Unsure, but I believe you'll want two <entry> elements in your cxf.xml, one as you have below except without the mystskey config element you have there, and then a second <entry> like this: https://github.com/Talend/tesb-rt-se/blob/83011aebc68c67cb177ff7e800afbe9bbcab7049/examples/cxf/jaxws-cxf-sts/client/src/main/resources/cxf.xml for the sts configuration. They should both go under the same jaxws:client element, and probably under the same jaxws:properties element as well.

HTH,
Glen

On 05/24/2012 12:16 PM, Gina Choi wrote:
Hi All,

I have WSP, WSC and STS(Apache CXF). I am going to use Symmetric bindings
between them. So, I added certificate both WSP and STS in client
truststore, but I need to configure them in the client config file.

Following is part of cxf.xml file. But as you can see, I am using
ws-security.encryption.username twice for sts and service certificate and
this is not right. How does program tell which one is which one?

                        <map>
                            <!--entry key="ws-security.signature.username"
value="myclientkey"/-->
                             <entry key="ws-security.callback-handler"
value="client.ClientCallbackHandler"/>
        <entry key="ws-security.username" value="alice"/>
        <entry key="ws-security.signature.properties"
value="clientKeystore.properties"/>
        <entry key="ws-security.encryption.properties"
value="clientKeystore.properties"/>
        <entry key="ws-security.encryption.username" value="mystskey"/>
        <entry key="ws-security.encryption.username" value="myservicekey"/>

I have following content in the clientKeystore.properties.

org.apache.ws.security.crypto.merlin.keystore.type=jks
org.apache.ws.security.crypto.merlin.keystore.password=cspass
org.apache.ws.security.crypto.merlin.keystore.alias=myclientkey
org.apache.ws.security.crypto.merlin.file=wsclientstore.jks
                        </map>

And my client.ClientCallbackHandler class has information about password
for mystskey and myservicekey. How do I configure it right?

Thanks in advance.

Gina



--
Glen Mazza
Talend Community Coders
coders.talend.com
blog: www.jroller.com/gmazza

Reply via email to