My Oracle Support Banner

OWSM issue after OSB upgrade to 12c: WSM-00061 : Signature digest verification failure (Doc ID 2495797.1)

Last updated on MARCH 27, 2020

Applies to:

Oracle Service Bus - Version 12.2.1.3.0 and later
Oracle Web Services Manager - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Symptoms

Proxy service is secured with OWSM security policy (wss11-mutual-auth-with-certificates), from client side - OWSM client policy is used.

In 11g this worked fine, but in 12c on OSB side calls ending with error:

oracle.wsm.security.SecurityException: WSM-00061 : Signature digest verification failure. The system property xml.debug.verify should be enabled for the details about the digest calculations during verification phase (note xml.debug.verify slows down the signature verification for very large messages).
Caused by:-
at oracle.wsm.security.policy.scenario.processor.Wss11MessageSecurityProcessor.verify(Wss11MessageSecurityProcessor.java:229)
at oracle.wsm.security.policy.scenario.processor.Wss11X509TokenProcessor.verifyRequest(Wss11X509TokenProcessor.java:1252)
at oracle.wsm.security.policy.scenario.processor.Wss11X509TokenProcessor.verify(Wss11X509TokenProcessor.java:1109)
at oracle.wsm.security.policy.scenario.processor.Wss11X509TokenProcessor.verify(Wss11X509TokenProcessor.java:1057)
at oracle.wsm.security.policy.scenario.executor.Wss11MutualAuthWithCertsScenarioExecutor.receiveRequest(Wss11MutualAuthWithCertsScenarioExecutor.java:147)
at oracle.wsm.security.policy.scenario.executor.SecurityScenarioExecutor.execute(SecurityScenarioExecutor.java:662)
at oracle.wsm.policyengine.impl.runtime.AssertionExecutor.execute(AssertionExecutor.java:44)
at oracle.wsm.policyengine.impl.runtime.WSPolicyRuntimeExecutor.executeSimpleAssertion(WSPolicyRuntimeExecutor.java:526)
at oracle.wsm.policyengine.impl.runtime.WSPolicyRuntimeExecutor.executeAndAssertion(WSPolicyRuntimeExecutor.java:438)
...

Changes

 Upgrade from 11g to 12c

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.