We apply timestamp, signature and encryption operations on messages. Below is our policy.xml file...
<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" <http://schemas.xmlsoap.org/ws/2004/09/policy>> <wsp:ExactlyOne> <wsp:All> <sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy" <http://schemas.xmlsoap.org/ws/2005/07/securitypolicy>> <wsp:Policy> <sp:InitiatorToken> <wsp:Policy> <sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient" <http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient>> <wsp:Policy> <sp:WssX509V3Token10/> </wsp:Policy> </sp:X509Token> </wsp:Policy> </sp:InitiatorToken> <sp:RecipientToken> <wsp:Policy> <sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never" <http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never>> <wsp:Policy> <sp:WssX509V3Token10/> </wsp:Policy> </sp:X509Token> </wsp:Policy> </sp:RecipientToken> <sp:AlgorithmSuite> <wsp:Policy> <sp:Basic128Rsa15/> </wsp:Policy> </sp:AlgorithmSuite> <sp:Layout> <wsp:Policy> <sp:Strict/> </wsp:Policy> </sp:Layout> <sp:EncryptBeforeSigning/> <sp:IncludeTimestamp/> </wsp:Policy> </sp:AsymmetricBinding> <sp:Wss10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy" <http://schemas.xmlsoap.org/ws/2005/07/securitypolicy>> <wsp:Policy> <sp:MustSupportRefKeyIdentifier/> <sp:MustSupportRefEmbeddedToken/> <sp:MustSupportRefIssuerSerial/> </wsp:Policy> </sp:Wss10> <sp:EncryptedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy" <http://schemas.xmlsoap.org/ws/2005/07/securitypolicy>> <sp:Body/> </sp:EncryptedParts> <sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy" <http://schemas.xmlsoap.org/ws/2005/07/securitypolicy>> <sp:Body/> </sp:SignedParts> <rampc:RampartConfig xmlns:rampc="http://ws.apache.org/rampart/c/policy" <http://ws.apache.org/rampart/c/policy>> <rampc:User>client</rampc:User> <rampc:TimeToLive>360</rampc:TimeToLive> <rampc:EncryptionUser>service</rampc:EncryptionUser> <rampc:PasswordType>Plain</rampc:PasswordType> <rampc:PasswordCallbackClass>/home/myhome/rampart/callback/libpwcb.so</rampc:PasswordCallbackClass> <rampc:ReceiverCertificate>/home/myhome/keys/service.pem</rampc:ReceiverCertificate> <rampc:Certificate>/home/myhome/keys/client.pem</rampc:Certificate> <rampc:PrivateKey>/home/myhome/keys/client-priv.pem</rampc:PrivateKey> </rampc:RampartConfig> </wsp:All> </wsp:ExactlyOne> </wsp:Policy>
