Hi,
On 3/21/07, Vibhor_Sharma <[EMAIL PROTECTED]> wrote:
Hi
Few questions about rampart
a) Is it mandatory to use BouncyCastle as the JCE provider for Rampart to
work? or we can plug in any provider with Rampart?
I have not tried any other JCE implementation that with Rampart/WSS4J
(Core of Rampart is WSS4J) that supports the required algorithms. (The
default Sun impl does not seem to provide some of the implementations
such as http://www.w3.org/2001/04/xmlenc#rsa-1_5). However I believe
Rampart will work with some other JCE impl that provides required
support. I think Werner tried out some stuff with WSS4J. Maybe he can
give you a better answer :-)
Even plugging BouncyCastle is giving errors as WSS4J is not able to
instantiate the Provider. So what is the guarantee that it will plug
seamlessly with other providers?
If you are referring to setting the
rg.apache.ws.security.crypto.provider property in the .properties file
this is incorrect. We have been using bouncycastle without any issues.
b) If we have to use any other provider what are the configurations needed
(apart from jre/lib/security --à jar files, java.security, client.properties
and service.properties file).
You should not change the .properties files. Changes to java.security
and having the JCE impl jar in the classpath should work.
c) If we set the provider definition in the java.security file why do we
require it again in the client.properties and service.properties file?
No. These properties file configure the crypto impl for WSS4J which is
a class that implements the
org.apache.ws.security.components.crypto.Crypto interface.
d) Which version of Java is recommended; with which Rampart will work
seamlessly? Any special configuration for JDK version required?
We have successfully tested Rampart with JDK 1.4 and JDK 1.5.
Please point me to a link which will help me to set up an framework which
can sign and encrypt a soap request and response.
Please have a look at this :
http://wso2.org/library/255
Thanks,
Ruchith
Thanks
Vibhor
--
www.ruchith.org
www.wso2.org
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
