Tactical assertion "Validate Security Signature" does not recognise base64 key variable
search cancel

Tactical assertion "Validate Security Signature" does not recognise base64 key variable

book

Article ID: 204318

calendar_today

Updated On:

Products

CA API Gateway API SECURITY CA API Gateway Precision API Monitoring Module for API Gateway (Layer 7) CA API Gateway Enterprise Service Manager (Layer 7) STARTER PACK-7 CA Microgateway

Issue/Introduction

I am trying to use the Tactical assertion "Validate Security Signature". 

I have to get the base64 public key from a header and use it, but when I tested it: by putting the header in a variable and then use the variable in the assertion, it fails with the following output:

 com.l7tech.external.assertions.validatesecuritysignature.server.ServerValidateSecuritySignatureAssertion: Could not initialize public key for verification. java.security.InvalidKeyException: IOException: ObjectIdentifier() -- data isn't an object ID (tag = -96)

 

Environment

Release : 9.4

Component : API GATEWAY

Resolution

The error Could not initialize public key for verification. java.security.InvalidKeyException: IOException: ObjectIdentifier() -- data isn't an object ID (tag = -96) indicate the the variable used for the  base64 encoded public key does not contain a valid key