Hi Benson, The XML Security implementation uses Axiom in manipulating XML. Additionally it uses Axiom's XML Canonicalization module. Thus, it implements XML Signature and XML Encryption specifications. The API provided by the particular implementation provides a similar API as that of Apache of XML Security project (http://santuario.apache.org/Java/index.html).
Please find an initial performance evaluation of the overall Axiom based WS Security implementation (code named "Rampart2") Vs Rampart at http://wssecforaxis2.blogspot.com/2008/10/axis2-performance-with-ws-security.html Thanks, Saliya On Tue, Feb 17, 2009 at 7:53 PM, Isuru Suriarachchi <isur...@gmail.com>wrote: > On Tue, Feb 17, 2009 at 6:25 PM, Benson Margulies <bimargul...@gmail.com > >wrote: > > > Can someone explain the relationship of the code to Axiom? > > > This xml security implementation (thomara) uses Axiom as the object model > which keeps the xml infoset. This is to overcome the issues like memory > wastage which exists in DOM based implementations. And also this removes > the > Axiom to DOM conversion which is done in Rampart at the moment. > > > > CXF could > > benefit from a fast, standard-compliant, non-DOM platform here. I'm > > wondering if there is any refactoring possibility that could lead to > > sharing between the Axis2 stack and CXF here. > > > Rampart and Rampart2 differs only on the Axiom usage and architectural > improvements in the WS-Security implementation of Rampart2. Other than > that, > the APIs of Rampart and Rampart2 are almost the same. Therefore I think CXF > can't use Rampart2 directly. > > Thanks, > Isuru > > > > Also, is the name > > translatable to English? > > > > On Tue, Feb 17, 2009 at 7:15 AM, Ruwan Linton <ruwan.lin...@gmail.com> > > wrote: > > > +1 for this, it will be a good addition. > > > > > > Thanks, > > > Ruwan > > > > > > On Tue, Feb 17, 2009 at 5:40 PM, Afkham Azeez <afk...@gmail.com> > wrote: > > > > > >> +1 for adding this project to the commons project. I don't like the > > >> name though. > > >> > > >> Thanks > > >> Azeez > > >> > > >> On Tue, Feb 17, 2009 at 5:20 PM, Isuru Suriarachchi < > isur...@gmail.com> > > >> wrote: > > >> > Hi all, > > >> > > > >> > As we all know there are some performance issues with Rampart as the > > >> > security module for Axis2. The main cause of this issue is the usage > > of > > >> DOM > > >> > in wss4j (http://ws.apache.org/wss4j/) and xmlsec ( > > >> > http://santuario.apache.org/index.html) on which Rampart is > written. > > >> > Therefore as a research project, four of us (Sameera Jayasoma, > Saliya > > >> > Ekanayake, Kalani Ruwanpathirana and myself) have implemented a > > >> WS-Security > > >> > implementation totally on Axiom. It consists of two layers and the > > bottom > > >> > layer handles the xml security stuff. So we thought of adding this > > Axiom > > >> > based xml securiy implementation as a new ws-commons project. > > >> > > > >> > Saliya has already created a jira at > > >> > https://issues.apache.org/jira/browse/WSCOMMONS-441 and the source > > code > > >> is > > >> > attached to the jira. This code is already tested and provides the > > same > > >> > functionality as xmlsec with better performance. > > >> > > > >> > We have decided to use the name "thomara" for this and I'm planning > to > > >> > commit this code at > > >> > > > >> > > > https://svn.apache.org/repos/asf/webservices/commons/trunk/modules/thomara > > >> . > > >> > Comments please?.. > > >> > > > >> > Thanks, > > >> > Isuru > > >> > > > >> > > >> > > >> > > >> -- > > >> Thanks > > >> Afkham Azeez > > >> > > >> Blog: http://afkham.org > > >> Developer Portal: http://www.wso2.org > > >> WSAS Blog: http://wso2wsas.blogspot.com > > >> Company: http://wso2.com > > >> GPG Fingerprint: 643F C2AF EB78 F886 40C9 B2A2 4AE2 C887 665E 0760 > > >> > > > > > > > > > > > > -- > > > Ruwan Linton > > > http://wso2.org - "Oxygenating the Web Services Platform" > > > http://ruwansblog.blogspot.com/ > > > > > > > > > -- > Software Engineer, > WSO2 Inc. http://wso2.org/ > Blog : http://isurues.wordpress.com/ > -- Saliya Ekanayake http://www.esaliya.blogspot.com http://www.esaliya.wordpress.com
