Re: username token + XML encryption + XML digital signature - need help please :(

[Luca Risello]

Hi Fernando,

If I have understand your hint I have to modify both the client wsdd and the server wsdd.

 

I need to provide:

 

1) UsernameToken

2) Xml Encryption

3) Xml Digital Signature

 

I've just created the PWcallback class client and server side (for the def user "wss4j" pass "security" like this tutorial http://ws.apache.org/wss4j/axis.html)  but I've some problems to configure my scenario for the 3 features...

 

This is my server side wsdd:

 

<deployment xmlns="http://xml.apache.org/axis/wsdd/" xmlns:java="http://xml.apache.org/axis/wsdd/providers/java">
 <service name="Saluto2" provider="java:RPC" style="rpc" use="literal">
<requestFlow>
  <handler type="java:org.apache.ws.axis.security.WSDoAllReceiver">
    <parameter name="passwordCallbackClass" value="org.apache.ws.axis.oasis.PWCallback"/>
    <parameter name="action" value="Signature Encrypt"/>
    <parameter name="signaturePropFile" value="crypto.properties" />
  </handler>
 </requestFlow> 
<parameter name="className" value="prova.Saluto" />
<parameter name="allowedMethods" value="saluto" />
<parameter name="scope" value="Request" />
</service>
</deployment>

 

client side wsdd:

 

<deployment xmlns="http://xml.apache.org/axis/wsdd/" xmlns:java="http://xml.apache.org/axis/wsdd/providers/java">
<transport name="http" pivot="java:org.apache.axis.transport.http.HTTPSender"/>
 <globalConfiguration >
    <requestFlow >
       <handler type= "java:org.apache.ws.axis.security.WSDoAllSender" >
       <parameter name="action" value="Signature Encrypt"/>
       <parameter name="passwordCallbackClass" value="org.apache.ws.axis.oasis.PWCallback"/>
       <parameter name="passwordType" value="PasswordText" />  
       <parameter name="encryptionPropFile" value="crypto.properties" />   
       <parameter name="encryptionKeyIdentifier" value="X509KeyIdentifier" />
       <parameter name="user" value="wss4j" />

       <parameter name="signaturePropFile" value="crypto.properties" />
    <parameter name="encryptionParts" value="{Element}{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}UsernameToken"/>
       </handler>
    </requestFlow>
 </globalConfiguration >
</deployment>

 

 

 

Is It right?

 

Thank you very much...

 

Bye

__________________________________________________
Do You Yahoo!?
Poco spazio e tanto spam? Yahoo! Mail ti protegge dallo spam e ti da tanto spazio gratuito per i tuoi file e i messaggi
http://mail.yahoo.it