We are facing issues in external web service call from esb action. Our web service client
works perfectly when we call it from a standalone java program. But it throws
NullPointerException when we try calling it from ESB action. We compared the request being
passed to the service and found out the following.
Signature in the request is being sent as a binary security token, but webservice expects
subject key identifier.
Our standard-jaxws-client-config.xml has 'Standard WSSecurity Client' config(only)
and in our jboss-wsse-client.xml file we have correct configuration() and we are setting
it properly in the client using the following code.
URL securityURL = new File("jboss-wsse-client.xml").toURL();
((StubExt)impService).setSecurityConfig(securityURL.toExternalForm());
We are able to call the service successfully from standalone java app using same client.
But when we try to invoke it from ESB, security token is being set incorrectly.
Request token reference when calling from jboss esb action -
<wsse:SecurityTokenReference
wsu:Id='reference-3-1235384912204-31918910'><wsse:Reference
URI='#token-2-1235384912204-24526361'
ValueType='http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x5...
Request as it should be -
<wsse:SecurityTokenReference
wsu:Id='reference-2-1235384016982-12954112'><wsse:KeyIdentifier
EncodingType='http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss...
ValueType='http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x5...
Server side log -
15:51:04,328 ERROR [HandlerChainExecutor] Exception during handler processing
java.lang.NullPointerException
at
org.jboss.ws.extensions.security.SecurityStore.validateCertificate(SecurityStore.java:501)
at
org.jboss.ws.extensions.security.BinarySecurityTokenValidator.validateToken(BinarySecurityTokenValidator.java:47)
at
org.jboss.ws.extensions.security.element.SecurityHeader.(SecurityHeader.java:78)
at
org.jboss.ws.extensions.security.SecurityDecoder.decode(SecurityDecoder.java:175)
Any pointer would be of great help.
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4216099#...
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...