What version of CXF are you using? What output does that policy generate?

Colm.

On Tue, Feb 14, 2012 at 4:52 PM, blicket <[email protected]> wrote:
>   <wsdl:binding name="tns:MyServiceInterfaceHttpBinding"
>                 type="tns:MyServiceInterface">
>      <wsp:PolicyReference URI="#MyServiceHttpPolicy" />
>      ....
>   </wsdl:binding>
>
>   <wsp:Policy wsu:Id="MyServiceHttpPolicy">
>        <wsp:ExactlyOne>
>            <wsp:All>
>                <sp:TransportBinding>
>                    <wsp:Policy>
>                        <sp:Layout>
>                            <wsp:Policy>
>                                <sp:Lax />
>                            </wsp:Policy>
>                        </sp:Layout>
>                        <sp:IncludeTimestamp />
>                        <sp:AlgorithmSuite>
>                            <wsp:Policy>
>                                <sp:Basic128 />
>                            </wsp:Policy>
>                        </sp:AlgorithmSuite>
>                    </wsp:Policy>
>                </sp:TransportBinding>
>                <sp:SupportingTokens>
>                   <wsp:Policy>
>                        <sp:X509Token
>
> sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient";>
>                           <wsp:Policy>
>                              <sp:WssX509V3Token10 />
>                           </wsp:Policy>
>                        </sp:X509Token>
>                    </wsp:Policy>
>                </sp:SupportingTokens>
>            </wsp:All>
>        </wsp:ExactlyOne>
>    </wsp:Policy>
>
>
> I'm trying to output to this format: timestamp, bst, signature in the
> header:
>
> <soap:Header>
>   <wsse:Security
> xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";>
>      <wsu:Timestamp wsu:Id="Timestamp-210"
>
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";>
>         <wsu:Created>2012-02-10T15:32:29.266Z</wsu:Created>
>         <wsu:Expires>2012-02-10T15:33:29.266Z</wsu:Expires>
>      </wsu:Timestamp>
>      <wsse:BinarySecurityToken
>
> EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
>
> ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509PKIPathv1";
>            wsu:Id="CertId-85232C5CBE6FF799621329233549250313"
>
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";>
>         *****
>      </wsse:BinarySecurityToken>
>      <ds:Signature Id="Signature-209"
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
>         <ds:SignedInfo>
>            <ds:CanonicalizationMethod
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
>            <ds:SignatureMethod
> Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
>            <ds:Reference URI="#id-8">
>               <ds:Transforms>
>                  <ds:Transform
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
>               </ds:Transforms>
>               <ds:DigestMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
>               <ds:DigestValue>********************</ds:DigestValue>
>            </ds:Reference>
>         </ds:SignedInfo>
>         <ds:SignatureValue>
>
>            *************
>         </ds:SignatureValue>
>         <ds:KeyInfo Id="KeyId-85232C5CBE6FF799621329233549250314">
>            <wsse:SecurityTokenReference
> wsu:Id="STRId-85232C5CBE6FF799621329233549250315"
>
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";>
>               <wsse:Reference
> URI="#CertId-85232C5CBE6FF799621329233549250313"
>
> ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509PKIPathv1"/>
>            </wsse:SecurityTokenReference>
>         </ds:KeyInfo>
>      </ds:Signature>
>   </wsse:Security>
> </soap:Header>
>
>
>
>
>
> --
> View this message in context: 
> http://cxf.547215.n5.nabble.com/x-509-security-token-tp5150380p5483028.html
> Sent from the cxf-user mailing list archive at Nabble.com.



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Reply via email to