IC69474: USE OF WS-I COMPLIANCE POLICY ON WEB SERVICE PROXY CAUSES SIGNATURE VERIFICATION FAILURE ON SIGNED RESPONSE

APAR status

• Closed as program error.

Error description

• Web Service Proxy was returning a signed response to a client
  which failed signature verification due to "digest mismatch".
  
  When the WS-I Compliance policy was removed, the signature
  verification failure does not occur.
  
  WS-I Compliance policy is altering the response after it is
  signed.
  

Local fix

• Omit use of WS-I Compliance policy if feasible
  

Problem summary

• Conformance check, when invoked as the last operation in a rule,
  can modify the message formatting, invalidating signatures in
  the message.
  

Problem conclusion

• Fix the conformance stylesheets to preserve the original
  formatting during serialization.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R372 PSY

     UP

• R373 PSY

     UP

• R380 PSY

     UP

• R381 PSY

     UP