Re: [ebxmlms-develop] Signed message debugging

[Patrick Y. <kc...@ce...>]

Signed message debuggingSorry for the unclear log messages. We are now =
trying to make the log messages more informative. But as you can guess, =
that is a tough job. :-)

Meanwhile, I can help to track down the problem here. So, let me ask you =
several questions:

Are you generating your own certificate? Is the certificate self-signed? =
Any certificate path is included in the certificate?
Have you included the root certificate that sign your certificate into a =
trusted store file and point the file by the properties=20
MSH/DigitalSignature/TrustAnchor/KeyStore/* ?



Regards, -Patrick

  ----- Original Message -----=20
  From: Mayne, Peter=20
  To: 'ebx...@li...'=20
  Sent: Tuesday, April 01, 2003 1:16 PM
  Subject: [ebxmlms-develop] Signed message debugging


  I'm sending a signed message to myself using Request.setSign(). =
However, I get the following in the log.=20

  2003-04-01 15:03:27,134 DEBUG [Thread-12]: =3D> MessageServiceHandler =
verify=20
  2003-04-01 15:03:27,134 INFO  [Thread-12]: Verify the XML signature=20
  2003-04-01 15:03:27,575 INFO  [Thread-12]: Received SOAPMessage cannot =
be verified!=20
  2003-04-01 15:03:27,575 DEBUG [Thread-12]: <=3D MessageServiceHandler =
verify=20
  2003-04-01 15:03:27,575 WARN  [Thread-12]: Signature verification =
failed=20

  There doesn't seem to be any indication of why the message couldn't be =
verified.=20

  Is there a straightforward method of debugging verification failures =
to figure out what's going wrong?=20

  Thanks.=20

  PJDM=20
  --=20
  Peter Mayne=20
  Technology Consultant=20
  Spherion Technology Solutions=20
  Level 1, 243 Northbourne Avenue, Lyneham, ACT, 2602=20
  T: 61 2 62689727  F: 61 2 62689777=20

The information contained in this email and any attachments to it:

(a) may be confidential and if you are not the intended recipient, any =
interference with,=20
use, disclosure or copying of this material is unauthorised and =
prohibited; and

(b) may contain personal information of the recipient and/or the sender =
as defined=20
under the Privacy Act 1988 (Cth). Consent is hereby given by the =
recipient(s) to=20
collect, hold and use such information and any personal information =
contained in a=20
response to this email, for any reasonable purpose in the ordinary =
course of=20
Spherion's=20
business, including forwarding this email internally or disclosing it to =
a third party. All=20
personal information collected by Spherion will be handled in accordance =
with=20
Spherion's Privacy Policy. If you have received this email in error, =
please notify the=20
sender and delete it.

(c) you agree not to employ or arrange employment for any candidate(s) =
supplied in=20
this email and any attachments without first entering into a contractual =
agreement with=20
Spherion. You further agree not to divulge any information contained in =
this document=20
to any person(s) or entities without the express permission of Spherion.