[CXF-7245] Weblogic 10.3.6 + CXF 2.7.12 : The signature or decryption was invalid

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.12
• Fix Version/s: 2.7.18
• Estimated Complexity: Unknown
• Assignee: Unassigned
• Reporter: Alexis Caruana
• Created: 09/Feb/17 10:20
• Updated: 13/Feb/17 11:31
• Resolved: 13/Feb/17 11:31

Description

Using CXF 2.7.12 on weblogic server 10.3.6, i'm facing issue :
org.apache.ws.security.WSSecurityException: The signature or decryption was invalid

One reference failed : reference with ID 2, the body reference

2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_2 check: false
2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_3 check: true
2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_4 check: true
2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_5 check: true
2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_6 check: true
2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #uuid-5b84c5c2-a9de-48ad-a136-59b43f43bf9f-2288 check: true

It works with metro implementation.

Below logs :

2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - signatureOK false
2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - XML Signature verification has failed
Verify XML Signature
Signature Validation check: true
2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_2 check: false
2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_3 check: true
2017-02-06 12:01:30.835 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_4 check: true
2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_5 check: true
2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference
Reference #_6 check: true
2017-02-06 12:01:30.836 [DEBUG] [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] SignatureProcessor - reference : class org.apache.jcp.xml.dsig.internal.dom.DOMReference