Failure in signing Data

Hi all,
I have a problem in a scenario where I have to generate a signature for a part of the xml data of a message. This signature has to be moved to a special tag within the document. Therefore I created a Java Mapping where I access the keystore of the J2EE Engine and generate the signature.
Part of the Implementation:
InitialContext context = new InitialContext(env);
manager = (KeystoreManager) context.lookup("keystore");
KeyStore keyStore = null;
keyStore = manager.getKeystore("DEFAULT");
SsfProfileKeyStore profile = null;
profile = new SsfProfileKeyStore(keyStore, alias, null);
PrivateKey key = profile.getPrivateKey();
Signature sig = Signature.getInstance("RSA");
sig.initSign(key);
sig.update(data);
signature = sig.sign();
When I create the InitialContext over remote and run it within the Developer Studio for example with file streams it works fine. But after import to the Integration Builder integration into an interface mapping, I get an Exception with this error:
javax.crypto.BadPaddingException: PKCS#1 requires data at least 11 bytes shorter than the modulus!
When I write the format of the key to the trace it is PKCS#8, as it should be.
Do someone has an idea where the runtime thinks it should handle the signature with PKCS#1?
Thanks
Regards
Olli

Hi Oliver,
Did you get solution to this problem. Please let me know if you have the solution. Thx

Similar Messages

'Error while signing data-Private key or certificate of signer not availabl

Hello All,
In my message mapping I need to call a web service to which I need to send a field value consist of SIGNED DATA.
I am using SAP SSF API to read the certificate stored in NWA and Signing the Data as explained in
http://help.sap.com/saphelp_nw04/helpdata/en/a4/d0201854fb6a4cb9545892b49d4851/frameset.htm,
when I have tested using Test tab of message mapping it is working fine and I am able to access the certificate Keystore of NWA(we have created a keystore view and keystore entry to store the certificate) and generate the signed data ,but when I test end to end scenario from ECC system,it is getting failed in mapping with the error
' Error while signing data - Private key or certificate of signer not availableu2019.
Appreciate your expert help to resolve this issue urgently please.
Regards,
Shivkumar

Hi Shivkuar,
Could you please let me know how you were trying to achieve the XML signature.
We have a requirement where we have to sign the XML document and need to generate the target document as following structure.
<Signature>
     <SignedInfo>
         <CanonicalizationMethod />
         <SignatureMethod />
         <Reference>
                 <Transforms>
                 <DigestMethod>
                 <DigestValue>
         </Reference>
    <Reference /> etc.
</SignedInfo>
<SignatureValue />
<KeyInfo />
<Object>ACTUAL PAYLOAD</Object>
</Signature>
I am analyzing the possibility of using the approach that is given in the help sap link that you have posted above. Any inputs will be apprecited.
Thanks and Regards,
Sami.

Error while signing data-Private key or certificate of signer not available

Hello All,
I am new to PI. I am currently stuck with an issue. The scenario is as explained below.
We need to check for the service availability before processing the data. So, we test for the RFC connection first from the ECC system. During this process, we access the digital certificate stored in the PI system so that it can be validated and allowed to consume this intended service.
Error :
When we trigger the RFC test from the ECC system, we get an error stating ' Error while signing data - Private key or certificate of signer not available '. But when we test the same functionality within PI system(Locally), we does not encounter any such error. The certificate is maintained and it appears fine.
The communication channels are stored with logon credentials.
Can anyone please help me with this error or provide your valuable inputs. Thanks in advance.
Regards,
Shivkumar

Hello,
When we trigger the RFC test from the ECC system, we get an error stating ' Error while signing data - Private key or certificate of signer not available '.
This should be normal behavior since the certificates are not installed in ECC SSL folders of Strust. Why not just install the certificates in the ECC system, perform an ICM restart and do a retest? After all, the certificates would both be the same in PI and ECC.
Hope this helps,
Mark

Contract Sign Date from VBAK and VBAP and VEDA.

Hi ,
I need to fetch the Sales Document from VBAK and VBAP and VEDA with the contract sign date for sales document line item .
Contract sign date is in selection screen as select options.
Please let me know how to fetch the sales Document per line item from these 3 tables considering that A sales document could have many line items and each can have a different sign date.
Thanks
Sachin

Hi,
The link between all the tables VBAK, VBAP and VEDA is VBELN i.e sales document number.
However, while fetching from VBAP and VEDA you would need to consider POSNR as well.
As your ABAPer to code the logic using 'for all entries' method.
Regards,
Amit
Edited by: Amit Iyer on Jun 23, 2011 12:28 PM

Instance failure, in System.Data in sql 2012

On Win Server 2012 Standard I have a C# app that runs fine with sql 2008 express. When I installed sql 2012 express I get "instance Failure" source: System.data. when the following LYNQ query executes:
//MessageBox.Show("Starting GetInitialPortStatus.");
db =new
DataClasses1DataContext();   //establish
dataconnection to CALMasterSQL
// 2. Query creation.
var PortsQuery =from
portrecord in db.Channels
select portrecord;
// 3. Query execution.
int count = 0;
// MessageBox.Show("Starting >portrecord in PortsQuery<.");
foreach (var
portrecord in PortsQuery)
// add rows to the grid for each record in the database Ports table
Otherwise the app works fine. The closet fix in the forum I could find was to run
exec sp_configure 'user instances enabled',
1.
Go
Reconfigure
Which I did but no change.
How can this be corrected. It seems like it is a known issue but no fix for sql 2012?
Thanks
Morris
Thank you Morris

Thanks for your reply.
The connection string is:
<add name="CMMainWindow.Properties.Settings.CALLMASTERConnectionString"
            connectionString="Data Source=HLA2012\\SQL2012EXP;Initial Catalog=CALLMasterSQL;Integrated Security=True;Connect Timeout=5"
            providerName="System.Data.SqlClient" />
The SQl instance is call "SQL2012EXP". There is also SQL 2008 Express on the same machine called SQLExpress.
Both engines work fine in every other way.
Thanks
Morris
Thank you Morris
Hi MoCoder,
According to your description, if it contains a double-slash between the server name and the database instance name in your connection string, it should be localhost\SQLEXPRESS. There is a similar issue about instance failure when connecting to SQL Server
Express in C# application. You can review the following article.
http://www.hanselman.com/blog/FixingInstanceFailureWhenConnectingToSQLServer2005Express.aspx
In addition, Make sure your SQL Server instance(MSSQLSERVER) is running via the services management console.
Thanks,
Sofiya Li
If you have any feedback on our support, please click here.
Sofiya Li
TechNet Community Support

Failure to retrieve data from the database (Vendor Code 6550)

I am having a trouble with two of the 6 reports that I have created. I am using Crystal XI and Oracle 10g. The underlying database object is a stored procedure that accepts as input a start time as a TIMESTAMP, an end time as a TIMESTAMP and a furnace number as a number. I have a cursor ref as a return parameter.
When I run the stored procedure in Oracle I get the selected records and can view them on the screen.
When I refresh data on the report in Crystal XI developer, the designer asks me for the start and end time and furnace number. When I input these values the report displays properly.
When I launch the report from my VB .NET 2005 application I am asked for the username and the password for the database (this is another problem I need to solve as this information I put into the program seems to be ignored in my program) then I receive the following failure message:
Failure to retrieve data from the database (Vendor Code 6550)
When I launch the other reports, they only ask me for the username and password then they display the proper data.
The main difference between my other reports and the two that are returning the above failure code is that the other reports are to either tables or views. The two that don't work are tied to stored procedures. I there any way that I can solve this problem or at least get more information?
Any help would be greatly appreciated. Let me know if you need any other information.

I have a similar problem, the only difference is that the crystal report error is only thrown when I try to load the sub reports at my web application. When I deploy my report to the Web application the main report loads up fine but when I try to launch the sub reports from the main report it can no longer load.
But when I use the Crystal report developer I am able to load the main report and it's associated sub reports without any issues.
My issue only occurs when I try to load the sub report in the web application. The following sections shows how my reports look like both in my .NET web application and also at the Crystal Report Development IDE.
Failure: Loading my Reports from .NET Web Application
1) When I load from the web application I am able to load the main report as per the print screen below.
2) When I try to click on the hyper links to enter the sub reports I am now able to load them, both sub reports cannot load and will throw the same error "
Failed to retrieve data from the database. Details: [Database Vendor Code:
6550 ] Failed to retrieve data from the database. Details: [Database Vendor
Code: 6550 ] Failed to retrieve data from the database. Error in File OAWR3011A
{CEC8A94A-4490-4640-95FB-2739A679978B}.rpt: Failed to retrieve data from the
database. Details: [Database Vendor Code: 6550 ] "
Success: Loading my Reports from Crystal Report Development Tool
1) This is my Main Report Loaded from the Crystal Report Development Tool, the first two hyperlinked fields are links to my sub reports, step number 2 and number 3 shows my sub reports when I load it using Crystal Report Developer
2) Sub Report 1 Loaded Successfully, when I click on the fields in the first link
3) Sub Report 2 loaded successfully when I click the second field hyper link

Contract sign date field hide at header level

Hi,
My client want to disable contract sign date at header level only not at item level in the contract.I tried transanction variant but it is disabling both side header as well as item level.Kindly suggest me.User should only give input at item level only.

So are we... The BAPI BAPI_CONTRACT_CREATE has the following importing parameters:
HEADER     TYPE     BAPIMEOUTHEADER
HEADERX     TYPE     BAPIMEOUTHEADERX
VENDOR_ADDRESS     TYPE     BAPIMEOUTADDRVENDOR
TESTRUN     TYPE     BAPIFLAG-BAPIFLAG
TECHNICAL_DATA     TYPE     BAPIMEOUTTECH
Change the HEADER and HEADERX parameters as I have indicated in my first post.
Regards,
John.

SCEP: failed to open signed data

Hi,
I am trying to create a solution what would consist the following:
Avaya hard phones would vpn into the corporate network. Vpn authentication would be based on certificates. As I getting into the
implementation I found out that one of the key points of the solution is to using SCEP to enroll the certificates from CA server to the avaya
hardphones. And here comes my trouble: I would like to use a cisco router as a CA server for this solution but when the phones try to enroll the
certificate I got this error on the router:
Sep 23 13:36:16.935: CRYPTO_CS: received a SCEP GetCACert request
Sep 23 13:36:16.939: CRYPTO_CS: CA certificate sent
Sep 23 13:36:19.515: CRYPTO_CS: received a SCEP request, 2263 bytes
Sep 23 13:36:19.519: CRYPTO_CS: read SCEP: registered and bound service SCEP_READ_DB_2
Sep 23 13:36:19.519: CRYPTO_CS: failed to open signed data
Sep 23 13:36:19.519: CRYPTO_CS: read SCEP: unregistered and unbound service SCEP_READ_DB_2
Sep 23 13:36:19.519: CRYPTO_CS: failed to read SCEP request
I enabled the following debug options:
PKI:
Crypto PKI Msg debugging is on
Crypto PKI Trans debugging is on
Crypto PKI Certificate Server debugging is on
Crypto PKI Validation Path debugging is on
Cisco router is a cisco 2811 router with the following IOS:
Cisco IOS Software, 2800 Software (C2800NM-IPBASEK9-M), Version 15.1(4)M6, RELEASE SOFTWARE (fc2)
Thanks,
Andras

Verma,
How many datafiles you have on that tablespace. If you have more then 1 then you can drop this datafile from the database. "alter tablespace <tablespace_name> drop datafile '<datafile path>';
Anil

IDOC FAILURE while sending data from ZEB_HCm systen to ZRA-EREC SYS

Hi
Experts
I am having idoc failure while sending data from HCM SYSTEM to EREC systems.
From that Data records i found the failure recored containing PERNR.
and from status record the
ERROE IS : No status information available for object CANDIDATE
Message no. HRRCF0001073
usually i used to run PFAL for these king of issues , when i tried to run PFAL for the PERNR it is giving the same errroe,
So pls suggest how to send the data to resiolve this .
Regards
Suresh

Hi Nitin,
The IDOC when came in Erec system is in error status ( 51).
When i saw the data records, only pernr were mentioned.
Then i send the idoc thru PFAL again by sending all information as O-C-S-P.
Still it is giving me the same error.

How to decode signed data asn.1 format using c programming

Hi,
I need help decoding a chunk of signed data in asn.1 format using c programming. Does anyone know how to break the signed data down into its parts (for example, version number = _, ...) through a C program ? I realised there's a Signeddata class in java that has methods to decode asn1. But how abt for C programming?

Hellow Abinaya,
I have been trying so hard to contact you regarding the elevator simulation you have done in the past.
I have to do the same and I have done everything and works except my elevator cannot stop at levels and my code is very similar to yours.
I was wondering if you could help me out and let me know how I can actually contact you by email?
I really really appreciate if you can help me as I am an student as well.
Thanks
John
[email protected]

Hard drive failure - options for data recovery and AppleCare coverage

I have been handed a relative's 12 month old MacBook Pro with a factory-installed 500GB hard drive which appears to have failed. When attempting to boot the MacBook I am met with the classic clicking and grating noise which I know is a tell-tale sign of hard drive failure. The drive will not boot and I am shown the question mark folder icon, indicating that the operating system cannot be found. Have booted into internet recovery mode, Disk Utility appears to have found no sign of the hard drive's existence and shows none of its partitions. I have attempted putting the MacBook into FW target-mode and mounting the disk from another laptop, but to no avail; while it will go into target mode the drive simply isn't visible. The SATA connection to the drive is definitely OK - I have tested with another 2.5 inch hard drive which showed up fine in Disk Utility and was bootable. Have run Apple Hardware Test/Diagnostics but this returned no errors. It seems like a pretty clear cut case of drive failure.
I put this all to the relative whose laptop this is and asked them whether the MacBook had been dropped recently, explaining to them that this is one of the likeliest causes for such sudden failure. Sheepishly they admitted that they had indeed dropped it, although not from too great a distance and onto a carpeted floor. Apparently in the days immediately after the shock the hard drive continued to boot but the system was very slow and beset by spinning beech ball hangups. It is only in the last few days that the hard drive has become completely unbootable, and seemingly unreachable.
I have two questions that I would be grateful for some help with.
Firstly, is there any possibility of recovering data from this drive without going to a data recovery specialist? The user did have backups of most important data, but some recently imported photos were not backed up. Is it any use me trying any third-party data recovery software utilities, bearing in mind that I can't even mount the drive in target mode?
Second, the MacBook is still covered by the extended AppleCare warranty for the next two years. Is it worth my relative's while making a Genius Bar appointment to see whether Apple would replace this drive for free, given that the damage was most likely user-inflicted? Is there any chance that this sudden failure could be unrelated to the drop the MacBook suffered the other day - perhaps just a result of the 'normal' failure rate? I am more than happy to exchange the drive for a new one myself and my relative is happy to pay for the new part (I was amazed at how cheap hard drives are now), but would we be better off trying an Apple Store? My prediction would be that while we might get lucky and have an obliging genius who agrees to swap the drive without asking too many questions, we could also have one who concludes the damage is not covered by the warranty and insists on charging for the new hard drive (at a mark-up I assume) and labour.
Any thoughts about these two issues or the hard drive failure more generally are very welcome. Thanks.

1, Data recovery software is your only alternative if there is no backup. It may or may not be able to revoker anything from that hard drive. If it does then the only other choice is to go to a data recovery service. If have to go that route expect to pay for it, like $$$$.
2, Yes. They will at least tell him what the problem is and the cost if any to fix. There is a good chance they will fix it for nothing and only charge for data recovery if they can do it.

How to insert sign date "now()" in database ?????

I am a newbie. Using DW CS5 I have been able to get a number of web pages on my web site to work well. My problem is with my “sign in form”. I want to add in the sign in form a hidden field for the date that the user signs up.
But the signup_date value in the database is not been entered. I do have a “work around”. If I replace the last “%s” in the $insertSQL statement with NOW(), the correct signup_date is entered in the database table “users”. However, I want to learn to do it “right”. My questions:
1.      What is the “best” way to accomplish my desire results?
2.      What do the “%s” stand for in the $insertSQL statement? I think it is an array, but I do not understand this line of code that DW generated. Can you explain is plain English?
Below is the important part of the code (I hope I sent enough to explain the problem) for the sign form: (disregard the /////// they are only there to indicate different sections of the code).
//This is the code from the input form for the hidden field "signup_date"
</tr>
    <tr>
      <td align="left" valign="top"><input name="signup_date" type="hidden" id="signup_date" value="NOW()" />
      <td><input type="submit" name="Submit" value="Join Now!"></td>
    </tr>
</table>
//This is the dreamweaver code to insert the date into the data base:
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "frJoin")) {
$insertSQL = sprintf("INSERT INTO users (first_name, last_name, email_address, username, info, user_level, signup_date) VALUES (%s, %s, %s, %s, %s, %s, %s)",
                       GetSQLValueString($_POST['first_name'], "text"),
                       GetSQLValueString($_POST['last_name'], "text"),
                       GetSQLValueString($_POST['email_address'], "text"),
                       GetSQLValueString($_POST['username'], "text"),
                       GetSQLValueString($_POST['info'], "text"),
                       GetSQLValueString($_POST['user_level'], "text"),
                       GetSQLValueString($_POST['signup_date'], "date"));
Thanks !!

I do have a “work around”. If I replace the last “%s” in the $insertSQL statement with NOW(), the correct signup_date is entered in the database table “users”. However, I want to learn to do it “right”.
Your "workaround" is actually the correct method. The way that you think is "right", by entering the date into a hidden field, is actually the wrong way. Hidden fields can be manipulated. Inserting data directly into the query is the desired method, like the method you are currently using. It's not a "workaround", it's the correct method. You hidden field is not working because you have not told the page that the NOW() in the hidden field should be processed through php. NOW() is MySQL function. Use php to echo current date in hidden field if you want to use the "wrong" method of processing the date into your query.
<td align="left" valign="top"><input name="signup_date" type="hidden" id="signup_date" value="<?php echo date("Y-m-d H:i:s"); ?>" />

XI mail sender adapter and SMIME (signed data)

I have a scenario where multiple external parties send signed and encrypted e-mail messages to a single e-mail account, which should be emptied by an XI mail adapter. This works fine when receiving mails from only one party - simply load the party's certificate in the KeyStore and set the relevant references in the sender agreement. The problem is that the sender agreement must point to exactly one KeyStore entry, so there is no way to verify the signature of mails received from the second party. I have also tried creating two sender agreements: one for each party pointing to their respective KeyStore entries. Although XI allows me to reference the same sender mail communication channel from both sender agreements, it seems to simply use the sender agreement that was last saved.
Does anyone know how to get this kind of scenario to work?
Regards,
Thorsten

Hi,
Am trying the same scenario as you did.
Can you guide me step by step how to read , validate and extract data from attachment.
Am stucked in reading the attachment now.
I can able to get mail but not attachment.
Can you tell the steps that you did.
Thanks in advance,
Sakthi

String data to Sign data

I am using a device where I receive a string data output which has a meaning.
For example:
:000000 -0067U 0004 -0578
:000000 -0067U 0004 -0578
:000000 -0066U 0004 -0579
:000000 -0066U 0003 -0579
:000000 -0066U 0003 -0580
I need to extract the 9th and 11th character through a string subset.
I have a question, please the attached VI:
1. Is it correct extraction method? any other suggestion?
2. The 9th character actually is the sign of character 11 i.e +(if space) and - (is shown as minus)
Then I have to take this number for e.g -5 or +5 then use in another calculation but problem is how can I convert the _ and + from string to the number? then how can I make the 9th and 11th character as one number.
Attachments:
string.vi ‏14 KB

Maybe the last part can be simplified. Please see the image.
I modified your input a little bit since your data only contained "minus". I changed row 2 to have a "space" which should be interpreted as positive sign. Moreover, row 4 shows a explicit "plus" sign in the ninth position. Note that both space and plus are correctly interpreted as positive.
Consider sanitizing the input. The 0th-row with "-0587" does not follow the syntax of all the other rows so it should be removed.
Regards,
Attachments:
Solution.PNG ‏24 KB

Problem signing data

Hi,
I have the following code snippet. The signing of a 256 byte(2048 bit input stream) fails. The exception that I catch is ILLEGAL USE. I am just straight away passing the input stream for signing without any preprocessing of the i/p steam.
However, the signing fails. Anybody, who is familiar with this problem please help.
The code:
try{
          privKey = (RSAPrivateKey) KeyBuilder.buildKey(KeyBuilder.TYPE_RSA_PRIVATE, keySize, false);
     privKey.setExponent(privExponent, (short)0, (short)256);
     privKey.setModulus(privModulus, (short)0, (short)256);
     catch(CryptoException e){
if (e.getReason() == CryptoException.NO_SUCH_ALGORITHM)
ISOException.throwIt(ALGO_ERROR);
          else
if (e.getReason() == CryptoException.ILLEGAL_VALUE)
ISOException.throwIt(ILL_VAL);
          else
ISOException.throwIt(KEYGEN_FAILED);
     try{
     signature = Signature.getInstance(Signature.ALG_RSA_SHA_PKCS1, false);
          signature.init(privKey, Signature.MODE_SIGN);
          }catch(CryptoException e)
               ISOException.throwIt(SIGNINIT_ERROR);
     try{
          outputlen = signature.sign(buf, (short) 0, (short)length, outbuf, (short) 0);
          }catch(CryptoException e)
          if (e.getReason() == CryptoException.UNINITIALIZED_KEY)
ISOException.throwIt(ALGO_ERROR);
          else
if (e.getReason() == CryptoException.ILLEGAL_USE)
ISOException.throwIt(ILL_VAL);
          else
ISOException.throwIt(SIGNATURE_FAILED);
          }

Sorry, my previous post was a little inaccurate. The limitation is on RSA encryption. For a signature, your data is hashed (using SHA1 in this instance) and this hash is then encrypted with the private key.
What happens if you try to sign a few bytes (say 8)? Your code looks fine to me. I have tried something similar myself and it works. I use CRT keys as my card does not support non-crt private keys (that could even be part of the problem but I would expect the key building to fail then). You can try checking the key is initialised first (privKey.isInitialized())?
package oracle.forum;
import javacard.framework.APDU;
import javacard.framework.Applet;
import javacard.framework.ISO7816;
import javacard.framework.ISOException;
import javacard.security.KeyBuilder;
import javacard.security.KeyPair;
import javacard.security.Signature;
* @author sfarmer
public class Dummy extends Applet {
     public final static boolean ECHO = true;
     private Signature sig;
     private KeyPair keys;
     public Dummy() {
          sig = Signature.getInstance(Signature.ALG_RSA_SHA_PKCS1, false);
          keys = new KeyPair(KeyPair.ALG_RSA_CRT, KeyBuilder.LENGTH_RSA_2048);
          keys.genKeyPair();
     public static void install(byte[] bArray, short bOffset, byte bLength) {
          // GP-compliant JavaCard applet registration
          new oracle.forum.Dummy().register(bArray, (short) (bOffset + 1),
                    bArray[bOffset]);
     public void process(APDU apdu) {
          // Good practice: Return 9000 on SELECT
          if (selectingApplet()) {
               return;
          short lc = apdu.setIncomingAndReceive();
          byte[] buf = apdu.getBuffer();
          switch (buf[ISO7816.OFFSET_INS]) {
          case (byte) 0x00:
               sig.init(keys.getPrivate(), Signature.MODE_SIGN);
               short len = sig.sign(buf, ISO7816.OFFSET_CDATA, lc, buf, (short) 0);
               apdu.setOutgoingAndSend((short) 0, len);
               break;
          default:
               // good practice: If you don't know the INStruction, say so:
               ISOException.throwIt(ISO7816.SW_INS_NOT_SUPPORTED);
}Cheers,
Shane

Failure in signing Data

Similar Messages

Maybe you are looking for