We apply timestamp, signature and encryption operations on messages.
Below is our policy.xml file...


<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy";
<http://schemas.xmlsoap.org/ws/2004/09/policy>>
    <wsp:ExactlyOne>
        <wsp:All>
            <sp:AsymmetricBinding
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";
<http://schemas.xmlsoap.org/ws/2005/07/securitypolicy>>
                <wsp:Policy>
                    <sp:InitiatorToken>
                        <wsp:Policy>
                            <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient";
<http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient>>
                                <wsp:Policy>
                                    <sp:WssX509V3Token10/>
                                </wsp:Policy>
                            </sp:X509Token>
                        </wsp:Policy>
                    </sp:InitiatorToken>
                    <sp:RecipientToken>
                        <wsp:Policy>
                            <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never";
<http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never>>
                                <wsp:Policy>
                                    <sp:WssX509V3Token10/>
                                </wsp:Policy>
                            </sp:X509Token>
                        </wsp:Policy>
                    </sp:RecipientToken>
                    <sp:AlgorithmSuite>
                        <wsp:Policy>
                            <sp:Basic128Rsa15/>
                        </wsp:Policy>
                    </sp:AlgorithmSuite>
                    <sp:Layout>
                        <wsp:Policy>
                            <sp:Strict/>
                        </wsp:Policy>
                    </sp:Layout>
                    <sp:EncryptBeforeSigning/>
                    <sp:IncludeTimestamp/>
                </wsp:Policy>
            </sp:AsymmetricBinding>
            <sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";
<http://schemas.xmlsoap.org/ws/2005/07/securitypolicy>>
                <wsp:Policy>
                    <sp:MustSupportRefKeyIdentifier/>
                    <sp:MustSupportRefEmbeddedToken/>
                    <sp:MustSupportRefIssuerSerial/>
                </wsp:Policy>
            </sp:Wss10>
            <sp:EncryptedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";
<http://schemas.xmlsoap.org/ws/2005/07/securitypolicy>>
                <sp:Body/>
            </sp:EncryptedParts>
            <sp:SignedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";
<http://schemas.xmlsoap.org/ws/2005/07/securitypolicy>>
                <sp:Body/>
            </sp:SignedParts>
            <rampc:RampartConfig
xmlns:rampc="http://ws.apache.org/rampart/c/policy";
<http://ws.apache.org/rampart/c/policy>>
                <rampc:User>client</rampc:User>
                <rampc:TimeToLive>360</rampc:TimeToLive>
                <rampc:EncryptionUser>service</rampc:EncryptionUser>
                <rampc:PasswordType>Plain</rampc:PasswordType>

<rampc:PasswordCallbackClass>/home/myhome/rampart/callback/libpwcb.so</rampc:PasswordCallbackClass>

<rampc:ReceiverCertificate>/home/myhome/keys/service.pem</rampc:ReceiverCertificate>

<rampc:Certificate>/home/myhome/keys/client.pem</rampc:Certificate>

<rampc:PrivateKey>/home/myhome/keys/client-priv.pem</rampc:PrivateKey>
            </rampc:RampartConfig>
        </wsp:All>
    </wsp:ExactlyOne>
</wsp:Policy>

Reply via email to