title: WSO2 ESB - ws security throws exception, AxisFault, Invalid Security
body: <p>I need to call a web service that implements ws-security, rampart, which uses username token and time stamp authentication in SSL. When trying to call the service following SOAP message ends up as response in the ESB log with the proceeding exception.   </p>
  
  <p>Response SOAP message</p>
  
  <pre><code>"&lt;?xml version="1.0" encoding="UTF-8"?&gt;
          &lt;soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope"&gt;
              &lt;soapenv:Header&gt;
                  &lt;wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soapenv:mustUnderstand="true"&gt;
                      &lt;wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Timestamp-18784"&gt;
                      &lt;wsu:Created&gt;2016-04-19T04:30:20.850Z&lt;/wsu:Created&gt;&lt;wsu:Expires&gt;2016-04-19T04:35:20.850Z&lt;/wsu:Expires&gt;&lt;/wsu:Timestamp&gt;
                  &lt;/wsse:Security&gt;
              &lt;/soapenv:Header&gt;
              &lt;soapenv:Body&gt;
                  &lt;soapenv:Fault xmlns:axis2ns72="http://www.w3.org/2003/05/soap-envelope"&gt;
                      &lt;soapenv:Code&gt;
                          &lt;soapenv:Value&gt;axis2ns72:Sender&lt;/soapenv:Value&gt;
                          &lt;soapenv:Subcode&gt;
                              &lt;soapenv:Value xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"&gt;wsse:InvalidSecurity&lt;/soapenv:Value&gt;
                          &lt;/soapenv:Subcode&gt;&lt;/soapenv:Code&gt;&lt;soapenv:Reason&gt;&lt;soapenv:Text xml:lang="en-US"&gt;General security error (WSSecurityEngine: No cryptoproperty file supplied for decryption)
                          &lt;/soapenv:Text&gt;&lt;/soapenv:Reason&gt;&lt;soapenv:Detail&gt;&lt;/soapenv:Detail&gt;&lt;/soapenv:Fault&gt;
              &lt;/soapenv:Body&gt;
          &lt;/soapenv:Envelope&gt;
  </code></pre>
  
  <p>Exception</p>
  
  <pre><code> [2016-04-19 09:59:52,730] ERROR - AxisEngine InvalidSecurity
  org.apache.axis2.AxisFault: InvalidSecurity
          at org.apache.rampart.handler.PostDispatchVerificationHandler.invoke(PostDispatchVerificationHandler.java:164)
          at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:340)
          at org.apache.axis2.engine.Phase.invoke(Phase.java:313)
          at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:261)
          at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:167)
          at org.apache.synapse.transport.passthru.ClientWorker.run(ClientWorker.java:247)
          at org.apache.axis2.transport.base.threads.NativeWorkerPool$1.run(NativeWorkerPool.java:172)
          at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
          at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
          at java.lang.Thread.run(Thread.java:745)
  [2016-04-19 09:59:52,733] ERROR - ClientWorker Fault processing response messagethrough Axis2
  org.apache.axis2.AxisFault: InvalidSecuritytDispatchVerificationHandler.java:164)
          at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:340)
          at org.apache.axis2.engine.Phase.invoke(Phase.java:313)
          at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:261)
          at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:167)
          at org.apache.synapse.transport.passthru.ClientWorker.run(ClientWorker.java:247)
          at org.apache.axis2.transport.base.threads.NativeWorkerPool$1.run(NativeWorkerPool.java:172)
          at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
          at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
          at java.lang.Thread.run(Thread.java:745)
  </code></pre>
  
  <p>Proxy service</p>
  
  <pre><code>    &lt;?xml version="1.0" encoding="UTF-8"?&gt;
      &lt;proxy name="EDI_Proxy" startOnLoad="true" trace="disable"
        transports="http https" xmlns="http://ws.apache.org/ns/synapse"&gt;
        &lt;target&gt;
          &lt;inSequence&gt;
            &lt;log description="log" level="custom"&gt;
              &lt;property name="msg" value="Initiating mcash"/&gt;
            &lt;/log&gt;
            &lt;payloadFactory description="pf_mcash" media-type="xml"&gt;
              &lt;format&gt;
                &lt;flw:purchaceFromMMR xmlns:flw="http://flw.mwt.mobitel.com/"&gt;
                  &lt;!--Optional: --&gt;
                  &lt;bankPurchaseRequest xmlns=""&gt;
                    &lt;amount&gt;1&lt;/amount&gt;
                    &lt;!--Optional: --&gt;
                    &lt;bankCode&gt;00&lt;/bankCode&gt;
                    &lt;!--Optional: --&gt;
                    &lt;date&gt;07042016&lt;/date&gt;
                    &lt;!--Optional: --&gt;
                    &lt;mobile&gt;0711231234&lt;/mobile&gt;
                    &lt;!--Optional: --&gt;
                    &lt;time&gt;120000&lt;/time&gt;
                    &lt;!--Optional: --&gt;
                    &lt;transactionId&gt;SDC12345&lt;/transactionId&gt;
                  &lt;/bankPurchaseRequest&gt;
                &lt;/flw:purchaceFromMMR&gt;
              &lt;/format&gt;
              &lt;args/&gt;
            &lt;/payloadFactory&gt;
            &lt;log description="log" level="custom"&gt;
              &lt;property name="msg" value="Payload created.."/&gt;
            &lt;/log&gt;
            &lt;property
              expression="fn:concat('Basic ', base64Encode('aaa:bbb'))"
              name="Authorization" scope="operation" type="STRING" xmlns:ns="http://org.apache.synapse/xsd"/&gt;
            &lt;call&gt;
              &lt;endpoint&gt;
                &lt;address trace="disable" uri="https://mywssecendpoint.com/Testservices/TestPurchaseService?wsdl"&gt;
                  &lt;enableSec policy="gov:ws-policy/sample_policy.xml"/&gt;
                &lt;/address&gt;
              &lt;/endpoint&gt;
            &lt;/call&gt;
            &lt;log description="log" level="custom"&gt;
              &lt;property name="msg" value="After calling address endpoint"/&gt;
            &lt;/log&gt;
          &lt;/inSequence&gt;
          &lt;outSequence&gt;
            &lt;log description="log" level="full"/&gt;
          &lt;/outSequence&gt;
          &lt;faultSequence/&gt;
        &lt;/target&gt;
        &lt;parameter name="engagedModules"&gt;rampart,rahas&lt;/parameter&gt;
      &lt;/proxy&gt;
  </code></pre>
  
  <p>Policy file</p>
  
  <pre><code>&lt;wsp:Policy wsu:Id="SgnEncrUsername"
      xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"
      xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing"
      xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"&gt;
      &lt;wsp:ExactlyOne&gt;
          &lt;wsp:All&gt;
              &lt;sp:SymmetricBinding&gt;
                  &lt;wsp:Policy&gt;
                      &lt;sp:ProtectionToken&gt;
                          &lt;wsp:Policy&gt;
                              &lt;sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never"&gt;
                                  &lt;wsp:Policy&gt;
                                      &lt;sp:RequireThumbprintReference/&gt;
                                      &lt;sp:WssX509V3Token10/&gt;
                                  &lt;/wsp:Policy&gt;
                              &lt;/sp:X509Token&gt;
                          &lt;/wsp:Policy&gt;
                      &lt;/sp:ProtectionToken&gt;
                      &lt;sp:AlgorithmSuite&gt;
                          &lt;wsp:Policy&gt;
                              &lt;sp:Basic256/&gt;
                          &lt;/wsp:Policy&gt;
                      &lt;/sp:AlgorithmSuite&gt;
                      &lt;sp:Layout&gt;
                          &lt;wsp:Policy&gt;
                              &lt;sp:Lax/&gt;
                          &lt;/wsp:Policy&gt;
                      &lt;/sp:Layout&gt;
                      &lt;sp:IncludeTimestamp/&gt;
                      &lt;sp:OnlySignEntireHeadersAndBody/&gt;
                  &lt;/wsp:Policy&gt;
              &lt;/sp:SymmetricBinding&gt;
              &lt;sp:SignedParts&gt;
                  &lt;sp:Body/&gt;
              &lt;/sp:SignedParts&gt;
              &lt;sp:EncryptedParts&gt;
                  &lt;sp:Body/&gt;
              &lt;/sp:EncryptedParts&gt;
              &lt;sp:SignedSupportingTokens&gt;
                  &lt;wsp:Policy&gt;
                      &lt;sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient"&gt;
                          &lt;wsp:Policy&gt;
                              &lt;sp:WssUsernameToken10/&gt;
                          &lt;/wsp:Policy&gt;
                      &lt;/sp:UsernameToken&gt;
                  &lt;/wsp:Policy&gt;
              &lt;/sp:SignedSupportingTokens&gt;
              &lt;sp:Wss11&gt;
                  &lt;wsp:Policy&gt;
                      &lt;sp:MustSupportRefKeyIdentifier/&gt;
                      &lt;sp:MustSupportRefIssuerSerial/&gt;
                      &lt;sp:MustSupportRefThumbprint/&gt;
                      &lt;sp:MustSupportRefEncryptedKey/&gt;
                      &lt;sp:RequireSignatureConfirmation/&gt;
                  &lt;/wsp:Policy&gt;
              &lt;/sp:Wss11&gt;
              &lt;sp:Trust10&gt;
                  &lt;wsp:Policy&gt;
                      &lt;sp:MustSupportIssuedTokens/&gt;
                      &lt;sp:RequireClientEntropy/&gt;
                      &lt;sp:RequireServerEntropy/&gt;
                  &lt;/wsp:Policy&gt;
              &lt;/sp:Trust10&gt;
          &lt;/wsp:All&gt;
      &lt;/wsp:ExactlyOne&gt;
      &lt;rampart:RampartConfig xmlns:rampart="http://ws.apache.org/rampart/policy"&gt;
          &lt;rampart:passwordCallbackClass&gt;com.wssec.PWCallbackHandler&lt;/rampart:passwordCallbackClass&gt;
          &lt;rampart:user&gt;Testuser&lt;/rampart:user&gt;
          &lt;rampart:encryptionUser&gt;wso2carbon&lt;/rampart:encryptionUser&gt;
          &lt;rampart:timestampPrecisionInMilliseconds&gt;true&lt;/rampart:timestampPrecisionInMilliseconds&gt;
          &lt;rampart:timestampTTL&gt;300&lt;/rampart:timestampTTL&gt;
          &lt;rampart:timestampMaxSkew&gt;300&lt;/rampart:timestampMaxSkew&gt;
          &lt;rampart:timestampStrict&gt;true&lt;/rampart:timestampStrict&gt;
          &lt;rampart:tokenStoreClass&gt;org.wso2.carbon.security.util.SecurityTokenStore&amp;#xd;
   &lt;/rampart:tokenStoreClass&gt;
          &lt;rampart:nonceLifeTime&gt;300&lt;/rampart:nonceLifeTime&gt;
          &lt;rampart:encryptionCrypto&gt;
              &lt;rampart:crypto
                  cryptoKey="org.wso2.carbon.security.crypto.privatestore" provider="org.wso2.carbon.security.util.ServerCrypto"&gt;
                  &lt;rampart:property name="org.wso2.carbon.security.crypto.alias"&gt;mcash.cer&lt;/rampart:property&gt;
                  &lt;rampart:property name="org.wso2.carbon.security.crypto.privatestore"&gt;wso2carbon.jks&lt;/rampart:property&gt;
                  &lt;rampart:property name="org.wso2.stratos.tenant.id"&gt;-1234&lt;/rampart:property&gt;
                  &lt;rampart:property name="org.wso2.carbon.security.crypto.truststores"&gt;wso2carbon.jks&lt;/rampart:property&gt;
                  &lt;rampart:property name="rampart.config.user"&gt;wso2carbon&lt;/rampart:property&gt;
              &lt;/rampart:crypto&gt;
          &lt;/rampart:encryptionCrypto&gt;
          &lt;rampart:signatureCrypto&gt;
              &lt;rampart:crypto
                  cryptoKey="org.wso2.carbon.security.crypto.privatestore" provider="org.wso2.carbon.security.util.ServerCrypto"&gt;
                  &lt;rampart:property name="org.wso2.carbon.security.crypto.alias"&gt;mcash.cer&lt;/rampart:property&gt;
                  &lt;rampart:property name="org.wso2.carbon.security.crypto.privatestore"&gt;wso2carbon.jks&lt;/rampart:property&gt;
                  &lt;rampart:property name="org.wso2.stratos.tenant.id"&gt;-1234&lt;/rampart:property&gt;
                  &lt;rampart:property name="org.wso2.carbon.security.crypto.truststores"&gt;wso2carbon.jks&lt;/rampart:property&gt;
                  &lt;rampart:property name="rampart.config.user"&gt;wso2carbon&lt;/rampart:property&gt;
              &lt;/rampart:crypto&gt;
          &lt;/rampart:signatureCrypto&gt;
      &lt;/rampart:RampartConfig&gt;
      &lt;sec:CarbonSecConfig xmlns:sec="http://www.wso2.org/products/carbon/security"&gt;
          &lt;sec:Authorization&gt;
              &lt;sec:property name="org.wso2.carbon.security.allowedroles"&gt;admin&lt;/sec:property&gt;
          &lt;/sec:Authorization&gt;
      &lt;/sec:CarbonSecConfig&gt;
  &lt;/wsp:Policy&gt;
  </code></pre>
  
  <p>I have engaged the rampart module as said in this <a href="https://stackoverflow.com/questions/20182314/error-engine-axisengine-an-unsupported-signature-or-encryption-algorithm-was-us">question</a>. Have wrote a password callback handler class and have added it to the <code>&lt;ESB_HOME&gt;/repository/components/lib</code> which is been successfully called.
  I have written a policy file in a registry resource and doing the necessary configurations (Password callback handling, Keystore). </p>
  
  <p>Will be very much pleased if anyone can help or point out if I'm missing anything by looking the response and exception. </p>
  
  <p>Thanks in advance.</p>
  
  <p>--edit-- request in the wire</p>
  
  <pre><code>    "POST /Testservices/BankPurchaseService?wsdl HTTP/1.1[\r][\n]" {org.apache.synapse.transport.http.wire}
  "Cookie: region3_registry_menu=visible; menuPanel=visible; menuPanelType=main; JSESSIONID=95CAE85DE74F34BBAB10163E36087B12; requestedURI="../../carbon/service-mgt/index.jsp?region=region1&amp;item=services_list_menu"; region1_configure_menu=none; region4_monitor_menu=none; region5_tools_menu=none; current-breadcrumb=manage_menu%2Cservices_menu%2Cservices_list_menu%23[\r][\n]" {org.apache.synapse.transport.http.wire}
  "Content-Type: application/soap+xml; charset=UTF-8; action="urn:mediate"[\r][\n]" {org.apache.synapse.transport.http.wire}
  "Transfer-Encoding: chunked[\r][\n]" {org.apache.synapse.transport.http.wire}
  "Host: mobextintvpn.mobitel.lk:443[\r][\n]" {org.apache.synapse.transport.http.wire}
  "Connection: Keep-Alive[\r][\n]" {org.apache.synapse.transport.http.wire}
  "User-Agent: Synapse-PT-HttpComponents-NIO[\r][\n]" {org.apache.synapse.transport.http.wire}
  "[\r][\n]" {org.apache.synapse.transport.http.wire}
  "1287[\r][\n]" {org.apache.synapse.transport.http.wire}
  "&lt;?xml version='1.0' encoding='UTF-8'?&gt;&lt;soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"&gt;&lt;soapenv:Header&gt;&lt;wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soapenv:mustUnderstand="true"&gt;&lt;wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Timestamp-1"&gt;&lt;wsu:Created&gt;2016-04-19T10:18:22.520Z&lt;/wsu:Created&gt;&lt;wsu:Expires&gt;2016-04-19T10:23:22.520Z&lt;/wsu:Expires&gt;&lt;/wsu:Timestamp&gt;&lt;xenc:EncryptedKey Id="EncKeyId-95F8BA9FA0125DE2C814610611030642"&gt;&lt;xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/&gt;&lt;ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;wsse:SecurityTokenReference&gt;&lt;wsse:KeyIdentifier EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1"&gt;a/jhNus21KVuoFx65LmkW2O/l10=&lt;/wsse:KeyIdentifier&gt;&lt;/wsse:SecurityTokenReference&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:KeyInfo&gt;&lt;xenc:CipherData&gt;&lt;xenc:CipherValue&gt;OAbkdbMWv8icJf+Y9u34aiQI79G1qWYA8Femy/VDAd0osCW8kVglQ7SpfKUEvVfz7qNZUHabOEQh3opPEA/o7/0wEWYLZbdXj1cUtl1ViwobdJr1UaWH2IuWQVPoJFSh88/5LJWDDdhrpgIrpMVyuu7/DL6d/DJJFdcOfznjTpM=&lt;/xenc:CipherValue&gt;&lt;/xenc:CipherData&gt;&lt;/xenc:EncryptedKey&gt;&lt;xenc:ReferenceList&gt;&lt;xenc:DataReference URI="#EncDataId-4"/&gt;&lt;/xenc:ReferenceList&gt;&lt;wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="UsernameToken-2"&gt;&lt;wsse:Username&gt;Hnbmwtuser&lt;/wsse:Username&gt;&lt;wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText"&gt;Hnbmwtuser&lt;/wsse:Password&gt;&lt;/wsse:UsernameToken&gt;&lt;ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="Signature-3"&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:SignedInfo&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:Reference URI="#Id-1995499025"&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:Transforms&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:Transforms&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:DigestValue&gt;zOGehBXKICE+35najzJhEV+lxfo=&lt;/ds:DigestValue&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:Reference&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:Reference URI="#Timestamp-1"&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:Transforms&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:Transforms&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:DigestValue&gt;MVyAyqaqT/h9KmttU1wP4QSTo1A=&lt;/ds:DigestValue&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:Reference&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:Reference URI="#UsernameToken-2"&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:Transforms&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:Transforms&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:DigestValue&gt;ftAIvRUNNgVoN1mPq4L08UBdwHs=&lt;/ds:DigestValue&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:Reference&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:SignedInfo&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:SignatureValue&gt;B4HfIv89mQBvAH0E5pqm70k0hOc=&lt;/ds:SignatureValue&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;ds:KeyInfo Id="KeyId-95F8BA9FA0125DE2C814610611031013"&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;wsse:SecurityTokenReference xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="STRId-95F8BA9FA0125DE2C814610611031014"&gt;&lt;wsse:Reference URI="#EncKeyId-95F8BA9FA0125DE2C814610611030642" ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey"/&gt;&lt;/wsse:SecurityTokenReference&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:KeyInfo&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:Signature&gt;&lt;/wsse:Security&gt;&lt;/soapenv:Header&gt;&lt;soapenv:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Id-1995499025"&gt;&lt;xenc:EncryptedData Id="EncDataId-4" Type="http://www.w3.org/2001/04/xmlenc#Content"&gt;&lt;xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/&gt;&lt;ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"&gt;&lt;wsse:Reference URI="#EncKeyId-95F8BA9FA0125DE2C814610611030642"/&gt;&lt;/wsse:SecurityTokenReference&gt;[\n]" {org.apache.synapse.transport.http.wire}
  "&lt;/ds:KeyInfo&gt;&lt;xenc:CipherData&gt;&lt;xenc:CipherValue&gt;wIL1a9udg+JfIITcM++vJ0iA+oYahKZzUtq3xLpK/2eTHg8boNsrT+omZbq+aqscUmxqV9ofgei/[\n]" {org.apache.synapse.transport.http.wire}
  "vlj1evRic21e82d5R9oIXE35s5NYR7M1ij23bfsPo5WCtg2QTXWg3Ijdae9ASSXBgShhsxYeCBkv[\n]" {org.apache.synapse.transport.http.wire}
  "07cgLYZjOOqrpww5B/PG4cBccTJevTWTgkU8yW6WlqPtjlQgg9olRw598JIBvgX6/od/dLMtReA4[\n]" {org.apache.synapse.transport.http.wire}
  "cTsjzRIMeQiG3u8oBwzDav9zdYiNV2Pyhr+M8juiEX4jlKCNF3XBS/k4RdAJBObAIu3RBNKbWkjT[\n]" {org.apache.synapse.transport.http.wire}
  "8bSs7GxlW8yVgeMb6UzoZHlfES+siSm7iINnskl0AdZMLhn8na9iAJS94Cw6925/eulAKLAOS0dj[\n]" {org.apache.synapse.transport.http.wire}
  "Hf7lISscNRZxHEcD84Q9PBK6/XGn/qyE5Q0gyNTFu2ASLq3w9+yMOZAI7X+z6qprOTssOE6VltAW[\n]" {org.apache.synapse.transport.http.wire}
  "VpBCZN/XmbZSdT40y7dfQ/ykQjsCFAnF5lSJ7TP9vf5Qc+76qCNnZyrwOTdeuqNr0Sle9AQ717YH[\n]" {org.apache.synapse.transport.http.wire}
  "Yw==&lt;/xenc:CipherValue&gt;&lt;/xenc:CipherData&gt;&lt;/xenc:EncryptedData&gt;&lt;/soapenv:Body&gt;&lt;/soapenv:Envelope&gt;[\r][\n]"
  </code></pre>