Skip to content

Instantly share code, notes, and snippets.

/gist:3358846

Created August 15, 2012 10:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save anonymous/3358846 to your computer and use it in GitHub Desktop.
Save anonymous/3358846 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.java
17:14:32,078 TRACE [org.picketlink.identity.federation.web.filters.SPFilter] - Going to verify signature in the saml response from IDP
17:14:32,086 DEBUG [org.apache.xml.security.Init] - Registering default algorithms
17:14:32,151 DEBUG [org.apache.jcp.xml.dsig.internal.dom.DOMSignatureMethod] - Signature provider:BC version 1.44
17:14:32,152 DEBUG [org.apache.jcp.xml.dsig.internal.dom.DOMSignatureMethod] - verifying with key: RSA Public Key
modulus: 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
public exponent: 10001
17:14:32,154 DEBUG [org.apache.xml.security.transforms.Transform] - Create URI "http://www.w3.org/2001/10/xml-exc-c14n#" class "class org.apache.xml.security.transforms.implementations.TransformC14NExclusive"
17:14:32,154 DEBUG [org.apache.xml.security.transforms.Transform] - The NodeList is [ds:CanonicalizationMethod: null]
17:14:32,154 DEBUG [org.apache.xml.security.utils.ElementProxy] - setElement(ds:CanonicalizationMethod, "null"
17:14:32,154 DEBUG [org.apache.jcp.xml.dsig.internal.dom.ApacheCanonicalizer] - Created transform for algorithm: http://www.w3.org/2001/10/xml-exc-c14n#
17:14:32,154 DEBUG [org.apache.jcp.xml.dsig.internal.dom.ApacheCanonicalizer] - isNodeSet() = true
17:14:32,163 DEBUG [org.apache.jcp.xml.dsig.internal.dom.DOMSignedInfo] - Canonicalized SignedInfo:
17:14:32,163 DEBUG [org.apache.jcp.xml.dsig.internal.dom.DOMSignedInfo] - <ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:CanonicalizationMethod>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod>
<ds:Reference URI="#_c17a00be33d2d0a88270d7d9d1470ca8">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></ds:Transform>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="ds saml2 saml2p xenc"></ec:InclusiveNamespaces></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod>
<ds:DigestValue>kN/hgui8h7IE6HfgRWHg60sDslo=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
17:14:32,163 DEBUG [org.apache.jcp.xml.dsig.internal.dom.DOMSignedInfo] - Data to be signed/verified:PGRzOlNpZ25lZEluZm8geG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPgo8ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyI+PC9kczpDYW5vbmljYWxpemF0aW9uTWV0aG9kPgo8ZHM6U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3JzYS1zaGExIj48L2RzOlNpZ25hdHVyZU1ldGhvZD4KPGRzOlJlZmVyZW5jZSBVUkk9IiNfYzE3YTAwYmUzM2QyZDBhODgyNzBkN2Q5ZDE0NzBjYTgiPgo8ZHM6VHJhbnNmb3Jtcz4KPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIj48L2RzOlRyYW5zZm9ybT4KPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyI+PGVjOkluY2x1c2l2ZU5hbWVzcGFjZXMgeG1sbnM6ZWM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIgUHJlZml4TGlzdD0iZHMgc2FtbDIgc2FtbDJwIHhlbmMiPjwvZWM6SW5jbHVzaXZlTmFtZXNwYWNlcz48L2RzOlRyYW5zZm9ybT4KPC9kczpUcmFuc2Zvcm1zPgo8ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiPjwvZHM6RGlnZXN0TWV0aG9kPgo8ZHM6RGlnZXN0VmFsdWU+a04vaGd1aThoN0lFNkhmZ1JXSGc2MHNEc2xvPTwvZHM6RGlnZXN0VmFsdWU+CjwvZHM6UmVmZXJlbmNlPgo8L2RzOlNpZ25lZEluZm8+
17:14:32,164 TRACE [org.picketlink.identity.federation] - Signature validation status: false
17:14:32,165 DEBUG [org.apache.xml.security.utils.resolver.ResourceResolver] - check resolvability by class org.apache.xml.security.utils.resolver.ResourceResolver
17:14:32,165 DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment] - State I can resolve reference: "#_c17a00be33d2d0a88270d7d9d1470ca8"
17:14:32,167 ERROR [org.picketlink.identity.federation.web.filters.SPFilter] - Unable to verify signature
javax.xml.crypto.dsig.XMLSignatureException: javax.xml.crypto.URIReferenceException: org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _c17a00be33d2d0a88270d7d9d1470ca8
at org.apache.jcp.xml.dsig.internal.dom.DOMReference.dereference(DOMReference.java:419)
at org.apache.jcp.xml.dsig.internal.dom.DOMReference.validate(DOMReference.java:381)
at org.picketlink.identity.federation.core.util.XMLSignatureUtil.validate(XMLSignatureUtil.java:413)
at org.picketlink.identity.federation.web.filters.SPFilter.verifySignature(SPFilter.java:596)
at org.picketlink.identity.federation.web.filters.SPFilter.doFilter(SPFilter.java:275)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at net.smartam.web.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:130)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:225)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:927)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:999)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:565)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:307)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
Caused by: javax.xml.crypto.URIReferenceException: org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _c17a00be33d2d0a88270d7d9d1470ca8
at org.apache.jcp.xml.dsig.internal.dom.DOMURIDereferencer.dereference(DOMURIDereferencer.java:122)
at org.apache.jcp.xml.dsig.internal.dom.DOMReference.dereference(DOMReference.java:413)
... 23 more
Caused by: org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _c17a00be33d2d0a88270d7d9d1470ca8
at org.apache.xml.security.utils.resolver.implementations.ResolverFragment.engineResolve(ResolverFragment.java:86)
at org.apache.xml.security.utils.resolver.ResourceResolver.resolve(ResourceResolver.java:279)
at org.apache.jcp.xml.dsig.internal.dom.DOMURIDereferencer.dereference(DOMURIDereferencer.java:115)
... 24 more
javax.xml.crypto.URIReferenceException: org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _c17a00be33d2d0a88270d7d9d1470ca8
at org.apache.jcp.xml.dsig.internal.dom.DOMURIDereferencer.dereference(DOMURIDereferencer.java:122)
at org.apache.jcp.xml.dsig.internal.dom.DOMReference.dereference(DOMReference.java:413)
at org.apache.jcp.xml.dsig.internal.dom.DOMReference.validate(DOMReference.java:381)
at org.picketlink.identity.federation.core.util.XMLSignatureUtil.validate(XMLSignatureUtil.java:413)
at org.picketlink.identity.federation.web.filters.SPFilter.verifySignature(SPFilter.java:596)
at org.picketlink.identity.federation.web.filters.SPFilter.doFilter(SPFilter.java:275)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at net.smartam.web.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:130)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:225)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:927)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:999)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:565)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:307)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
Caused by: org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _c17a00be33d2d0a88270d7d9d1470ca8
at org.apache.xml.security.utils.resolver.implementations.ResolverFragment.engineResolve(ResolverFragment.java:86)
at org.apache.xml.security.utils.resolver.ResourceResolver.resolve(ResourceResolver.java:279)
at org.apache.jcp.xml.dsig.internal.dom.DOMURIDereferencer.dereference(DOMURIDereferencer.java:115)
... 24 more
17:14:32,169 ERROR [org.picketlink.identity.federation.web.filters.SPFilter] - Server Exception:
javax.servlet.ServletException: PL00009: Invalid Digital Signature:Cannot verify sender
at org.picketlink.identity.federation.web.filters.SPFilter.doFilter(SPFilter.java:276)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at net.smartam.web.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:130)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:225)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:927)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:999)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:565)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:307)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
17:14:32,194 ERROR [uk.ac.ncl.cs.smart.am2.web.controllers.ExceptionController] - Error:
javax.servlet.ServletException: PL00032: Service Provider :: Server Exception
at org.picketlink.identity.federation.web.filters.SPFilter.doFilter(SPFilter.java:329)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at net.smartam.web.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:130)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:225)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:927)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:999)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:565)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:307)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment