XiSecurityRuntimePermission

[Former Member]

Attempting to apply message level security and encryption to an XI configuration for invocation of an external web services. Configuration for certificates and encryption has been completed, but we get the following error when testing the interface:

SOAP: failed to apply Web Services Security due to java.security.PrivilegedActionException: com.sap.aii.af.security.impl.exception.MessageSecurityException: MessageSecurityException in Method: ApplyMessageLevelSecurity.run(). AccessControlException. Please check that your Code has the XiSecurityRuntimePermission.Context: com.sap.aii.af.security.impl.exception.MessageSecurityException: Exception in Method: apply( Message, CPALookupObject ). General exception, no further informations. Message: MessageSecurityContext in Method: apply( Message, CPALookupObject ). ApplyThread-Exception Message: ProcessException in Method: run(). Key: 0100; To-String: com.sap.aii.af.security.impl.exception.MessageSecurityException: ProcessException in Method: run(). Key: 0100. To-String: com.sap.aii.af.security.impl.exception.MessageSecurityException: MessageSecurityContext in Method: apply( Message, CPALookupObject ). ApplyThread-Exception Message: ProcessException in Method: run(). Key: 0100; To-String: com.sap.aii.af.security.impl.exception.MessageSecurityException: ProcessException in Method: run(). Key: 0100.

Checked SOAP Adapter and it has proper runtime permission. No custom code is being used internally. Any thoughts?

[Former Member]

Hi Brian,

I am also facing the same error, would you able to find any resolution for it?

Please let us know if you find any solution.

Thanks,

Alok

[Former Member]

Hi All,

If you are still facing this issue, Here is a checklist you can perform.....

1. Check if you have added the user in Security Provider as per the MLS guide.

2. Check the certificates installed. If you are using Web Services Security with three layered certificates i.e procured from either Verisign or Entrust, then you will encounter this error. For this , once the certificate response is installed in VA, export the same as .pfx file, import it IE, then again export it as .crt file (do not export the private key) and use this certificate as the public key.

3. If you have self signed test certificates, you can directly export the public key from VA and use it.

Please revert for any clarifications

Cheers....,

Raghu

[marksmyth]

Hi Brian

Please ensure that you have deployed the SAP Java Cryptographic Toolkit with unlimited strength policy files.

Please refer to the SAP online help

http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm

and the notes :

#739043 How to Check for Full Strength Jurisdiction Policies

#1240081 "Java Cryptography Extension Jurisdiction Policy" files

Regards

Mark

[Former Member]

checked policy files and they are the appropriate ones for unlimited strength. Also, checked the cryptographic library IAIK on the IS box and that is installed as well.

[Former Member]

Hi Brian

I am also working with Web Services scenario with secutiry implmentation. By any chance did you get your problem solved.?? If yes can you please provide me your valuable answer.

Regards

Ram

[Former Member]

Sorry sir, a resolution has not yet been identified for this problem.