Hi,

I can't seem to find a way to specify the key to use when verifying the
signatures attached to a response.

I'm using Apache Axis2-1.2 and Apache Rampart 1.2

Basically, my setup is as folows:

I connect to a web-service over SSL using my client certificate to sign my
message.This uses a WS Policy file with the RampartConfig additions to
specify my client certificate, keystore, etc.

This works as expected and I get a response back from the web-service, which
is signed using a second, service, certificate. Unfortunately this fails
with:  "The signature verification failed". I'm assuming this is because I
am not specifying the service certificate anywhere (neither is it specified
in the response from the service).

I can't seem to find anywhere to specify the certificate details to validate
the response?

Any help would be greatly appreciated!

Pete

Reply via email to