3830788 - "unsupported usage in callback: 9" verifying SOAP sender WS-Security signature

An inbound SOAP message received through the SOAP sender adapter with WS-Security (message-level signing) enabled fails during signature verification. The message processing ends in a failed status and the following error is reported by the underlying security framework (WSS4J):

UnsupportedCallbackException: unsupported usage in callback: 9

This occurs when the signature algorithm used to sign the SOAP message is not compatible with the key or algorithm of the X.509 certificate presented in the message (WS-Security BinarySecurityToken). The endpoint cannot verify the message signature because the certificate does not match the signing algorithm, so verification fails before the message is processed.

For example, a message signed with RSA-SHA1 cannot be verified with a certificate whose key or signature uses RSA-PSS (OID 1.2.840.113549.1.1.10) instead of standard RSA PKCS#1 v1.5 (OID 1.2.840.113549.1.1.1). The same failure can result from any comparable mismatch between the message signing algorithm and the certificate algorithm.

• SAP Integration Suite

• SAP Cloud Integration

unsupported usage in callback 9, UnsupportedCallbackException, WSS4J, SOAP sender, WS-Security, message signing, signature verification failed, algorithm mismatch, signature algorithm, certificate algorithm, RSA-SHA1, RSA-PSS, PKCS#1 v1.5, rsaEncryption, BinarySecurityToken, X.509 certificate, keystore, Cloud Integration, SOAP adapter, cpi, hci , KBA , LOD-HCI-PI-CON-FTP , FTP, SFTP and SOAP Adapter , Problem