CXF2.7.2+；Weblogic 12c+；Java 1.7

运行Weblogic 12c的CXF应用程序时出现问题。例外情况如下：

org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory cannot be cast to javax.xml.crypto.dsig.XMLSignatureFactory

这里有趣的是，DOMXMLSignatureFactory扩展了XMLSignatureFactory。我试过调试，但没有找到原因XMLSec-1.5.3代码在以下行失败：

xmlsignaturefac=（XMLSignatureFactory）ps.newInstance（null）

实例化类“org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory”具有声明：

public final class DOMXMLSignatureFactory extends XMLSignatureFactory {
...
}

有什么想法吗？

完整堆栈跟踪：

  org.apache.cxf.interceptor.Fault: org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory cannot be cast to javax.xml.crypto.dsig
.XMLSignatureFactory
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt(AsymmetricBindingHandler.java
:195)
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.handleBinding(AsymmetricBindingHandler.java:98)
        at org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(Polic
yBasedWSS4JOutInterceptor.java:165)
        at org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(Polic
yBasedWSS4JOutInterceptor.java:89)
        at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:271)
        at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:530)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:463)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:366)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:319)
        at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
        at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:133)
        at $Proxy197.getProcessingEventDetails(Unknown Source)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at com.paradase.top.green.hill.client.MiraclesPosterServlet.doPost(MiraclesPosterServlet.java:666)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:751)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:844)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:242)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:216)
        at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:132)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:338)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:221)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3284)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3254)
        at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
        at weblogic.servlet.provider.WlsSubjectHandle.run(WlsSubjectHandle.java:57)
        at weblogic.servlet.internal.WebAppServletContext.doSecuredExecute(WebAppServletContext.java:2163)
        at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2089)
        at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2074)
        at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1513)
        at weblogic.servlet.provider.ContainerSupportProviderImpl$WlsRequestExecutor.run(ContainerSupportProviderImpl.java:254)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Caused by: java.lang.ClassCastException: org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory cannot be cast to javax.xml.cryp
to.dsig.XMLSignatureFactory
        at javax.xml.crypto.dsig.XMLSignatureFactory.findInstance(XMLSignatureFactory.java:202)
        at javax.xml.crypto.dsig.XMLSignatureFactory.getInstance(XMLSignatureFactory.java:292)
        at org.apache.ws.security.message.WSSecSignature.init(WSSecSignature.java:126)
        at org.apache.ws.security.message.WSSecSignature.<init>(WSSecSignature.java:119)
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AbstractBindingBuilder.getSignatureBuilder(AbstractBindingBuilder.java:172
3)
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignature(AsymmetricBindingHandler.java:546)
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt(AsymmetricBindingHandler.java
:147)
        ... 35 more

org.apache.cxf.interceptor.Fault:org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory无法强制转换为javax.xml.crypto.dsig
.XMLSignatureFactory
位于org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt（AsymmetricBindingHandler.java
:195)
位于org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.handleBinding（AsymmetricBindingHandler.java:98）
位于org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage（Polic
ybasedws4joutinterceptor.java:165）
位于org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage（Polic
ybasedws4joutinterceptor.java:89）
位于org.apache.cxf.phase.PhaseInterceptorChain.doIntercept（PhaseInterceptorChain.java:271）
位于org.apache.cxf.endpoint.clientmpl.doInvoke（clientmpl.java:530）
位于org.apache.cxf.endpoint.clientmpl.invoke（clientmpl.java:463）
位于org.apache.cxf.endpoint.clientmpl.invoke（clientmpl.java:366）
位于org.apache.cxf.endpoint.clientmpl.invoke（clientmpl.java:319）
位于org.apache.cxf.frontend.ClientProxy.invokeSync（ClientProxy.java:96）
位于org.apache.cxf.jaxws.JaxWsClientProxy.invoke（JaxWsClientProxy.java:133）
位于$Proxy197.getProcessingEventDetails（未知源）
在sun.reflect.NativeMethodAccessorImpl.invoke0（本机方法）处
位于sun.reflect.NativeMethodAccessorImpl.invoke（NativeMethodAccessorImpl.java:39）
在sun.reflect.DelegatingMethodAccessorImpl.invoke（DelegatingMethodAccessorImpl.java:25）中
位于java.lang.reflect.Method.invoke（Method.java:597）
位于com.paradase.top.green.hill.client.MiraclesPostServlet.doPost（MiraclesPostServlet.java:666）
位于javax.servlet.http.HttpServlet.service（HttpServlet.java:751）
位于javax.servlet.http.HttpServlet.service（HttpServlet.java:844）
位于weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run（StubSecurityHelper.java:242）
位于weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run（StubSecurityHelper.java:216）
位于weblogic.servlet.internal.StubSecurityHelper.invokeServlet（StubSecurityHelper.java:132）
位于weblogic.servlet.internal.ServletStubImpl.execute（ServletStubImpl.java:338）
位于weblogic.servlet.internal.ServletStubImpl.execute（ServletStubImpl.java:221）
位于weblogic.servlet.internal.WebAppServletContext$servleinvocationAction.wrapRun（WebAppServletContext.java:3284）
在weblogic.servlet.internal.WebAppServletContext$servleinvocationAction.run（WebAppServletContext.java:3254）
位于weblogic.security.acl.internal.AuthenticatedSubject.doAs（AuthenticatedSubject.java:321）
位于weblogic.security.service.SecurityManager.runAs（SecurityManager.java:120）
在weblogic.servlet.provider.wlssobjecthandle.run（wlssobjecthandle.java:57）上
位于weblogic.servlet.internal.WebAppServletContext.doSecuredExecute（WebAppServletContext.java:2163）
位于weblogic.servlet.internal.WebAppServletContext.securedExecute（WebAppServletContext.java:2089）
位于weblogic.servlet.internal.WebAppServletContext.execute（WebAppServletContext.java:2074）
位于weblogic.servlet.internal.ServletRequestImpl.run（ServletRequestImpl.java:1513）
位于weblogic.servlet.provider.ContainerSupportProviderImpl$WLSRequesteExecutor.run（ContainerSupportProviderImpl.java:254）
在weblogic.work.ExecuteThread.execute（ExecuteThread.java:256）
在weblogic.work.ExecuteThread.run（ExecuteThread.java:221）
原因：java.lang.ClassCastException:org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory无法强制转换为javax.xml.cryp
to.dsig.XMLSignatureFactory
位于javax.xml.crypto.dsig.XMLSignatureFactory.findInstance（XMLSignatureFactory.java:202）
位于javax.xml.crypto.dsig.XMLSignatureFactory.getInstance（XMLSignatureFactory.java:292）
位于org.apache.ws.security.message.WSSecSignature.init（WSSecSignature.java:126）
位于org.apache.ws.security.message.WSSecSignature（WSSecSignature.java:119）
位于org.apache.cxf.ws.security.wss4j.policyhandlers.AbstractBindingBuilder.getSignatureBuilder（AbstractBindingBuilder.java:172
3)
位于org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignature（AsymmetricBindingHandler.java:546）
位于org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt（AsymmetricBindingHandler.java
:147)
... 35多
CXF使用WSS4J，WSS4J版本1.6.7有此缺陷。您可以尝试升级到wss4j 1.6.9吗？CXF 2.7.3可能会帮您解决这个问题。此更新修复了我在ServiceMix 4.5.0中运行时的问题

  org.apache.cxf.interceptor.Fault: org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory cannot be cast to javax.xml.crypto.dsig
.XMLSignatureFactory
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt(AsymmetricBindingHandler.java
:195)
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.handleBinding(AsymmetricBindingHandler.java:98)
        at org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(Polic
yBasedWSS4JOutInterceptor.java:165)
        at org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(Polic
yBasedWSS4JOutInterceptor.java:89)
        at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:271)
        at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:530)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:463)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:366)
        at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:319)
        at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
        at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:133)
        at $Proxy197.getProcessingEventDetails(Unknown Source)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at com.paradase.top.green.hill.client.MiraclesPosterServlet.doPost(MiraclesPosterServlet.java:666)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:751)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:844)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:242)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:216)
        at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:132)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:338)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:221)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3284)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3254)
        at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
        at weblogic.servlet.provider.WlsSubjectHandle.run(WlsSubjectHandle.java:57)
        at weblogic.servlet.internal.WebAppServletContext.doSecuredExecute(WebAppServletContext.java:2163)
        at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2089)
        at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2074)
        at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1513)
        at weblogic.servlet.provider.ContainerSupportProviderImpl$WlsRequestExecutor.run(ContainerSupportProviderImpl.java:254)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Caused by: java.lang.ClassCastException: org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory cannot be cast to javax.xml.cryp
to.dsig.XMLSignatureFactory
        at javax.xml.crypto.dsig.XMLSignatureFactory.findInstance(XMLSignatureFactory.java:202)
        at javax.xml.crypto.dsig.XMLSignatureFactory.getInstance(XMLSignatureFactory.java:292)
        at org.apache.ws.security.message.WSSecSignature.init(WSSecSignature.java:126)
        at org.apache.ws.security.message.WSSecSignature.<init>(WSSecSignature.java:119)
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AbstractBindingBuilder.getSignatureBuilder(AbstractBindingBuilder.java:172
3)
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignature(AsymmetricBindingHandler.java:546)
        at org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt(AsymmetricBindingHandler.java
:147)
        ... 35 more