Forum Discussion

Mohanad_313515's avatar
Mohanad_313515
Icon for Nimbostratus rankNimbostratus
Jun 10, 2018

XML Web service - Missing SignatureValidator.xsd

Hi everyone

 

I'm trying to protect XML Web service using the ASM, while I'm reading this document:

 

https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-config-11-2-0/asm_xml_profile.html1047704

 

Please consider the following questions about the XML application that you want to protect:

 

Does the application use validation files, for example, an XML schema or WSDL document? If yes, you must obtain these files, upload to the WAF

 

Our dev provide me with 3 files: (VCE_Request.xsd - VCE_Response.xsd - VCE_Inquiry.xsd) im getting this error while uploading them

 

i tried to upload next one:

 

Important: When a WSDL or XML schema document refers to another WSDL or XML schema document, the system gives you the option of importing it. If circular dependencies exist in the files (for example, schema 1 refers to schema 2, which refers back to schema 1) import schema 1, then schema 2, then schema 1 again. This creates a mapping between the files.

 

6. If you specified a referenced file type (in step 5), in the Import URL field, type the appropriate URL: For a WSDL file, type the URL defined in the location directive For an XSD file, type the URL defined in the schemaLocation directive

 

7. For the system to attempt to locate and use files referenced in the WSDL or XML schema document, ensure that the Follow Schema Links setting is enabled.

 

To use this setting, make sure the DNS server is on the DNS lookup server list, and configure the DNS server on the BIG-IP system (System > Configuration > Device > DNS).

 

Tip: If you disable this setting and the uploaded file refers to other XML schemas, the system lists the referenced files in an error message at the top of the screen.

 

3 Replies

  • after I opened a case with F5 support and they told me :

     

    http://www.w3.org/2000/09/xmldsig";; schemaLocation="SignatureValidator.xsd" />

     

    when you import the xsd file and the file has the schemaLocation attribute, the GUI will show "The following files are missing ..." and automatically fill in the Import URL with the defined schemaLocation value. The user needs to upload all the defined schemaLocation.

     

    In my case all the xsd files have the 'schemaLocation' attribute pointing to 'SignatureValidator.xsd'

     

    So the correct action is to upload SignatureValidator.xsd and then upload other files and in the import URL put the SignatureValidator.xsd