Well the message is validated against the security policy by the
org.apache.rampart.PolicyBasedResultsValidator
This is done after wss4j has processed the security header - message is
decrypted, signatures verified...
As of rampart 1.4 you can configure rampart to use a specific policy
validator (that should implement the
org.apache.rampart.PolicyValidatorCallbackHandler) in the rampart config
assertion under the key policyValidatorCbClass -> see
org.apache.rampart.policy.model.RampartConfig for details...

Regards,
Stefan

On Mon, Aug 18, 2008 at 3:04 PM, stlecho <[EMAIL PROTECTED]> wrote:

>
> Hi,
>
> I've generated a client for a WSDL that contains a wsp:Policy element and
> configured Rampart to sign the messages.
> Is there a possibility to validate the signed message against the included
> wsp:Policy definition ?
>
> Regards, Stefan Lecho.
> --
> View this message in context:
> http://www.nabble.com/How-to-validate-signed-message-and-wsp%3APolicy---tp19030217p19030217.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Reply via email to