Sanka, running with the new version gives the result (mergeResult_2.xml) which contains _much_ more elements than the result produced with the previous version (mergeResult.xml) - both are semantically the same. IMHO (very humble opinion) the new version is the correct one if I compare it to the examples shown in WS SecurityPolicy spec. Every Assertion that could have an alternative, for example the alogrithm suite could be base256 or some other, are wrapped with Policy/ExactlyOne/All. An Assertion that triggers an on/off property, for example Timestamp, is not wrapped (plain property)
See the attached result file - pretty-printed. Regards, Werner Sanka Samaranayake wrote: > Hi Werner, > > On 12/11/05, Werner Dittmann <[EMAIL PROTECTED]> wrote: > >>Sanka, >> >>great. Can you give a short notice on this list after you checked >>in the fixes? > > > I've just checked in the fixes. PolicyExampleBindingMsg seems to run > without any errors and produce correct output. Can you please update > your local copy and see whether everything is ok ? > > I've bot subscribed every list on any system I'm working > >>with (WSS4J is always available :-) ) >> >>Regards, >>Werner >> >> >>Sanka Samaranayake wrote: >> >>>On 12/11/05, Werner Dittmann <[EMAIL PROTECTED]> wrote: >>> >>> >>>>Sanka, >>>> >>>>thanks for the fixes, they work for the simple case. >>> >>> >>>:) !! >>> >>> >>> >>>>Two problems: I got a compilation problem in PolicyAttachementUtil >>>>(WSDLConstants.WSDL1_1 does not exist). >>> >>> >>>Fixed !! Now it should compile without any errors >>> >>> >>> >>>>Second, when trying the second, complex example (merge of two >>>>policies) I got s stack overflow .... >>>> >>>>Can you run the example and check if this also happens on your >>>>system (I'm running JDK 1.4.2). Thanks. >>> >>> >>>I think its nothing to do with JDK version. Rather it seems to be a >>>bug in the algorithm which causes an infinite recurrsion. I'll fixed >>>it ASAP. >>> >>>Best, >>>Sanka >>> >>> >>> >>>>Regards, >>>>Werner >>>> >>>>--------------------------------------------------------------------- >>>>To unsubscribe, e-mail: [EMAIL PROTECTED] >>>>For additional commands, e-mail: [EMAIL PROTECTED] >>>> >>>> >>> >>> >> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > >
<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy";> <wsp:ExactlyOne> <wsp:All> <sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";> <wsp:Policy> <wsp:ExactlyOne> <wsp:All> <sp:RecipientToken> <wsp:Policy> <wsp:ExactlyOne> <wsp:All> <sp:X509V3Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/> </wsp:All> </wsp:ExactlyOne> </wsp:Policy> </sp:RecipientToken> <sp:InitiatorToken> <wsp:Policy> <wsp:ExactlyOne> <wsp:All> <sp:X509V3Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Always"/> </wsp:All> </wsp:ExactlyOne> </wsp:Policy> </sp:InitiatorToken> <sp:AlgorithmSuite> <wsp:Policy> <wsp:ExactlyOne> <wsp:All> <sp:Basic256/> </wsp:All> </wsp:ExactlyOne> </wsp:Policy> </sp:AlgorithmSuite> <sp:Layout> <wsp:Policy> <wsp:ExactlyOne> <wsp:All> <sp:Strict/> </wsp:All> </wsp:ExactlyOne> </wsp:Policy> </sp:Layout> <sp:IncludeTimestamp/> <sp:EncryptBeforeSigning/> <sp:EncryptSignature/> <sp:ProtectTokens/> <sp:SignedSupportingTokens> <wsp:Policy> <wsp:ExactlyOne> <wsp:All> <sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Once"/> </wsp:All> </wsp:ExactlyOne> </wsp:Policy> </sp:SignedSupportingTokens> <sp:SignedEndorsingSupportingTokens> <wsp:Policy> <wsp:ExactlyOne> <wsp:All> <sp:X509V3Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Once"/> </wsp:All> </wsp:ExactlyOne> </wsp:Policy> </sp:SignedEndorsingSupportingTokens> </wsp:All> </wsp:ExactlyOne> </wsp:Policy> </sp:AsymmetricBinding> <sp:Wss11 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";> <wsp:Policy> <wsp:ExactlyOne> <wsp:All> <sp:RequireSignatureConfirmation/> </wsp:All> </wsp:ExactlyOne> </wsp:Policy> </sp:Wss11> <sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";> <sp:Header Name="Header1" Namespace="uri:namespace_1"/> <sp:Header Name="Header2" Namespace="uri:namespace_2"/> <sp:Body/> </sp:SignedParts> <sp:EncryptedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";> <sp:Header Name="Header2" Namespace="uri:namespace_2"/> <sp:Body/> </sp:EncryptedParts> </wsp:All> </wsp:ExactlyOne> </wsp:Policy>
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
