Soap header must understand error

Question

1.00/5 (2 votes)

See more:

I have created asmx webservice in C# and hosted on IIS.

Whenever the soap message is triggered to this webservice using WS Security, it generates the error "Message security not understood"

Please help

What I have tried:

I tried each and every possible link in google but not find any solution.

Posted 11-Aug-21 3:13am

Member 13764764

Add a Solution

Comments

[no name] 11-Aug-21 17:49pm

Did you call your message "security"?

Member 13764764 12-Aug-21 8:03am

Other system is signing a message in header and sending it with Must Understand =1

[no name] 12-Aug-21 10:25am

https://stackoverflow.com/questions/22832595/how-to-handle-soapmustunderstand-1-in-webservice

Member 13764764 12-Aug-21 11:52am

Thanks for your reply but this is in Java and I am using c#

[no name] 13-Aug-21 14:17pm

Add a "C# tag" to your search ... or do you need that done for you too?

Member 13764764 12-Aug-21 11:55am

I have found something called as Policy Extension. I used it but still getting some other error. Bit close to the solution but still there is an error.

Soap message header has Signature below:

<wsse:security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><ds:signature id="SIG-CA721BD5F0B0CF5B691626702670923215" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:signedinfo><ds:canonicalizationmethod algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:inclusivenamespaces prefixlist="soapenv urn v1" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"><ds:signaturemethod algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"><ds:reference uri="#G2efe843a-41ed-4eb2-933d-1fb15d6f9045"><ds:transforms><ds:transform algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:inclusivenamespaces prefixlist="urn v1" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"><ds:digestmethod algorithm="http://www.w3.org/2001/04/xmlenc#sha256"><ds:digestvalue>dupcs7uOC5MTWOQynyXr0W5tWZND+mLrqtSuKBi8qiE=<ds:signaturevalue>jPIZ961gM7uvo8ul2ITzIlYCIGiSmRL/SFv2IcflkVgUPx4SdrH0wuVrcPuy1Bwf1pUKu8NgdC18
0rj0h2n5vOelwrcq5yqzga7WElJo6PQ/3SppSY/xBBxUqJkPfOldbSqTu1qrCdkc7/JOdJ0geZ24
zjhYAYa+ZkkDxlSOZ88/KquvH7DZ11bCtVBze6EHcWBq25WVDjlCHFxKlSUC5J+cdlBxfeyjbcjs
VqkXWUozUpq4kTUgubjVdittqtnvosW8+nDJnyRoKOzwwaNmkGtZ+V1B8iTYLtF+M9U+LKV4eRd3
aTYhE9a26OheTdssG+y/2jKO36F2nw5wZBzr7g==<ds:keyinfo id="KI-CA721BD5F0B0CF5B691626702670923213"><wsse:securitytokenreference wsu:id="STR-CA721BD5F0B0CF5B691626702670923214"><wsse:keyidentifier encodingtype="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" valuetype="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier">APLbNZIGIn0UUsxNWsNJ64FS2cE=

I have used below tags in web config

<microsoft.web.services3>
<diagnostics>
<trace enabled="true" input="InputTrace.webinfo" output="OutputTrace.webinfo">
<security>

<securitytokenmanager>

<add type="Eneco.EET.PASAR.Service.PolicyTokenManager, Eneco.EET.PASAR.Service" namespace="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" localname="X509SecurityToken">

<policy filename="wse3policyCache.config">

Looks like I have to use something else and not securitytokenManager but what is not known

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)