234 ERROR [org.apache.rahas.client.STSClient] (default task-17) errorInObtainingToken: org.apache.axis2.AxisFault: Error in signature with X509Token
> at org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:76) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:340) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.Phase.invoke(Phase.java:313) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:262) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:427) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:406) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.client.OperationClient.execute(OperationClient.java:165) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.client.ServiceClient.sendReceive(ServiceClient.java:555) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.rahas.client.STSClient.requestSecurityToken(STSClient.java:154) [rampart-trust-1.6.2.jar:1.6.2]
> at org.apache.rampart.util.RampartUtil.getToken(RampartUtil.java:773) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.util.RampartUtil.getSecConvToken(RampartUtil.java:640) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.builder.TransportBindingBuilder.handleSecureConversationTokens(TransportBindingBuilder.java:651) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.builder.TransportBindingBuilder.build(TransportBindingBuilder.java:139) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:140) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:65) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:340) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.Phase.invoke(Phase.java:313) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:262) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:427) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:406) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229) [axis2-kernel-1.6.2.jar:1.6.2]
> at org.apache.axis2.client.OperationClient.execute(OperationClient.java:165) [axis2-kernel-1.6.2.jar:1.6.2]
> at mx.leaf.tokenretencion.client.AutenticacionStub.autentica(AutenticacionStub.java:205) [classes:]
> at mx.leaf.tokenretencion.rest.TokenRetRest.getTokenRet(TokenRetRest.java:58) [classes:]
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_80]
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_80]
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_80]
> at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_80]
> at org.springframework.web.bind.annotation.support.HandlerMethodInvoker.invokeHandlerMethod(HandlerMethodInvoker.java:177) [spring-web-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.mvc.annotation.AnnotationMethodHandlerAdapter.invokeHandlerMethod(AnnotationMethodHandlerAdapter.java:446) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.mvc.annotation.AnnotationMethodHandlerAdapter.handle(AnnotationMethodHandlerAdapter.java:434) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:943) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:877) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:966) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:857) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:687) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
> at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:842) [spring-webmvc-4.1.5.RELEASE.jar:4.1.5.RELEASE]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
> at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:86) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:70) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:261) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:248) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:77) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:167) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:199) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:761) [undertow-core-1.1.8.Final.jar:1.1.8.Final]
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [rt.jar:1.7.0_80]
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [rt.jar:1.7.0_80]
> at java.lang.Thread.run(Thread.java:745) [rt.jar:1.7.0_80]
> Caused by: org.apache.rampart.RampartException: Error in signature with X509Token
> at org.apache.rampart.builder.TransportBindingBuilder.doX509TokenSignature(TransportBindingBuilder.java:287) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.builder.TransportBindingBuilder.build(TransportBindingBuilder.java:137) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:140) [rampart-core-1.6.2.jar:1.6.2]
> at org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:65) [rampart-core-1.6.2.jar:1.6.2]
> ... 64 more
> Caused by: org.apache.ws.security.WSSecurityException: Signature creation failed (Cannot setup signature data structure)
> at org.apache.ws.security.message.WSSecSignatureBase.addReferencesToSign(WSSecSignatureBase.java:191) [wss4j-1.6.4.jar:1.6.4]
> at org.apache.ws.security.message.WSSecSignature.addReferencesToSign(WSSecSignature.java:409) [wss4j-1.6.4.jar:1.6.4]
> at org.apache.rampart.builder.TransportBindingBuilder.doX509TokenSignature(TransportBindingBuilder.java:278) [rampart-core-1.6.2.jar:1.6.2]
> ... 67 more
> Caused by: org.apache.ws.security.WSSecurityException: General security error (WSEncryptBody/WSSignEnvelope: Element to encrypt/sign not found: http://www.w3.org/2005/08/addressing, To)
> at org.apache.ws.security.message.WSSecSignatureBase.addReferencesToSign(WSSecSignatureBase.java:160) [wss4j-1.6.4.jar:1.6.4]
> ... 69 more
--
This message was sent by Atlassian Jira
(v8.20.10#820010)