> I'm trying to interop with a service provider's web service. They are
> currently requesting that messages be signed with an X509 certificate.
[quoted text clipped - 20 lines]
> Thanks,
> Colin
Hey Pablo,
Thanks for the sample code. I was hoping that it would be a simple attribute
somewhere given the number of algorithms supported, but I guess not. I'll
give this a shot.
Cheers!
Colin
> Hi Colin,
>
[quoted text clipped - 69 lines]
>> Thanks,
>> Colin
Colin Bowern - 25 Feb 2006 01:26 GMT
So that solved my last problem. Now I'm onto a new one:
<soap:Fault xmlns:wsse="http://schemas.xmlsoap.org/ws/2002/04/secext" xmlns:c="urn:schemas-cybersource-com:transaction-data-1.18">
<faultcode>wsse:InvalidSecurity</faultcode>
<faultstring>
Security Data : Invalid WS Security Header: Not supported transform: http://www.w3.org/2001/10/xml-exc-c14n#
</faultstring>
</soap:Fault>
If I parse the transform blocks out of the document it works. That being
said removing data from the document doesn't feel right. The final hurdle
seems to be the security token reference value type. It points to "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"
and as a result the service returns:
Security Data : Invalid WS Security Header: Not supported keyInfo type: wsse:SecurityTokenReference
I need to to look something more like this:
<SecurityTokenReference xmlns="http://schemas.xmlsoap.org/ws/2002/04/secext">
<Reference URI="X509Token" />
</SecurityTokenReference>
It does seem like the web service is running on older standards. I've been
going through the docs but it seems like WSE has grown to be quite complicated,
so I'm shooting in the dark here as to how to get this last bit of interop
going without using the proprietary signature functions.
Thanks,
Colin
> Hey Pablo,
>
[quoted text clipped - 74 lines]
>>> Thanks,
>>> Colin
Colin Bowern - 25 Feb 2006 01:27 GMT
That solved my last problem. Now I'm onto a new one:
<soap:Fault xmlns:wsse="http://schemas.xmlsoap.org/ws/2002/04/secext" xmlns:c="urn:schemas-cybersource-com:transaction-data-1.18">
<faultcode>wsse:InvalidSecurity</faultcode>
<faultstring>
Security Data : Invalid WS Security Header: Not supported transform: http://www.w3.org/2001/10/xml-exc-c14n#
</faultstring>
</soap:Fault>
If I parse the transform blocks out of the document it works. That being
said removing data from the document doesn't feel right. The final hurdle
seems to be the security token reference value type. It points to "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"
and as a result the service returns:
Security Data : Invalid WS Security Header: Not supported keyInfo type: wsse:SecurityTokenReference
I need to to look something more like this:
<SecurityTokenReference xmlns="http://schemas.xmlsoap.org/ws/2002/04/secext">
<Reference URI="X509Token" />
</SecurityTokenReference>
It does seem like the web service is running on older standards. I've been
going through the docs but it seems like WSE has grown to be quite complicated,
so I'm shooting in the dark here as to how to get this last bit of interop
going without using the proprietary signature functions.
Thanks,
Colin
> Hey Pablo,
>
[quoted text clipped - 74 lines]
>>> Thanks,
>>> Colin