In my ongoing quest to upgrade legacy code, I've noticed a slimming down of what's held in WSSConfig objects. That's fine, but I'm having trouble figuring out where things have moved, or if the things I'm looking for are necessary/relevant anymore. Here's a couple of specific cases:
1. At one point, I'm creating a WSSecurityEngine and setting some values on it, like so: securityEngine.getWssConfig().setEnableSignatureConfirmation(true); WSSConfig doesn't have that flag anymore as far as I can tell. Is this default behavior now, or is there some other way to enable that behavior? I see that I can set it on a RequestData, but I don't have one of those at the point I'm setting up the security engine. 2. WSSConfig used to have a method isWsiBSPCompliant(), which would trigger slightly different behaviors for me depending on its setting when I retrieved in from a RequestData object. Is that what the RequestData.isDisableBSPEnforcement() flag is now? Thanx, Stephen W. Chappell
