What version of CXF are you using? What output does that policy generate? Colm.
On Tue, Feb 14, 2012 at 4:52 PM, blicket <[email protected]> wrote: > <wsdl:binding name="tns:MyServiceInterfaceHttpBinding" > type="tns:MyServiceInterface"> > <wsp:PolicyReference URI="#MyServiceHttpPolicy" /> > .... > </wsdl:binding> > > <wsp:Policy wsu:Id="MyServiceHttpPolicy"> > <wsp:ExactlyOne> > <wsp:All> > <sp:TransportBinding> > <wsp:Policy> > <sp:Layout> > <wsp:Policy> > <sp:Lax /> > </wsp:Policy> > </sp:Layout> > <sp:IncludeTimestamp /> > <sp:AlgorithmSuite> > <wsp:Policy> > <sp:Basic128 /> > </wsp:Policy> > </sp:AlgorithmSuite> > </wsp:Policy> > </sp:TransportBinding> > <sp:SupportingTokens> > <wsp:Policy> > <sp:X509Token > > sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient"> > <wsp:Policy> > <sp:WssX509V3Token10 /> > </wsp:Policy> > </sp:X509Token> > </wsp:Policy> > </sp:SupportingTokens> > </wsp:All> > </wsp:ExactlyOne> > </wsp:Policy> > > > I'm trying to output to this format: timestamp, bst, signature in the > header: > > <soap:Header> > <wsse:Security > xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"> > <wsu:Timestamp wsu:Id="Timestamp-210" > > xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"> > <wsu:Created>2012-02-10T15:32:29.266Z</wsu:Created> > <wsu:Expires>2012-02-10T15:33:29.266Z</wsu:Expires> > </wsu:Timestamp> > <wsse:BinarySecurityToken > > EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" > > ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509PKIPathv1" > wsu:Id="CertId-85232C5CBE6FF799621329233549250313" > > xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"> > ***** > </wsse:BinarySecurityToken> > <ds:Signature Id="Signature-209" > xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> > <ds:SignedInfo> > <ds:CanonicalizationMethod > Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/> > <ds:SignatureMethod > Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/> > <ds:Reference URI="#id-8"> > <ds:Transforms> > <ds:Transform > Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/> > </ds:Transforms> > <ds:DigestMethod > Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> > <ds:DigestValue>********************</ds:DigestValue> > </ds:Reference> > </ds:SignedInfo> > <ds:SignatureValue> > > ************* > </ds:SignatureValue> > <ds:KeyInfo Id="KeyId-85232C5CBE6FF799621329233549250314"> > <wsse:SecurityTokenReference > wsu:Id="STRId-85232C5CBE6FF799621329233549250315" > > xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"> > <wsse:Reference > URI="#CertId-85232C5CBE6FF799621329233549250313" > > ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509PKIPathv1"/> > </wsse:SecurityTokenReference> > </ds:KeyInfo> > </ds:Signature> > </wsse:Security> > </soap:Header> > > > > > > -- > View this message in context: > http://cxf.547215.n5.nabble.com/x-509-security-token-tp5150380p5483028.html > Sent from the cxf-user mailing list archive at Nabble.com. -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com
