Layer7 API Management

Expand all | Collapse all

message was not processed: assertion falsified (600)

  • 1.  message was not processed: assertion falsified (600)

    Posted 11-26-2018 03:20 AM

    I just started exploing policy manager 9.3 and came across the following error when adding Route via https:// assertion.

    Please guide me 

    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
    <soapenv:Body>
    <soapenv:Fault>
    <faultcode>soapenv:Server</faultcode>
    <faultstring>Policy Falsified</faultstring>
    <faultactor>https://ec2-18-224-176-56.us-east-2.compute.amazonaws.com:8443/inbox</faultactor>
    <detail>
    <l7:policyResult status="Assertion Falsified" xmlns:l7="http://www.layer7tech.com/ws/policy/fault"/>
    </detail>
    </soapenv:Fault>
    </soapenv:Body>
    </soapenv:Envelope> 



  • 2.  Re: message was not processed: assertion falsified (600)

    Posted 11-26-2018 09:32 AM

    Hi ,

     

    Can you give us some more details , how did you setup the policy ? 

    inbox is a service you have setup on the GW ? 

    What other assertions are used in this policy , you can use the service debugger on the policy to check what is happening inside it, or check the ssg logs for a error.

     

    Regards Dirk



  • 3.  Re: message was not processed: assertion falsified (600)

    Posted 11-26-2018 11:13 PM

    Hi,

          You are right. Inbox is my service running in localhost:8080.

    I couldn't find any specific reason for the failure of assertion in audit log/ debugger.

    Please find the list of assertions i have used in the following order.

    1.Audit message

    2.Basic http authentication

    3.Route via https

     

    Note:

    I am able to route the request to some other https/http url.say for example www.gooogle.com. But am getting this error when i change my target url to localhost.

    Do i need to enable any security options ?

     

    Thanks & regards,

    Giridharan S

    Tata Consultancy Services

    Mailto: s.giridharan1@tcs.com

    Website: http://www.tcs.com



  • 4.  Re: message was not processed: assertion falsified (600)

    Posted 11-26-2018 04:58 PM

    Dear Giridharan_S ,

    The error response just indicates an assertion in your policy failed at run time.

    You will need to check audit event log, or ssg log for more details of the error.

     

    Regards,

    Mark



  • 5.  Re: message was not processed: assertion falsified (600)

    Posted 11-27-2018 10:30 AM

    Hi 

     

    If you refer to localhost in the route https assertions it means the service runs on the gateway ? 

    So inbox is a service on your gateway ?

     

    Regards 

    Dirk  



  • 6.  Re: message was not processed: assertion falsified (600)

    Posted 11-28-2018 12:34 AM

    HI ,

          Thanks for the response.

          Inbox is an endpoint of my service running in localhost(tomcat server). is that means service runs on my gateway?

    if no, please guide to me on running services on gateway?

     

    FYI, If i change target url to some other https for example www.google.com, am able to route the request through http route assertion. which means do i need to add my services with gateway?if so please let me know the steps to add services?

    As of now i have installed policy manager only? do i need any other product for that?

     

    Thanks,

    Giridharan S

    Tata Consultancy Services

    Mailto: s.giridharan1@tcs.com

    Website: http://www.tcs.com



  • 7.  Re: message was not processed: assertion falsified (600)

    Posted 11-28-2018 11:23 AM

    Hi 

     

    On which box runs this service  "localhost(tomcat server) " ?

    Is this your local box or the server running the API gateway ?

     

    If you specify a route as localhost the gateway thinks this is the local ip 127.0.0.1 

     

    Dirk 



  • 8.  Re: message was not processed: assertion falsified (600)

    Posted 11-28-2018 12:31 PM

    Hi,

            I think service runs in my local box.

    So how should i specify the url? How do i differentiate 127.0.0.1?

     

    Thanks & regards,

    Giridharan S

    Tata Consultancy Services

    Mailto: s.giridharan1@tcs.com

    Website: http://www.tcs.com



  • 9.  Re: message was not processed: assertion falsified (600)

    Posted 11-29-2018 11:29 AM

    Hi

     

    I would say you use the ip adress or hostname of your local machine where you have the inbox service running

     

    Dirk



  • 10.  Re: message was not processed: assertion falsified (600)

    Posted 12-10-2018 03:18 PM

    Good afternoon,

     

    Were you able to resolve the issue? What was the final result?

     

    Sincerely,


    Stephen Hughes
    Broadcom Support



  • 11.  Re: message was not processed: assertion falsified (600)

    Posted 12-13-2018 06:44 AM

    Hi Stephen,

              I am able to route the request not. Thanks for the support.