Apache WSS4J's WS Security Implementation - WSS Licensing Requirements?

[Tony Opatha]

Hi,

 

It seems that WS Security requires licensing arrangements from Microsoft, Verisign,

and IBM based on OASIS WS Security TC IPR statement

 

http://www.oasis-open.org/committees/wss/ipr.php

 

So, can someone please clarify:

 

1) if the users who to develop and deploy AXIS clients (using WS Security APIs

from Apache WSS4J) will need to first apply for WS Security licensing arrangements

with the required companies?

 

2) Related to #1, Apache WSS4J is a public domain software, but is not the underlying

WS Security requiring any licensing arranagements, or has the Apache worked out

a licensing arrangement already?

 

If the answer is yes, that users of WSS4J require WSS licensing arrangements,

perhaps this should be stated as part of the release notes for WSS4J.

 

Thanks in advance.

 

 

 

 

 

-----Original Message-----
From: Davanum Srinivas [mailto:[EMAIL PROTECTED]
Sent: Friday, March 05, 2004 4:26 AM
To: [EMAIL PROTECTED]
Subject: Re: what is the status of axis ws-security implementation?

http://ws.apache.org/ws-fx/wss4j/

--- Maciek Zywno <[EMAIL PROTECTED]> wrote:
> Hello
>
> I would like to use ws-security standard to secure my webservice. My
> question is whether I would have to implement ws-security:
> - on my own by using axis handlers that use some external api ?
> - or does axis support ws-security out of the box?
> - or there is some apache ws-security library that easily integrates
> with axis?
> - maybe you could suggest other solution
>
> Thanks in advance for any hints!
>
> Maciek
>

=====
Davanum Srinivas - http://webservices.apache.org/~dims/

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com