SOAP-DSIG (http://www.w3.org/TR/2001/NOTE-SOAP-dsig-20010206/) is
completely outdated. OASIS WS-Security is the latest. Axis does not
support it either though there are some samples in axis itself.

When do you need a milestone/release candidate of WSS4J. let me know.
It will have to be after Axis 1.2 is final of course (predicted to be
released next weekend 9th/10th if there are no show stoppers)

thanks,
dims


On Thu, 3 Mar 2005 17:46:26 -0500, Faucher, Christian
<[EMAIL PROTECTED]> wrote:
>  
>  
> Hi all, 
>   
> We've been investigating a way to certify that the client calling our server
> is really the expected client.  We came across digital signatures
> (SOAP-DSIG). 
>   
> Is this a supported feature by Axis?  Or do I need to install WSSE as well? 
> Is it supported as well by .NET in a compatible way? 
>   
> In our case, the server-side processing could be an Handler intercepting the
> SOAP request, looking for SOAPSEC, get the signature and valid it.  But we
> would like to avoid as much as possible WSSE4J (time constraints, nothing
> personal...). 
>   
> Christian Faucher 
>  
> Concepteur/Designer 
> AXA Canada Tech 
> 2020, rue University, Bureau 600 
> Montr�al (Qu�bec) H3A 2A5 
> T: (514) 282-6817, x2943 
> F:  (514) 282-6017 
> Email: [EMAIL PROTECTED] 
>   
>  ________________________________
>  
> "Ce message est confidentiel, � l'usage exclusif du destinataire ci-dessus
> et son contenu ne repr�sente en aucun cas un engagement de la part de AXA,
> sauf en cas de stipulation expresse et par �crit de la part de AXA. Toute
> publication, utilisation ou diffusion, m�me partielle, doit �tre autoris�e
> pr�alablement. Si vous n'�tes pas destinataire de ce message, merci d'en
> avertir imm�diatement l'exp�diteur."
> 
> "This e-mail message is confidential, for the exclusive use of the addressee
> and its contents shall not constitute a commitment by AXA, except as
> otherwise specifically provided in writing by AXA. Any unauthorized
> disclosure, use or dissemination, either whole or partial, is prohibited. If
> you are not the intended recipient of the message, please notify the sender
> immediately." 


-- 
Davanum Srinivas - http://webservices.apache.org/~dims/

Reply via email to