HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: String index out of range: -7

Question

All -
I'm new to consuming web services in JDeveloper. I'm using Oracle JDEV 10.1.3.3/OC4J.  I'm using this version since it is compatible with Oracle EBS 12.1.3.  My intent is to pull data from our third party recruitment app (Success Factors) and load that data into Oracle HRIS.  I'm already doing this through a .NET application.  I'm converting it to be a Java Concurrent Program in EBS.  The code listed below is a stub call to verify I'm on the right track. I created a JDeveloper Web Services proxy project.  I'm testing it locally on my windows desktop.  When I'm able to consume the service successfully, then I'll think about moving it to the EBS server.
I'm getting the following error when I invoke the following service:
HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: String index out of range: -7
End point is: https://api4.successfactors.com/sfapi/v1/soap?wsdl
Any help/assistance would be much appreciated. 
Below is my code and output of my test:
package emsc.oracle.apps.emscper.sfapi.proxy;
import HTTPClient.HTTPConnection;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.IsValidSession;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.IsValidSessionResponse;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.Login;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.LoginResponse;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.LoginResult;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.Logout;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.LogoutResponse;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.SFCredential;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.SFParameter;
import emsc.oracle.apps.emscper.sfapi.proxy.types.sfobject_sfapi_successfactors_com.Error;
import java.io.File;
import javax.xml.rpc.ServiceFactory;
import java.util.ArrayList;
import java.util.List;
import java.util.Date;
import javax.xml.ws.BindingProvider;
import javax.xml.soap.SOAPException;
import java.util.Map;
import oracle.security.ssl.OracleSSLCredential;
public class SFAPITest {
    // Declare members:      
    private String companyId;
    private String userName;
    private String password;
    private String developerKey;
    private Date   effDt;
    private String greaterThanEffDt;
    private String lessThanEffDt;
    // Declare constants:      
    final static private String breakLine = "+---------------------------------------------------------------------------+";
    final static private String format    = "yyyy-mm-dd";      
    private enum ReqId {
        PrimaryReq(25),
        PrimaryReqCEO(26),
        EmCarePrimary(27),
        RTI(28),
        EmCareClinical(29);
        private int reqId; 
        private ReqId() {
        private ReqId(int value) {
            reqId = value;
        public int getReqId() {
            return reqId;
    // Getters and Setters:  
    protected String getCompanyId() {
       return this.companyId;
    protected void setCompanyId(String value) {
       this.companyId = value;                 
    protected String getUserName() {
       return this.userName;
    protected void setUserName(String value) {
       this.userName = value;                 
    protected String getPassword() {
       return this.password;
    protected void setPassword(String value) {
       this.password = value;                 
    protected String getDeveloperKey() {
       return this.developerKey;
    protected void setDeveloperKey(String value) {
       this.developerKey = value;                 
    protected Date getEffDt() {
        return this.effDt;
    protected void setEffDt(Date value) {
        this.effDt = value;                 
    protected String getGreaterThanEffDt() {
       return this.greaterThanEffDt;
    protected void setGreaterThanEffDt(String value) {
       this.greaterThanEffDt = value;                 
    protected String getLessThanEffDt() {
       return this.lessThanEffDt;
    protected void setLessThanEffDt(String value) {
       this.lessThanEffDt = value;                 
    public void runProgram()
        SFAPIService mySFAPIService;
        String CompletionText = "";
        String effDtStr2 = null;
    /* Code your program logic here.
    * Use getJDBCConnection method to get the connection object for any
    * JDBC operations.
    * Use CpContext provided commit,rollback methods to commit/rollback
    * data base transactions.
    * Don't forget to release the connection before returning from this
    * method.
    /* Call setCompletion method to set the request completion status and
    * completion text.
    * Status values are ReqCompletion.NORMAL,ReqCompletion.WARNING,
    * ReqCompletion.ERROR.
    * Use Completion text message of length 240 characters. If it is more
    * than 240 then full string will appear in log file and truncated 240
    * characters will be used as request completion text.
    try
        ServiceFactory factory = ServiceFactory.newInstance();
        mySFAPIService = (emsc.oracle.apps.emscper.sfapi.proxy.SFAPIService)factory.loadService(emsc.oracle.apps.emscper.sfapi.proxy.SFAPIService.class);      
        SFAPI api = mySFAPIService.getSFAPI();
       /// SFAPI api = new SFAPI();
        //Map<String, Object> requestContext = ((BindingProvider) api).getRequestContext();
        //requestContext.put(BindingProvider.SESSION_MAINTAIN_PROPERTY, true);
        System.out.println("ServiceName => " + mySFAPIService.getServiceName().toString());
        System.out.println("End Point   => " + mySFAPIService.getServiceName().toString());
        System.out.println(breakLine);
        // Authentication: Login to SFAPI:
        SFCredential credential = new SFCredential();
        // Fake credentials being passed in for this post:   
        credential.setCompanyId("XXX");
        credential.setUsername("XXX");
        credential.setPassword("XXX");
        credential.setDeveloperKey("XXX");
        HTTPConnection httpsConnection = null;       
        OracleSSLCredential _credential = new OracleSSLCredential();      
        _credential.setWallet("\\\\\\C:\\Program Files\\Java\\jdk1.6.0_33\\jre\\lib\\security", "ParkEstes3");
        /*System.setProperty("javax.net.ssl.trustStore","C:\\\\\OraHome_1\\jdev\\jdevbin\\jdk\\jre\\lib\\security\\keystore");
        System.setProperty("javax.net.ssl.trustStorePassword","changeit");  
        System.out.println(System.getProperty("javax.net.ssl.trustStore"));*/
        // SFParameter: Define a generic SFParameter List.  This is a necessary parameter
        // to invoking calls in SFAPI:      
         /*System.setProperty("javax.net.ssl.keyStore",
         "file:\\\C:\\jdk1.4.1\\jre\\lib\\security\\client.keystore");
         System.setProperty("javax.net.ssl.keyStorePassword","welcome");         */
        /*  System.setProperty("oracle.net.wallet_location",
                      "(SOURCE=(METHOD=file)(METHOD_DATA=(DIRECTORY=\\\C:\Users\dparrish\Oracle\WALLETS)))");  // (2)                     */
        File kstore = new File("C:\\OraHome_1\\jdev\\jdevbin\\jdk\\jre\\lib\\security\\jssecacerts");
        boolean exists = kstore.exists();
        if (!exists) {
            System.out.println("Keystore does not exist");
        else {
            System.out.println("Keystore does exist");
        System.setProperty("javax.net.ssl.trustStore", kstore.getAbsolutePath());
        System.setProperty("javax.net.ssl.trustStorePassword", "changeit");
        //System.setProperty("proxySet", "false");
        //System.setProperty("http.proxyHost", "127.0.0.1");
        //System.setProperty("http.proxyPort", "8080");
        System.out.println(kstore.getAbsolutePath());
        List<SFParameter> lst = new ArrayList<SFParameter>();
        SFParameter param = new SFParameter();
        param.setName("");
        param.setValue("");
        lst.add(param);      
        SFParameter[] sfParam = lst.toArray(new SFParameter[lst.size()]);
        Login login = new Login();
        try {
            login.setCredential(credential);
            System.out.println("1");
            login.setParam(sfParam);
            System.out.println("2");
            LoginResponse loginResponse = new  LoginResponse();
            LoginResult loginResult = new LoginResult();
            try {
                 loginResponse = api.login(login);               
            catch (Exception e ) {
                System.out.println(e.getMessage());
            System.out.println("3");
            try {               
                 loginResult = loginResponse.getResult();
            catch (Exception e ) {
                System.out.println(e.getMessage());
            System.out.println("4");
            IsValidSession vs = new IsValidSession();                  
            IsValidSessionResponse isValidSessionResponse = api.isValidSession(vs);
            System.out.println("5");
            if (isValidSessionResponse.isResult()) {
                 System.out.println("Session is valid");
                 System.out.println("Result => " + loginResult.getSessionId());
                 System.out.println(breakLine);              
                Logout logout = new Logout();
                LogoutResponse logoutResponse = api.logout(logout);
                if (logoutResponse.isResult()) {
                     System.out.println("Logout of SFAPI Successful");
                else {
                    System.out.println("Logout of SFAPI Unsuccessful");
            else {
                 System.out.println("Session is invalid");
                List<Error> errors = new ArrayList<Error>();
                for (int i = 0; i < loginResult.getError().length;  i++) {
                    errors.add(loginResult.getError()[i]);
                for (int i = 0; i < errors.size(); i++) {
                     System.out.println("Error Indice   => " + i);
                     System.out.println("Error Code:    => " + errors.get(i).getErrorCode());
                     System.out.println("Error Message: => " + errors.get(i).getErrorMessage());
                     System.out.println(breakLine);                                                          
                } // end for loop of SFObject errors
            } // end InvalidSession
        catch (Exception e)
             System.out.println("Session Credential Exception");
             System.out.println("Exception => " + e.getMessage());
             System.out.println(breakLine);                   
    catch (Exception e)
        System.out.println("Parameter List Exception");
        System.out.println("Exception => " + e.getMessage());
        System.out.println(breakLine);
    }   // end runProgram
    // Constructor:
    public SFAPITest()  {
    } // end constructor
    public static void main (String args[]) {
        try
            SFAPITest test = new SFAPITest();        
            test.runProgram();
        catch (Exception e) {
            System.out.println("main exception => " + e.getMessage());
} // SFAPITest
Here is the output with trace:
WARNING: Unable to connect to URL: https://api4.successfactors.com:443/sfapi/v1/soap due to java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: String index out of range: -7
Session Credential Exception
Exception => ; nested exception is:
    HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: String index out of range: -7
+---------------------------------------------------------------------------+
Process exited with exit code 0.

Answer 1

The other end is throwing back a programming error.
That might be because you are sending incorrect data and the other end fails to validate it.
You might be able to guess based on your C# code.  But, since you are using soap one generic solution is available to you.
- Get an http proxy interceptor like wireshark.
- Run it while your C# app runs, collect the http requests from that.
- Run it while running your java code, collect the http requests from that.
Compare the two.