SOAP WSS Certificates java.security.PrivilegedActionException

[Former Member]

Hi All,

Had my basis team create certificate requests and get a certificate issued for J2EE engine with the purpose of signing SOAP data. I always seem to get the following message when using my certificate that is issued to the SAP server. Other certificates which I only have the public key for seem to work fine. Has anyone else had this problem / know what to do?

The certificate was in my service_ssl keystore but then i saw a mention on SAP document that WebServiceSecurity key store should be used so I got basis to move certificate to this location but this has not fixed error

com.sap.aii.af.ra.ms.api.DeliveryException: java.security.PrivilegedActionException: com.sap.aii.af.security.impl.exception.MessageSecurityException: MessageSecurityException in Method: ApplyMessageLevelSecurity.run(). AccessControlException. Please check that your Code has the XiSecurityRuntimePermission.Context: com.sap.aii.af.security.impl.exception.MessageSecurityException: Exception in Method: apply( Message, CPALookupObject ). General exception, no further informations. Message: MessageSecurityContext in Method: apply( Message, CPALookupObject ). ApplyThread-Exception Message: ProcessException in Method: run(). Key: 0100; To-String: com.sap.aii.af.security.impl.exception.MessageSecurityException: ProcessException in Method: run(). Key: 0100. To-String: com.sap.aii.af.security.impl.exception.MessageSecurityException: MessageSecurityContext in Method: apply( Message, CPALookupObject ). ApplyThread-Exception Message: ProcessException in Method: run(). Key: 0100; To-String: com.sap.aii.af.security.impl.exception.MessageSecurityException: ProcessException in Method: run(). Key: 0100

[Former Member · Accepted solution]

Hi Chris,

Just a pointer.. Check the last part of this thread..

cheers,

Prashanth

[Former Member · Accepted solution]

Hi Prashanth,

Yeah assume you mean the "In the Security Provider - under "Protection Domains" I already added XISecurityRuntimePermission to my jar and further - under "Security Roles" - defined a Security Role named and mapped it to "J2EE_ADMIN", just to be sure."

Saw this when looking through SDN before posting but thought that this applies to JAR files only whereas mine is standard SOAP adapter is there anywhere I need to set these parameters for standard adapter?

Thanks for quick response