Hi all

I've got a service with a policy with symmetric binding and a token that is
required form a sts service, calling the sts service and inserting the token
inside the new request to the service goes fine, but the response back from
the service is this

 org.apache.ws.security.WSSecurityException: General security error
(WSSecurityEngine: No crypto propery file supplied for decryption)

My rampart config element in  service.xml file looks like this

<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy";>
                        <ramp:user>service</ramp:user>
                        <ramp:encryptionUser>client</ramp:encryptionUser>

<ramp:passwordCallbackClass>xPWCBHandler</ramp:passwordCallbackClass>
                        <ramp:signatureCrypto>
                            <ramp:crypto
provider="org.apache.ws.security.components.crypto.Merlin">
                                <ramp:property

name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
                                <ramp:property
name="org.apache.ws.security.crypto.merlin.file">
                                   service.jks
                            </ramp:property>
                                <ramp:property

name="org.apache.ws.security.crypto.merlin.keystore.password">service</ramp:property>
                            </ramp:crypto>
                        </ramp:signatureCrypto>
                        <ramp:encryptionCypto>
                            <ramp:crypto
provider="org.apache.ws.security.components.crypto.Merlin">
                                <ramp:property

name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
                                <ramp:property
name="org.apache.ws.security.crypto.merlin.file">service.jks</ramp:property>
                                <ramp:property

name="org.apache.ws.security.crypto.merlin.keystore.password">service</ramp:property>
                            </ramp:crypto>
                        </ramp:encryptionCypto>
                    </ramp:RampartConfig>

So as far as I can see rampart has the needed configurations for decryption
properties needed, but I might be missing something, do I??

cheers, Håkon

-- 
Håkon Sagehaug, Scientific Programmer
Parallab, Bergen Center for Computational Science (BCCS)
UNIFOB AS (University of Bergen Research Company)

Reply via email to