Re: [SignServer-develop] [Spam] Re: [Spam] Re: Error when work with HSM

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

On 10/23/2015 05:30 PM, Bùi Sĩ Tuấn wrote:
> Hi Markus,
>  
> This error happen when I try to create a XPath Signature.
> Signserver is deployed on JBOSS AS 7.1.1 and Java 7 (32 bits) and I
> fixed XML Security issues before.
>  
> And here is full server log:
>  
> 13:50:35,877 ERROR [org.signserver.ejb.WorkerProcessImpl]
> (http--127.0.0.1-8080-1) SignServerException calling signer with id 14 :
> Signature generation error: org.signserver.common.SignServerException:
> SignServerException calling signer with id 14 : Signature generation error
>  at
> org.signserver.ejb.WorkerProcessImpl.process(WorkerProcessImpl.java:288)
> [SignServer-ejb.jar:]
>  at
> org.signserver.ejb.WorkerProcessImpl.process(WorkerProcessImpl.java:114)
> [SignServer-ejb.jar:]
>  at
> org.signserver.ejb.WorkerSessionBean.process(WorkerSessionBean.java:156)
> [SignServer-ejb.jar:]
>  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> [rt.jar:1.7.0_79]
>  at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> [rt.jar:1.7.0_79]
>  at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> [rt.jar:1.7.0_79]
>  at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_79]
>  at
> org.jboss.as.ee.component.ManagedReferenceMethodInterceptorFactory$ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptorFactory.java:72)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.jpa.interceptor.SBInvocationInterceptor.processInvocation(SBInvocationInterceptor.java:47)
> [jboss-as-jpa-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:21)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:53)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.component.pool.PooledInstanceInterceptor.processInvocation(PooledInstanceInterceptor.java:51)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInCallerTx(CMTTxInterceptor.java:202)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.as.ejb3.tx.CMTTxInterceptor.required(CMTTxInterceptor.java:306) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:190)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processInvocation(AdditionalSetupInterceptor.java:32)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:173)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:72)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.signserver.ejb.interfaces.IWorkerSession$ILocal$$$view23.process(Unknown
> Source) [SignServer-ejb-interfaces.jar:]
>  at org.signserver.clientws.ClientWS.processData(ClientWS.java:94)
> [SignServer-ejb-ClientWS.jar:]
>  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> [rt.jar:1.7.0_79]
>  at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> [rt.jar:1.7.0_79]
>  at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> [rt.jar:1.7.0_79]
>  at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_79]
>  at
> org.jboss.as.ee.component.ManagedReferenceMethodInterceptorFactory$ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptorFactory.java:72)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.jpa.interceptor.SBInvocationInterceptor.processInvocation(SBInvocationInterceptor.java:47)
> [jboss-as-jpa-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:21)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:53)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.component.pool.PooledInstanceInterceptor.processInvocation(PooledInstanceInterceptor.java:51)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInOurTx(CMTTxInterceptor.java:228)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.as.ejb3.tx.CMTTxInterceptor.required(CMTTxInterceptor.java:304) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:190)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processInvocation(AdditionalSetupInterceptor.java:32)
> [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
>  at
> org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165)
> [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
>  at
> org.jboss.as.webservices.invocation.AbstractInvocationHandlerEJB.invoke(AbstractInvocationHandlerEJB.java:112)
>  at
> org.jboss.wsf.stack.cxf.JBossWSInvoker._invokeInternal(JBossWSInvoker.java:181)
>  at org.jboss.wsf.stack.cxf.JBossWSInvoker.invoke(JBossWSInvoker.java:127)
>  at
> org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:58)
>  at
> java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
> [rt.jar:1.7.0_79]
>  at java.util.concurrent.FutureTask.run(FutureTask.java:262)
> [rt.jar:1.7.0_79]
>  at
> org.apache.cxf.workqueue.SynchronousExecutor.execute(SynchronousExecutor.java:37)
>  at
> org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:106)
>  at
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
>  at
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
>  at
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:207)
>  at
> org.jboss.wsf.stack.cxf.RequestHandlerImpl.handleHttpRequest(RequestHandlerImpl.java:91)
>  at
> org.jboss.wsf.stack.cxf.transport.ServletHelper.callRequestHandler(ServletHelper.java:169)
>  at org.jboss.wsf.stack.cxf.CXFServletExt.invoke(CXFServletExt.java:87)
>  at
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:185)
>  at
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:108)
>  at javax.servlet.http.HttpServlet.service(HttpServlet.java:754)
> [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final]
>  at org.jboss.wsf.stack.cxf.CXFServletExt.service(CXFServletExt.java:135)
>  at org.jboss.wsf.spi.deployment.WSFServlet.service(WSFServlet.java:140)
> [jbossws-spi-2.0.3.GA.jar:2.0.3.GA]
>  at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
> [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final]
>  at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329)
>  at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
>  at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275)
>  at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161)
>  at
> org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153)
>  at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155)
>  at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>  at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>  at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368)
>  at
> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877)
>  at
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671)
>  at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930)
>  at java.lang.Thread.run(Thread.java:745) [rt.jar:1.7.0_79]
> Caused by: org.signserver.common.SignServerException: Signature
> generation error
>  at
> com.bkav.signserver.xml.xpathsigner.XpathSigner.processData(XpathSigner.java:225)
> [SignServer-Module-Bkav-XMLSigner.jar:]
>  at
> org.signserver.ejb.WorkerProcessImpl.process(WorkerProcessImpl.java:284)
> [SignServer-ejb.jar:]
>  ... 109 more
> Caused by: javax.xml.crypto.dsig.XMLSignatureException:
> javax.xml.crypto.dsig.TransformException: java.lang.ClassCastException:
> org.apache.xml.dtm.ref.DTMManagerDefault cannot be cast to
> org.apache.xml.dtm.DTMManager
>  at
> org.apache.jcp.xml.dsig.internal.dom.DOMReference.transform(DOMReference.java:561)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.jcp.xml.dsig.internal.dom.DOMReference.digest(DOMReference.java:368)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignature.sign(DOMXMLSignature.java:386)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> com.bkav.signserver.xml.xpathsigner.XpathSigner.processData(XpathSigner.java:188)
> [SignServer-Module-Bkav-XMLSigner.jar:]
>  ... 110 more
> Caused by: javax.xml.crypto.dsig.TransformException:
> java.lang.ClassCastException: org.apache.xml.dtm.ref.DTMManagerDefault
> cannot be cast to org.apache.xml.dtm.DTMManager
>  at
> org.apache.jcp.xml.dsig.internal.dom.ApacheTransform.transformIt(ApacheTransform.java:210)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.jcp.xml.dsig.internal.dom.ApacheTransform.transform(ApacheTransform.java:110)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.jcp.xml.dsig.internal.dom.DOMTransform.transform(DOMTransform.java:147)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.jcp.xml.dsig.internal.dom.DOMReference.transform(DOMReference.java:471)
> [xmlsec-1.5.8.jar:1.5.8]
>  ... 113 more
> Caused by: java.lang.ClassCastException:
> org.apache.xml.dtm.ref.DTMManagerDefault cannot be cast to
> org.apache.xml.dtm.DTMManager
>  at org.apache.xml.dtm.DTMManager.newInstance(DTMManager.java:137)
> [xalan-2.7.2.jar:]
>  at org.apache.xpath.XPathContext.<init>(XPathContext.java:102)
> [xalan-2.7.2.jar:2.7.2]
>  at org.apache.xpath.XPathContext.<init>(XPathContext.java:349)
> [xalan-2.7.2.jar:2.7.2]
>  at org.apache.xpath.XPathContext.<init>(XPathContext.java:337)
> [xalan-2.7.2.jar:2.7.2]
>  at
> org.apache.xml.security.utils.XalanXPathAPI.eval(XalanXPathAPI.java:117)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.xml.security.utils.XalanXPathAPI.selectNodeList(XalanXPathAPI.java:82)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.xml.security.transforms.implementations.TransformXPath2Filter.enginePerformTransform(TransformXPath2Filter.java:117)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.xml.security.transforms.Transform.performTransform(Transform.java:313)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.xml.security.transforms.Transform.performTransform(Transform.java:289)
> [xmlsec-1.5.8.jar:1.5.8]
>  at
> org.apache.jcp.xml.dsig.internal.dom.ApacheTransform.transformIt(ApacheTransform.java:202)
> [xmlsec-1.5.8.jar:1.5.8]
>  ... 116 more
>  
> Best Regard,
>  
> *Bùi Sĩ Tuấn*
>  
> *    CA Tech - Ban HTCA - Bkav Security*
> *Office:  Bkav Building - Yen Hoa New Town, Cau Giay Dist, Hanoi  *
> *Mobile: 0126.620.7292*
> 
> /*____________________________________________*/
> 
> <http://www.bkav.com.vn/>
> 
> /*Do your best, the rest will come !  */
> 

Hi,

Please remember to respond to the mailing list so that everybody can
benefit from the discussion.

The issue seems to be in your custom code XpathSigner.java, so without
that one it is hard to say what the problem could be more than that
there are some transformation or similar being applied.

Regards,
Markus
PrimeKey Solutions