[JIRA] Updated: (XSTJ-15) XmlSecTool 1.1.5 fails with Unknown error java.lang.StringIndexOutOfBoundsException: String index out of range: -1

[Ian Young (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/XSTJ-15?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ian Young updated XSTJ-15:
--------------------------

    Affects Version/s: 1.1.5

> XmlSecTool 1.1.5 fails with Unknown error java.lang.StringIndexOutOfBoundsException: String index out of range: -1
> ------------------------------------------------------------------------------------------------------------------
>
>                 Key: XSTJ-15
>                 URL: https://issues.shibboleth.net/jira/browse/XSTJ-15
>             Project: XML Security Tool - Java
>          Issue Type: Bug
>    Affects Versions: 1.1.5
>         Environment: Sun Java 1.6.0_24
> CentOS 5
>            Reporter: vladimir.mencl at idp.protectnetwork.org
>            Assignee: Chad La Joie
>
> Hi,
> I've tried verifying an XML signature with XmlSecTool 1.1.5 and it fails with:
> /opt/xmlsectool-1.1.5/xmlsectool.sh --verbose --verifySignature --inFile /var/www/html/metadata/tuakiri-test-metadata-signed.xml --certificate /var/www/html/metadata/tuakiri-test-metadata-cert.pem 
> ...
> DEBUG XmlSecTool - Creating XML security library XMLSignature object
> ERROR XmlSecTool - Unknown error
> java.lang.StringIndexOutOfBoundsException: String index out of range: -1
> 	at java.lang.String.substring(String.java:1937) ~[na:1.6.0_24]
> 	at java.lang.String.substring(String.java:1904) ~[na:1.6.0_24]
> 	at edu.internet2.middleware.security.XmlSecTool.validateSignatureReferenceUri(XmlSecTool.java:623) ~[xmlsectool-1.1.5.jar:na]
> 	at edu.internet2.middleware.security.XmlSecTool.validateSignatureReference(XmlSecTool.java:602) ~[xmlsectool-1.1.5.jar:na]
> 	at edu.internet2.middleware.security.XmlSecTool.verifySignature(XmlSecTool.java:554) ~[xmlsectool-1.1.5.jar:na]
> 	at edu.internet2.middleware.security.XmlSecTool.main(XmlSecTool.java:156) ~[xmlsectool-1.1.5.jar:na]
> This works perfectly fine with XmlSecTool 1.1.1 (which was also used to sign the document).
> The XML document in question, as well as the certificate for verifying the signature, are publicly available at http://directory.test.tuakiri.ac.nz/metadata/
> Any idea what's wrong?  I've just downloaded and unpacked XmlSecTool 1.1.5 on an x86_64 CentOS 5.6 system with Sun Java 1.6.0_24 - and XmlSecTool 1.1.1 (installed in the same way) was working all fine there.
> Please copy replies to vladimir.mencl at canterbury.ac.nz - not sure if my email address got propagated through the ProtectNetwork account I'm using.
> Cheers,
> Vladimir
> -- 
> Vladimir Mencl, Ph.D.
> E-Research Services and Systems Consultant
> BlueFern Computing Services
> University of Canterbury
> Private Bag 4800
> Christchurch 8140
> New Zealand
> http://www.bluefern.canterbury.ac.nz
> mailto:vladimir.mencl at canterbury.ac.nz
> Phone: +64 3 364 3012
> Mobile: +64 21 997 352
> Fax: +64 3 364 3002

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira