Home / Questions / 416428
Accepted
Sergio David Perez Acosta
Asked: 2021-12-24 03:42:18 +0800 CST 2021-12-24 03:42:18 +0800 CST

How to fix error 104 when querying face web service

  • 772

It turns out that when sending the Request with the Send Invoice method, in the response it gives me an error code 104. Supposedly I am testing it with SoapUI and when making the request I replace the ? by my values, but when executing it gives me the error 104, the SOAP request is not well constructed: the SOAP Header is not found

Web service method schema

Schema of the web service replaced with my data

Web service response with error code

What do I need to make it work well Thanks

webservice

2 Answers

  1. Best Answer

    Missing to configure WS-Security. The Manual for the Use of Services - invoicesspp says:

    Requests must be signed as indicated in the Implementation section or with a valid WS-Security 1.0 X.509 Token Profile format.

    The same manual shows an example request that includes an extensive content of the label <soapenv:Header>and that in the images of the question it is observed that it is empty. It also mentions how to get a PEM file (which should include a public key and a private key) to sign the requests:

    In order to use FACe's web services, you must first register on the FACe web portal, in the Integrators - Certificate Management menu ( https://face.gob.es/es/proveedores ), where you will report the PEM of the certificate with which it will sign calls to web services.

    From the example request in the manual, the following configuration for the Outgoing WS-Security Configuration of SoapUI can be deduced:

    • Must Undestand: ✅ (checked)
    • Key Identifier Type:Binary Security Token
    • Signature Algorithm:http://www.w3.org/2000/09/xmldsig#rsasha1
    • Signature Canonicalization:http://www.w3.org/2001/10/xml-excc14n#
    • Digest algorithm:http://www.w3.org/2000/09/xmldsig#sha1

    Other useful links:

    1. Downloads Area - FACe - General Entry Point for Electronic Invoices of the AGE . In the section "Documentation for integrators" you will find the manual mentioned above, manuals of other services and information of the certificates of the test and production web services.
    2. SoapUI WS-Security Settings (English).
    3. Key Store Explorer . Tool to manage Java keystores, like the one that needs to be configured in Outgoing WS-Security Configuration of SoapUI.
    • 2

  2. Your answer has also helped me, even though there are several little things in that example header that I'm not sure how I have to fill in.

    • The first thing that is filled is the BinarySecurityToken that is filled with the digital certificate (I have that clear)

    • Then there is another field that could have to be filled in, which is the
      SignedInfo that has the DigestValue field inside with a value already
      filled in, and I don't know if it would be necessary to modify it.

    • and finally the SignatureValue field that I know I have to
      fill in, but I don't know what.

    I understand that through some algorithm with which I get these values, but I don't finish finding out well.

    Thanks and greetings!

    • 0