Author: kaushalye
Date: Thu Mar 29 01:23:01 2007
New Revision: 523616
URL: http://svn.apache.org/viewvc?view=rev&rev=523616
Log:
Redefining scenarios for more clear samples in Rampart/C
Following is a summary of new scenarios
1. Timestamp
2. UsernameToken
3. Client Encrypt(DirectReference)
4. Client Encrypt(IssuerSerial/RefKeyIdentifier/Embedded)
5. Client Sign(DirectReference)
6. Client Sign(IssuerSerial/RefKeyIdentifier/Embedded)
7. Timestamp, UsernameToken, Encrypt, Sign (Encrypt before sign/ Sign
before encrypt)
8. A complete scenario, where both client and server encrypt/sign,
add Timestamps, Usernametokens.
Modified:
webservices/rampart/trunk/c/samples/secpolicy/README.txt
webservices/rampart/trunk/c/samples/secpolicy/scenario4/client-outgoing-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario6/README.txt
webservices/rampart/trunk/c/samples/secpolicy/scenario6/client-outgoing-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario6/service-incoming-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-incoming-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-outgoing-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-incoming-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-outgoing-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-incoming-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-outgoing-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-incoming-secpolicy.xml
webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-outgoing-secpolicy.xml
Modified: webservices/rampart/trunk/c/samples/secpolicy/README.txt
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/README.txt?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
--- webservices/rampart/trunk/c/samples/secpolicy/README.txt (original)
+++ webservices/rampart/trunk/c/samples/secpolicy/README.txt Thu Mar 29
01:23:01 2007
@@ -22,6 +22,8 @@
4. Client Encrypt(IssuerSerial/RefKeyIdentifier/Embedded)
5. Client Sign(DirectReference)
6. Client Sign(IssuerSerial/RefKeyIdentifier/Embedded)
-7. Timestamp, UsernameToken, Encrypt, Sign (Sign before encrypt)
-8. Timestamp, UsernameToken, Encrypt, Sign (Encrypt before sign)
+7. Timestamp, UsernameToken, Encrypt, Sign (Encrypt before sign/ Sign
+before encrypt)
+8. A complete scenario, where both client and server encrypt/sign,
+add Timestamps, Usernametokens.
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario4/client-outgoing-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario4/client-outgoing-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario4/client-outgoing-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario4/client-outgoing-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -31,15 +31,9 @@
<sp:Strict/>
</wsp:Policy>
</sp:Layout>
- <sp:IncludeTimestamp/>
<sp:EncryptBeforeSigning/>
</wsp:Policy>
</sp:AsymmetricBinding>
- <sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <wsp:Policy>
- <sp:UsernameToken
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/>
- </wsp:Policy>
- </sp:SignedSupportingTokens>
<sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<!--Please uncomment ONE of these to select an identifier
pattern-->
Modified: webservices/rampart/trunk/c/samples/secpolicy/scenario6/README.txt
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario6/README.txt?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
--- webservices/rampart/trunk/c/samples/secpolicy/scenario6/README.txt
(original)
+++ webservices/rampart/trunk/c/samples/secpolicy/scenario6/README.txt Thu Mar
29 01:23:01 2007
@@ -1,2 +1,2 @@
Client send Body encrypted.Server response with the plain text body.
-Keyidentifier:- DirectReference.
+Keyidentifier:- Embedded
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario6/client-outgoing-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario6/client-outgoing-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario6/client-outgoing-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario6/client-outgoing-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -5,7 +5,7 @@
<wsp:Policy>
<sp:InitiatorToken>
<wsp:Policy>
- <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always">
+ <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:WssX509V3Token10/>
</wsp:Policy>
@@ -14,7 +14,7 @@
</sp:InitiatorToken>
<sp:RecipientToken>
<wsp:Policy>
- <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always">
+ <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:WssX509V3Token10/>
</wsp:Policy>
@@ -31,27 +31,24 @@
<sp:Strict/>
</wsp:Policy>
</sp:Layout>
- <sp:IncludeTimestamp/>
- <sp:EncryptBeforeSigning/>
</wsp:Policy>
</sp:AsymmetricBinding>
- <sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <wsp:Policy>
- <sp:UsernameToken
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/>
- </wsp:Policy>
- </sp:SignedSupportingTokens>
- <sp:EncryptedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <sp:Body/>
- </sp:EncryptedParts>
+ <sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <!--Please uncomment ONE of these to select an identifier
pattern-->
+ <sp:MustSupportRefKeyIdentifier/>
+ <!--sp:MustSupportRefEmbeddedToken/-->
+ <!--sp:MustSupportRefIssuerSerial-->
+ </wsp:Policy>
+ </sp:Wss10>
+ <sp:SignedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <sp:Body/>
+ </sp:SignedParts>
<rampc:RampartConfig
xmlns:rampc="http://ws.apache.org/rampart/c/policy">
- <rampc:User>Gampola</rampc:User>
- <rampc:TimeToLive>360</rampc:TimeToLive>
<rampc:EncryptionUser>a</rampc:EncryptionUser>
- <rampc:PasswordType>Digest</rampc:PasswordType>
<rampc:PasswordCallbackClass>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/callback/libpwcb.so</rampc:PasswordCallbackClass>
-
<rampc:ReceiverCertificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/b_cert.cert</rampc:ReceiverCertificate>
-
<rampc:Certificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/a_cert.cert</rampc:Certificate>
-
<rampc:PrivateKey>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/a_store.pfx</rampc:PrivateKey>
+
<rampc:Certificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/a_cert.cert</rampc:Certificate>
+
<rampc:PrivateKey>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/a_store.pfx</rampc:PrivateKey>
</rampc:RampartConfig>
</wsp:All>
</wsp:ExactlyOne>
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario6/service-incoming-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario6/service-incoming-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario6/service-incoming-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario6/service-incoming-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -31,25 +31,22 @@
<sp:Strict/>
</wsp:Policy>
</sp:Layout>
- <sp:IncludeTimestamp/>
- <sp:EncryptBeforeSigning/>
</wsp:Policy>
</sp:AsymmetricBinding>
- <sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <wsp:Policy>
- <sp:UsernameToken
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/>
- </wsp:Policy>
- </sp:SignedSupportingTokens>
- <sp:EncryptedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <sp:Body/>
- </sp:EncryptedParts>
+ <sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <sp:MustSupportRefKeyIdentifier/>
+ <sp:MustSupportRefEmbeddedToken/>
+ <sp:MustSupportRefIssuerSerial/>
+ </wsp:Policy>
+ </sp:Wss10>
+
+ <sp:SignedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <sp:Body/>
+ </sp:SignedParts>
<rampc:RampartConfig
xmlns:rampc="http://ws.apache.org/rampart/c/policy">
- <rampc:User>Gampola</rampc:User>
- <rampc:TimeToLive>360</rampc:TimeToLive>
<rampc:EncryptionUser>b</rampc:EncryptionUser>
- <rampc:PasswordType>Digest</rampc:PasswordType>
<rampc:PasswordCallbackClass>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/callback/libpwcb.so</rampc:PasswordCallbackClass>
-
<rampc:ReceiverCertificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/bhome/a_cert.cert</rampc:ReceiverCertificate>
<rampc:Certificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/bhome/b_cert.cert</rampc:Certificate>
<rampc:PrivateKey>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/bhome/b_store.pfx</rampc:PrivateKey>
</rampc:RampartConfig>
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-incoming-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-incoming-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-incoming-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-incoming-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -21,42 +21,11 @@
</sp:X509Token>
</wsp:Policy>
</sp:RecipientToken>
- <sp:AlgorithmSuite>
- <wsp:Policy>
- <sp:Basic256Rsa15/>
- </wsp:Policy>
- </sp:AlgorithmSuite>
- <sp:Layout>
- <wsp:Policy>
- <sp:Strict/>
- </wsp:Policy>
- </sp:Layout>
<sp:IncludeTimestamp/>
- <sp:EncryptBeforeSigning/>
</wsp:Policy>
</sp:AsymmetricBinding>
- <sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <wsp:Policy>
- <sp:UsernameToken
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/>
- </wsp:Policy>
- </sp:SignedSupportingTokens>
- <sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <wsp:Policy>
- <sp:MustSupportRefEmbeddedToken/>
- </wsp:Policy>
- </sp:Wss10>
- <sp:EncryptedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <sp:Body/>
- </sp:EncryptedParts>
<rampc:RampartConfig
xmlns:rampc="http://ws.apache.org/rampart/c/policy">
- <rampc:User>Gampola</rampc:User>
<rampc:TimeToLive>360</rampc:TimeToLive>
- <rampc:EncryptionUser>a</rampc:EncryptionUser>
- <rampc:PasswordType>Digest</rampc:PasswordType>
-
<rampc:PasswordCallbackClass>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/callback/libpwcb.so</rampc:PasswordCallbackClass>
-
<rampc:ReceiverCertificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/b_cert.cert</rampc:ReceiverCertificate>
-
<rampc:Certificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/a_cert.cert</rampc:Certificate>
-
<rampc:PrivateKey>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/a_store.pfx</rampc:PrivateKey>
</rampc:RampartConfig>
</wsp:All>
</wsp:ExactlyOne>
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-outgoing-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-outgoing-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-outgoing-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario7/client-outgoing-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -14,7 +14,7 @@
</sp:InitiatorToken>
<sp:RecipientToken>
<wsp:Policy>
- <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always">
+ <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:WssX509V3Token10/>
</wsp:Policy>
@@ -33,6 +33,7 @@
</sp:Layout>
<sp:IncludeTimestamp/>
<sp:EncryptBeforeSigning/>
+ <!--sp:SignBeforeEncrypting/-->
</wsp:Policy>
</sp:AsymmetricBinding>
<sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-incoming-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-incoming-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-incoming-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-incoming-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -5,7 +5,7 @@
<wsp:Policy>
<sp:InitiatorToken>
<wsp:Policy>
- <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always">
+ <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:WssX509V3Token10/>
</wsp:Policy>
@@ -42,7 +42,9 @@
</sp:SignedSupportingTokens>
<sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
+ <sp:MustSupportRefKeyIdentifier/>
<sp:MustSupportRefEmbeddedToken/>
+ <sp:MustSupportRefIssuerSerial/>
</wsp:Policy>
</sp:Wss10>
<sp:EncryptedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-outgoing-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-outgoing-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-outgoing-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario7/service-outgoing-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -21,42 +21,11 @@
</sp:X509Token>
</wsp:Policy>
</sp:RecipientToken>
- <sp:AlgorithmSuite>
- <wsp:Policy>
- <sp:Basic256Rsa15/>
- </wsp:Policy>
- </sp:AlgorithmSuite>
- <sp:Layout>
- <wsp:Policy>
- <sp:Strict/>
- </wsp:Policy>
- </sp:Layout>
<sp:IncludeTimestamp/>
- <sp:EncryptBeforeSigning/>
</wsp:Policy>
</sp:AsymmetricBinding>
- <sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <wsp:Policy>
- <sp:UsernameToken
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/>
- </wsp:Policy>
- </sp:SignedSupportingTokens>
- <sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <wsp:Policy>
- <sp:MustSupportRefEmbeddedToken/>
- </wsp:Policy>
- </sp:Wss10>
- <sp:EncryptedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <sp:Body/>
- </sp:EncryptedParts>
<rampc:RampartConfig
xmlns:rampc="http://ws.apache.org/rampart/c/policy">
- <rampc:User>Gampola</rampc:User>
<rampc:TimeToLive>360</rampc:TimeToLive>
- <rampc:EncryptionUser>b</rampc:EncryptionUser>
- <rampc:PasswordType>Digest</rampc:PasswordType>
-
<rampc:PasswordCallbackClass>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/callback/libpwcb.so</rampc:PasswordCallbackClass>
-
<rampc:ReceiverCertificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/bhome/a_cert.cert</rampc:ReceiverCertificate>
-
<rampc:Certificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/bhome/b_cert.cert</rampc:Certificate>
-
<rampc:PrivateKey>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/bhome/b_store.pfx</rampc:PrivateKey>
</rampc:RampartConfig>
</wsp:All>
</wsp:ExactlyOne>
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-incoming-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-incoming-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-incoming-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-incoming-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -14,18 +14,49 @@
</sp:InitiatorToken>
<sp:RecipientToken>
<wsp:Policy>
- <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always">
+ <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:WssX509V3Token10/>
</wsp:Policy>
</sp:X509Token>
</wsp:Policy>
</sp:RecipientToken>
+ <sp:AlgorithmSuite>
+ <wsp:Policy>
+ <sp:Basic256Rsa15/>
+ </wsp:Policy>
+ </sp:AlgorithmSuite>
+ <sp:Layout>
+ <wsp:Policy>
+ <sp:Strict/>
+ </wsp:Policy>
+ </sp:Layout>
<sp:IncludeTimestamp/>
+ <sp:EncryptBeforeSigning/>
</wsp:Policy>
</sp:AsymmetricBinding>
+ <sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <sp:UsernameToken
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/>
+ </wsp:Policy>
+ </sp:SignedSupportingTokens>
+ <sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <sp:MustSupportRefEmbeddedToken/>
+ </wsp:Policy>
+ </sp:Wss10>
+ <sp:EncryptedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <sp:Body/>
+ </sp:EncryptedParts>
<rampc:RampartConfig
xmlns:rampc="http://ws.apache.org/rampart/c/policy">
+ <rampc:User>Gampola</rampc:User>
<rampc:TimeToLive>360</rampc:TimeToLive>
+ <rampc:EncryptionUser>a</rampc:EncryptionUser>
+ <rampc:PasswordType>Digest</rampc:PasswordType>
+
<rampc:PasswordCallbackClass>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/callback/libpwcb.so</rampc:PasswordCallbackClass>
+
<rampc:ReceiverCertificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/b_cert.cert</rampc:ReceiverCertificate>
+
<rampc:Certificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/a_cert.cert</rampc:Certificate>
+
<rampc:PrivateKey>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/ahome/a_store.pfx</rampc:PrivateKey>
</rampc:RampartConfig>
</wsp:All>
</wsp:ExactlyOne>
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-outgoing-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-outgoing-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-outgoing-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario8/client-outgoing-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -14,7 +14,7 @@
</sp:InitiatorToken>
<sp:RecipientToken>
<wsp:Policy>
- <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always">
+ <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:WssX509V3Token10/>
</wsp:Policy>
@@ -32,9 +32,14 @@
</wsp:Policy>
</sp:Layout>
<sp:IncludeTimestamp/>
- <!--sp:EncryptBeforeSigning-->
+ <sp:EncryptBeforeSigning>
</wsp:Policy>
</sp:AsymmetricBinding>
+ <sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <sp:MustSupportRefEmbeddedToken/>
+ </wsp:Policy>
+ </sp:Wss10>
<sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:UsernameToken
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/>
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-incoming-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-incoming-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-incoming-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-incoming-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -5,7 +5,7 @@
<wsp:Policy>
<sp:InitiatorToken>
<wsp:Policy>
- <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always">
+ <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:WssX509V3Token10/>
</wsp:Policy>
@@ -32,9 +32,14 @@
</wsp:Policy>
</sp:Layout>
<sp:IncludeTimestamp/>
- <!--sp:EncryptBeforeSigning/-->
+ <sp:EncryptBeforeSigning/>
</wsp:Policy>
</sp:AsymmetricBinding>
+ <sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <sp:MustSupportRefEmbeddedToken/>
+ </wsp:Policy>
+ </sp:Wss10>
<sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:UsernameToken
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/>
Modified:
webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-outgoing-secpolicy.xml
URL:
http://svn.apache.org/viewvc/webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-outgoing-secpolicy.xml?view=diff&rev=523616&r1=523615&r2=523616
==============================================================================
---
webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-outgoing-secpolicy.xml
(original)
+++
webservices/rampart/trunk/c/samples/secpolicy/scenario8/service-outgoing-secpolicy.xml
Thu Mar 29 01:23:01 2007
@@ -5,7 +5,7 @@
<wsp:Policy>
<sp:InitiatorToken>
<wsp:Policy>
- <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always">
+ <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:WssX509V3Token10/>
</wsp:Policy>
@@ -21,11 +21,42 @@
</sp:X509Token>
</wsp:Policy>
</sp:RecipientToken>
+ <sp:AlgorithmSuite>
+ <wsp:Policy>
+ <sp:Basic256Rsa15/>
+ </wsp:Policy>
+ </sp:AlgorithmSuite>
+ <sp:Layout>
+ <wsp:Policy>
+ <sp:Strict/>
+ </wsp:Policy>
+ </sp:Layout>
<sp:IncludeTimestamp/>
+ <sp:EncryptBeforeSigning/>
</wsp:Policy>
</sp:AsymmetricBinding>
+ <sp:SignedSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <sp:UsernameToken
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/>
+ </wsp:Policy>
+ </sp:SignedSupportingTokens>
+ <sp:Wss10
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <sp:MustSupportRefEmbeddedToken/>
+ </wsp:Policy>
+ </sp:Wss10>
+ <sp:EncryptedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <sp:Body/>
+ </sp:EncryptedParts>
<rampc:RampartConfig
xmlns:rampc="http://ws.apache.org/rampart/c/policy">
+ <rampc:User>Gampola</rampc:User>
<rampc:TimeToLive>360</rampc:TimeToLive>
+ <rampc:EncryptionUser>b</rampc:EncryptionUser>
+ <rampc:PasswordType>Digest</rampc:PasswordType>
+
<rampc:PasswordCallbackClass>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/callback/libpwcb.so</rampc:PasswordCallbackClass>
+
<rampc:ReceiverCertificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/bhome/a_cert.cert</rampc:ReceiverCertificate>
+
<rampc:Certificate>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/bhome/b_cert.cert</rampc:Certificate>
+
<rampc:PrivateKey>/home/AXIS2_USER/axis2/c/deploy/bin/samples/rampart/keys/bhome/b_store.pfx</rampc:PrivateKey>
</rampc:RampartConfig>
</wsp:All>
</wsp:ExactlyOne>