problem with Subject Key Identifier

[gaurav abbi]

hi all,
i'm decrypting a soap response using axis as client from a web service provider. when the key identifier used is X509KeyIdentifier
then i'm able to decrypt the message, but when the key identifier is
SKIKeyIdentifier(Subject key identifier),
i get the following exception. also i'm sending the logs and response with it.

  
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
 <soapenv:Header>
  <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
   <xenc:EncryptedKey Id="EncKeyId-28491583">
 
    <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>
 
    <ds:KeyInfo xmlns :mrgreen: s="http://www.w3.org/2000/09/xmldsig#">
 
     <wsse:SecurityTokenReference>
      <wsse:KeyIdentifier EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier">
yuqR6uxRmylZRlBfi1dC7waHBDU=      </wsse:KeyIdentifier>
     </wsse:SecurityTokenReference>
 
    </ds:KeyInfo>
 
    <xenc:CipherData>
     <xenc:CipherValue>
f8wjTUvS/1SaE7GrtfGzTS1JHddUG6KYqULe1m+YlW5n48h4/ysDiOp27WqkE1J52NjD9sT1tabhilFJTePS1P94+MggNEVrVfxaqwo6MCd6eUlFrwZiA+uKXRM07PRdcjbmSmKXaowSY+g7lIzCGFOW3u/gyDB9nBQr7MBCkFQ=     </xenc:CipherValue>
    </xenc:CipherData>
 
    <xenc:ReferenceList>
     <xenc :mrgreen: ataReference URI="#EncDataId-2738995"/>
    </xenc:ReferenceList>
   </xenc:EncryptedKey>
  </wsse:Security>
 </soapenv:Header>
 <soapenv:Body>
  <xenc:EncryptedData Id="EncDataId-2738995" Type="http://www.w3.org/2001/04/xmlenc#Content">
   <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
   <xenc:CipherData>
    <xenc:CipherValue>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==    </xenc:CipherValue>
   </xenc:CipherData>
  </xenc:EncryptedData>
 </soapenv:Body>
</soapenv:Envelope>
 
- The provider JuiCE could not be added: org.apache.security.juice.provider.JuiCEProviderOpenSSL
- enter processSecurityHeader()
- Processing WS-Security header for '' actor.
- X509 SKI alias: null
org.apache.ws.security.WSSecurityException: General security error (Unexpected number of X509Data: for decryption (KeyId))
at org.apache.ws.security.processor.EncryptedKeyProcessor.handleEncryptedKey(EncryptedKeyProcessor.java:185)
at org.apache.ws.security.processor.EncryptedKeyProcessor.handleEncryptedKey(EncryptedKeyProcessor.java:88)
at org.apache.ws.security.processor.EncryptedKeyProcessor.handleToken(EncryptedKeyProcessor.java:77)
at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:279)
at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:201)
at org.apache.ws.axis.security.WSDoAllReceiver.invoke(WSDoAllReceiver.java:159)
at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:190)
at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
at org.apache.axis.client.Call.invoke(Call.java:2767)
at org.apache.axis.client.Call.invoke(Call.java:2443)
at org.apache.axis.client.Call.invoke(Call.java:2366)
at org.apache.axis.client.Call.invoke(Call.java:1812)
at com.sterlingcommerce.www.mesa.GISBindingStub.executeLightweightJDBCAdapterQuery(GISBindingStub.java:187)
at client.MyClient.makeRequest(MyClient.java:101)
at client.MyClient.main(MyClient.java:134)
failed becoz of remote exception: org.apache.ws.security.WSSecurityException: General security error (Unexpected number of X509Data: for decryption (KeyId))
Exception in thread "main" org.apache.ws.security.WSSecurityException: General security error (Unexpected number of X509Data: for decryption (KeyId))
at org.apache.ws.security.processor.EncryptedKeyProcessor.handleEncryptedKey(EncryptedKeyProcessor.java:185)
at org.apache.ws.security.processor.EncryptedKeyProcessor.handleEncryptedKey(EncryptedKeyProcessor.java:88)
at org.apache.ws.security.processor.EncryptedKeyProcessor.handleToken(EncryptedKeyProcessor.java:77)
at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:279)
at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:201)
at org.apache.ws.axis.security.WSDoAllReceiver.invoke(WSDoAllReceiver.java:159)
at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:190)
at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
at org.apache.axis.client.Call.invoke(Call.java:2767)
at org.apache.axis.client.Call.invoke(Call.java:2443)
at org.apache.axis.client.Call.invoke(Call.java:2366)
at org.apache.axis.client.Call.invoke(Call.java:1812)
at com.sterlingcommerce.www.mesa.GISBindingStub.executeLightweightJDBCAdapterQuery(GISBindingStub.java:187)
at client.MyClient.makeRequest(MyClient.java:101)
at client.MyClient.main(MyClient.java:134)
  

this is my handler configuration for response :

  
<handler type="java :-o	 rg.apache.ws.axis.security.WSDoAllReceiver" >
 <parameter name="enableSignatureConfirmation" value = "false"/>
         <parameter name="action" value="Encrypt"/>
        <parameter name="user" value="clientprivdecryptkey"/>
        <parameter name="passwordCallbackClass" value="client.PWCallback"/>
        <parameter name="passwordType" value="PasswordText"/>
        <parameter name="decryptionPropFile" value = "decryptionCrypto.properties"/>
        <parameter name="encryptionKeyIdentifier" value="SKIKeyIdentifier" />
 <parameter name="encryptionSymAlgorithm" value="http://www.w3.org/2001/04/xmlenc#kw-tripledes" />
<parameter name="encryptionKeyTransportAlgorithm" value="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/> 
    </handler>  
  

please see if anybody has faced same problem or can throw some light on this.