Discussion:
Tomee 8 incompatibility
cocorossello
2018-09-13 14:59:05 UTC
Permalink
Hi,

I noticed in latest tomee 8 an incompatibility between versions used in
wss4j and xmlsec (2.0.6)

The stacktrace is:
java.lang.NoSuchMethodError:
org.apache.xml.security.utils.XMLUtils.encodeToString([B)Ljava/lang/String;
at
org.apache.wss4j.dom.message.token.UsernameToken.addNonce(UsernameToken.java:303)
at
org.apache.wss4j.dom.message.token.UsernameToken.<init>(UsernameToken.java:264)
at
org.apache.wss4j.dom.message.WSSecUsernameToken.prepare(WSSecUsernameToken.java:168)
at
org.apache.wss4j.dom.message.WSSecUsernameToken.build(WSSecUsernameToken.java:225)
at
org.apache.wss4j.dom.action.UsernameTokenAction.execute(UsernameTokenAction.java:69)
at
org.apache.wss4j.dom.handler.WSHandler.doSenderAction(WSHandler.java:238)
at
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor.access$100(WSS4JOutInterceptor.java:57)
at
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessageInternal(WSS4JOutInterceptor.java:275)
at
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:147)
at
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:132)
at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:537)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:446)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:361)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:319)
at
org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
at
org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:140)

The problem is solved upgrading xmlsec to 2.1.2. I will try to open a PR
with this fix



--
Sent from: http://tomee-openejb.979440.n4.nabble.com/TomEE-Users-f979441.html
Jonathan Gallimore
2018-09-13 16:16:01 UTC
Permalink
Thanks for the note. I'll look out for the PR and get that merged for you.

Cheers

Jon
Post by cocorossello
Hi,
I noticed in latest tomee 8 an incompatibility between versions used in
wss4j and xmlsec (2.0.6)
org.apache.xml.security.utils.XMLUtils.encodeToString([B)Ljava/lang/String;
at
org.apache.wss4j.dom.message.token.UsernameToken.addNonce(UsernameToken.java:303)
at
org.apache.wss4j.dom.message.token.UsernameToken.<init>(UsernameToken.java:264)
at
org.apache.wss4j.dom.message.WSSecUsernameToken.prepare(WSSecUsernameToken.java:168)
at
org.apache.wss4j.dom.message.WSSecUsernameToken.build(WSSecUsernameToken.java:225)
at
org.apache.wss4j.dom.action.UsernameTokenAction.execute(UsernameTokenAction.java:69)
at
org.apache.wss4j.dom.handler.WSHandler.doSenderAction(WSHandler.java:238)
at
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor.access$100(WSS4JOutInterceptor.java:57)
at
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessageInternal(WSS4JOutInterceptor.java:275)
at
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:147)
at
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:132)
at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:537)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:446)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:361)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:319)
at
org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
at
org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:140)
The problem is solved upgrading xmlsec to 2.1.2. I will try to open a PR
with this fix
--
http://tomee-openejb.979440.n4.nabble.com/TomEE-Users-f979441.html
cocorossello
2018-09-13 19:01:21 UTC
Permalink
https://github.com/apache/tomee/pull/164



--
Sent from: http://tomee-openejb.979440.n4.nabble.com/TomEE-Users-f979441.html
Jonathan Gallimore
2018-09-14 15:30:14 UTC
Permalink
Many thanks for sending this over - I've merged it in.

Jon
Post by cocorossello
https://github.com/apache/tomee/pull/164
--
http://tomee-openejb.979440.n4.nabble.com/TomEE-Users-f979441.html
Loading...