Andrea De Angelis [https://community.jboss.org/people/soulshunter] created the discussion "Problem implementing WS-Security X509 Token in JBoss 5.x" To view the discussion, visit: https://community.jboss.org/message/771678#771678 -------------------------------------------------------------- Hi all, i'm re-writing an application developped for JBoss 4.3 fro a new environment in JBoss 5.1. In this application (EAR) we've a WAR with some Web Services with WS-Security and X509 Token. In the first environment (Jboss 4.3) my jboss-wsse-server.xml look as: {code:xml} <jboss-ws-security    xmlns=" http://www.jboss.com/ws-security/config http://www.jboss.com/ws-security/config"    xmlns:xsi=" http://www.w3.org/2001/XMLSchema-instance http://www.w3.org/2001/XMLSchema-instance"    xsi:schemaLocation=" http://www.jboss.com/ws-security/config http://www.jboss.com/ws-security/config                                                      http://www.jboss.com/ws-security/schema/jboss-ws-security_1_0.xsd http://www.jboss.com/ws-security/schema/jboss-ws-security_1_0.xsd">            <!-- PRODUCTION    -->     <key-store-file>/mydirectory/keystore/server.keystore</key-store-file>     <key-store-password>xxx</key-store-password>     <key-store-type>jks</key-store-type>     <trust-store-file>/mydirectory/keystore/server.truststore</trust-store-file>     <trust-store-password>xxx</trust-store-password>     <trust-store-type>jks</trust-store-type>     <!-- timestamp tolerance -->     <timestamp-verification createdTolerance="600" warnCreated="true" expiresTolerance="600" warnExpires="true" />     <config>         <!-- <timestamp ttl="1000"/>  -->         <sign type="x509v3" alias="server" />         <requires>             <signature/>         </requires>         <authenticate>             <signatureCertAuth certificatePrincipal="com.examples.service.jbossws.MyCertificatePrincipal"/>         </authenticate>     </config> </jboss-ws-security> {code} And my Jboss-service.xml as: {code:xml} <mbean code="org.jboss.security.plugins.JaasSecurityDomain"        name="jboss.security:service=SanferSecurityDomain">     <constructor>      <arg type="java.lang.String" value="SanferWSCert"/>     </constructor>     <attribute name="KeyStoreURL">/mydirectory/keystore/server.keystore</attribute>     <attribute name="KeyStorePass">xxx</attribute>     <attribute name="KeyStoreType">jks</attribute>     <depends>jboss.security:service=JaasSecurityManager</depends>   </mbean>   <mbean code="org.jboss.security.auth.login.DynamicLoginConfig"     name="whatever:service=SanferLogin">     <attribute name="AuthConfig">my-login-config.xml</attribute>     <depends optional-attribute-name="LoginConfigService">       jboss.security:service=XMLLoginConfig</depends>     <depends optional-attribute-name="SecurityManagerService">       jboss.security:service=JaasSecurityManager</depends>   </mbean> </server> {code} I highlighted in red the absolute path of my keystore and truststore. When i deploy this EAR in Jboss 4.3 everything it's ok, but in Jboss 5.1 i've the error message above: {code} Caused by: org.jboss.ws.WSException: Cannot find required security resource: /opt/sanfer/keystore/server.keystore           at org.jboss.ws.metadata.wsse.WSSecurityConfigFactory.getResource(WSSecurityConfigFactory.java:114)           at org.jboss.ws.metadata.wsse.WSSecurityConfigFactory.initKeystorePath(WSSecurityConfigFactory.java:89)           at org.jboss.ws.metadata.wsse.WSSecurityConfigFactory.createConfiguration(WSSecurityConfigFactory.java:72)           at org.jboss.ws.metadata.builder.jaxws.JAXWSWebServiceMetaDataBuilder.buildWebServiceMetaData(JAXWSWebServiceMetaDataBuilder.java:132)           at org.jboss.ws.metadata.builder.jaxws.JAXWSServerMetaDataBuilder.setupProviderOrWebService(JAXWSServerMetaDataBuilder.java:52)           at org.jboss.ws.metadata.builder.jaxws.JAXWSMetaDataBuilderJSE.buildMetaData(JAXWSMetaDataBuilderJSE.java:61)           at org.jboss.wsf.stack.jbws.UnifiedMetaDataDeploymentAspect.start(UnifiedMetaDataDeploymentAspect.java:64)           at org.jboss.wsf.framework.deployment.DeploymentAspectManagerImpl.deploy(DeploymentAspectManagerImpl.java:129)           at org.jboss.wsf.container.jboss50.deployer.ArchiveDeployerHook.deploy(ArchiveDeployerHook.java:76)           at org.jboss.wsf.container.jboss50.deployer.AbstractWebServiceDeployer.internalDeploy(AbstractWebServiceDeployer.java:60)           at org.jboss.deployers.spi.deployer.helpers.AbstractRealDeployer.deploy(AbstractRealDeployer.java:55)           at org.jboss.deployers.plugins.deployers.DeployerWrapper.deploy(DeployerWrapper.java:179)           ... 30 more {code} The WSSecurityConfig can't locate the keystore from the absolute path, but the JaasSecurityDomain however locate it. I've tried another different way putting the Keystore and Trustore inside the WEB-INF folder of WAR, and i've a similar scenario. In this case the WSSecurityConfig locate the Kesytsore/Trustore but the JaasSecurityDomain throw the error "Can't locate resource: WEB-INF/server.keystore". I think i've some Class Loading issue, can you help me to fix it? Thanks for the help. -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/771678#771678] Start a new discussion in JBoss Web Services at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]