[Axis 1.5.6] sp:EncryptBeforeSigning not working?

[Philippe A.]

Hello,

Can someone please confirm that sp:EncryptBeforeSigning work? My client is
reporting a strange soap fault:

2012-04-24 17:41:43,604 [main] DEBUG org.apache.rampart.MESSAGE  -
*********************** RampartReceiver received
<?xml version='1.0' encoding='utf-8'?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/";>

  <soapenv:Body>
    <soapenv:Fault>
      <faultcode>soapenv:Server</faultcode>
      <faultstring>Missing argument</faultstring>
      <detail />
    </soapenv:Fault>
  </soapenv:Body>
</soapenv:Envelope>

I tried using sp:SignBeforeEncrypting + sp:EncryptSignature and it worked.
However I would prefer to go with sp:EncryptBeforeSigning and skip the
extra signature encryption. I attached my policy.

I don't mind if this is confirmed with an higher version number.

Thanks,

-- 
Philippe

<?xml version="1.0" encoding="UTF-8"?>

<wsp:Policy wsu:Id="SymmEncr"
            xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
            xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy";
            xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702";>
  <wsp:ExactlyOne>
    <wsp:All>
      <sp:SymmetricBinding>
        <wsp:Policy>
          <sp:ProtectionToken>
            <wsp:Policy>
              <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never";>
                <wsp:Policy>
                  <sp:RequireDerivedKeys/>
                </wsp:Policy>
              </sp:X509Token>
            </wsp:Policy>
          </sp:ProtectionToken>
          <sp:AlgorithmSuite>
            <wsp:Policy>
              <sp:Basic128Rsa15/>
            </wsp:Policy>
          </sp:AlgorithmSuite>
          <sp:Layout>
            <wsp:Policy>
              <sp:Strict/>
            </wsp:Policy>
          </sp:Layout>
          
          <sp:IncludeTimestamp/>
          
          <sp:EncryptBeforeSigning/>
          
          <!-- no effect on result -->
          <!-- <sp:OnlySignEntireHeadersAndBody/> -->

        </wsp:Policy>            
      </sp:SymmetricBinding>
          
      <sp:Wss11>
        <wsp:Policy>
          <sp:MustSupportRefEncryptedKey/>
        </wsp:Policy>
      </sp:Wss11>

      <sp:SignedEncryptedSupportingTokens>
        <wsp:Policy>
          <sp:UsernameToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient"/>
        </wsp:Policy>
      </sp:SignedEncryptedSupportingTokens>

      <sp:SignedParts>
        <sp:Body/>
      </sp:SignedParts>

      <sp:EncryptedParts>
        <sp:Body/>
      </sp:EncryptedParts>

      <ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy";>
        <ramp:user>username</ramp:user>
        <ramp:passwordCallbackClass>basic.PWCBHandler</ramp:passwordCallbackClass>
        <ramp:userCertAlias>certalias</ramp:userCertAlias>
        <ramp:encryptionUser>encuser</ramp:encryptionUser>
            
        <ramp:encryptionCrypto>
          <ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
            <ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
            <ramp:property name="org.apache.ws.security.crypto.merlin.file">keystore</ramp:property>
            <ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">pass</ramp:property>
          </ramp:crypto>
        </ramp:encryptionCrypto>

      </ramp:RampartConfig>

    </wsp:All>
  </wsp:ExactlyOne>
</wsp:Policy>

---------------------------------------------------------------------
To unsubscribe, e-mail: java-user-unsubscr...@axis.apache.org
For additional commands, e-mail: java-user-h...@axis.apache.org