Pete Hendry wrote:
1) The WSS4J server configuration (deploy.wsdd) has the order of steps
wrong for
scenarios 4, 5, 6 and 7. The Timestamp should be the first step (in
the interop docuemnt
it appears last in the security header which means it happens
first). In the configuration
the Timestamp is last and so the tests fail if the Timestamp is
added first as per the
interop documents.
I should add that it is likely the configuration will work against other
toolkits which don't enforce strict ordering where the order does not
matter as in these scenarios. So if a WSS4J client sent a message with
the configuration as-is it would work against our server as we would not
worry about the timestamp being first or last. Where it would fail is
when a client in another toolkit sends a request with the ordering as in
the interop documents to a server using WSS4J.
Pete
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
