Hello Team,
I would like to contact you about a problemI have during 2 week on
WS-SECURITY using CXF *3.1.17* (jax-ws).
Indeed, my configuration file spring is as follows:
*<jaxws:endpoint id="my_WS" implementor="#my_WS" address="/services"
wsdlLocation="wsdl/xxxx.wsdl">*
*<jaxws:outInterceptors>*
*<bean class="org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor">*
*<constructor-arg>*
*<map>*
*<entry key="action" value="Signature" />*
*<entry key="signaturePropFile" value="security.out.properties"/>*
*<entry key="user" value="${user}"/>*
*<entry key="passwordCallbackRef">*
*<ref bean="serverPasswordCallback"/>*
*</entry>*
*<entry key="signatureKeyIdentifier" value="X509KeyIdentifier"/>*
*<entry key="signatureDigestAlgorithm"
value="http://www.w3.org/2001/04/xmlenc#sha256
<http://www.w3.org/2001/04/xmlenc#sha256>"/>*
*<entry key="signatureAlgorithm"
value="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
<http://www.w3.org/2001/04/xmldsig-more#rsa-sha256>"/>*
*<entry key="signatureParts" value="{Content}{}Body "/>*
*</map>*
*</constructor-arg>*
*</bean>*
*</jaxws:outInterceptors>*
*<jaxws:properties>*
*<entry key="schema-validation-enabled" value="false" />*
*<entry key="security.sts.token.usecert" value="true" />*
*</jaxws:properties>*
*</jaxws:endpoint>*
By specifying key "*signatureKeyIdentifier*" as "*X509KeyIdentifier*"
value, I got a result at the section "keyInfo" as follows:
*<ds: KeyInfo>*
*<wsse: SecurityTokenReference>*
*<wsse: KeyIdentifier EncodingType = "... # Base64Binary"*
*ValueType = "# ... X509v3"> MIIB ...*
*</ wsse: KeyIdentifier>*
*</ wsse: SecurityTokenReference>*
*</ ds: KeyInfo>*
1 - , I want a result like this:
*<ds: KeyInfo Id = "KI-ED321E02A6CAE33F8615378788884713">*
*<ds: X509Data>*
*<X509Certificate> MIICXTCCA .. </ X509Certificate>*
*</ds: X509Data>*
*</ds: KeyInfo>*
2 - I want an envelopped signature instead detached signature
3 - I want add a new reference on signedInfo object which point to KeyInfo
element.
It's been 3 weeks that I try to find a solution to this, but always in vain.
I am a new on CXF dev.
Thank you for your help.
Cordially,
