Hi Josef, With Geronimo you can still use the latest version of CXF. Just include the latest release version of CXF within your WAR[1] (or EAR[2]), and then deploy the application. IIRC Geronimo users have the choice of Tomcat or Jetty as the servlet container, and either can handle any version of CXF.
If you are truly limited to 2.0.2, i.e. you must run on a version that is a year old, I would probably recommend another web service stack for which you are allowed to run the latest release version. It is silly to be talking about advanced security options if you have to run a version with already known bugs that have been patched in later versions. AFAIK WS-Security 1.1 is backwards-compatible, i.e., WS-Security 1.0 *is* WS-Security 1.1[3, lines 255-257], it's just that the latter has a few additional features that you may or may not need. Before you say you need 1.1, make sure you can specify exactly what 1.1-specific features you are planning on using. Along with Axis2, CXF relies on WSS4J[4] for security, so pretty much what they support--which I think is just 1.0--is what we support. Sun's XWSS[5]--used by Metro and Spring Web Services--does support much of WS-Security 1.1, as well as other standards, that we're just picking up. They're normally best if you want the bleeding edge in the latest standards. But I would not count CXF out here--WSS4J has just recently picked up a couple of quite capable committers with a CXF-bent so there is new blood getting pumped into that project. HTH, Glen [1] http://www.jroller.com/gmazza/date/20080417 [2] http://www.jroller.com/gmazza/date/20080612 [3] http://www.oasis-open.org/committees/download.php/16790/wss-v1.1-spec-os-SOAPMessageSecurity.pdf [4] http://ws.apache.org/wss4j/ [5] https://xwss.dev.java.net/ On Tue, 2008-07-08 at 18:32 +0200, [EMAIL PROTECTED] wrote: > Hi all, > > we are using Geronimo 2.1.1 and want to be sure to provide WS-Security > 1.1. As far as I could analyse in > http://www.nabble.com/Antwort:-Re:-Re:-Re:-Using-WS-Security-with-Geronimo-2.1.1-p18195804s134.html > > we have Apache CXF Incubator 2.0.2 to work with. > > The question which was already stated here: > http://www.infoq.com/articles/os-ws-stacks-background#view_20508 is also > my question. > > But I would be happy to get an answer for our version Apache CXF Incubator > 2.0.2. > > Any help would be wonderful. > > - Josef > > BGS Beratungsgesellschaft > Software Systemplanung AG > > > > > Niederlassung Rhein/Main > Robert-Koch-Strae 41 > 55129 Mainz > Fon: +49 (0) 6131 / 914-0 > Fax: +49 (0) 6131 / 914-400 > www.bgs-ag.de > Geschftssitz Mainz > Registergericht > Amtsgericht Mainz > HRB 62 50 > > Aufsichtsratsvorsitzender > Dr. Wolfgang Trommer > Vorstand > Hanspeter Gau > Hermann Kiefer > Nils Manegold > > >
