Basically we figure out the Principal based on the Signature using its certs. We can extract the Principal similar to the way shown in the code snippet here [1] (see line 23 and 24) and authenticate.
This [2] will also be a useful reference on extracting the security results from the message context. Thanks, Ruchith [1] http://rafb.net/paste/results/GoAELv28.html [2] http://www.wso2.net/kb/169 On 9/13/06, vivek srinivasan <[EMAIL PROTECTED]> wrote:
Ok .that makes sense, but what should be the action name for X509 based authentication? In case of signature or encryption we use the action name of Signature and Encrypt respectiviely. I do not see any any action name exclusively for X509 authentication. >From: "Ruchith Fernando" <[EMAIL PROTECTED]> >To: "vivek srinivasan" <[EMAIL PROTECTED]> >CC: [email protected] >Subject: Re: X.509 authentication samples >Date: Tue, 12 Sep 2006 13:41:51 +0530 > >Hi, > >Here's one [1] on authenticating users with their X509 certs and then >sending as encrypted response back to them. Note that this is using >Rampart (which uses WSS4J) with Axis2. > >Thanks, >Ruchith > >[1] http://www.wso2.net/tutorials/rampart/java/2006/09/06/sec-msg-exchg > >On 9/11/06, vivek srinivasan <[EMAIL PROTECTED]> wrote: >>Are there samples where a web services client creates a SOAP message for a >>WS Call, including the WS_Security headers with an X509 certificate of the >>user who should be the subject of this message? >> >>_________________________________________________________________ >>Windows Live Spaces is here! It's easy to create your own personal Web >>site. >> http://spaces.live.com/signup.aspx >> >> >>--------------------------------------------------------------------- >>To unsubscribe, e-mail: [EMAIL PROTECTED] >>For additional commands, e-mail: [EMAIL PROTECTED] >> >> > > >-- >www.ruchith.org > >--------------------------------------------------------------------- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands, e-mail: [EMAIL PROTECTED] > _________________________________________________________________ Check the weather nationwide with MSN Search: Try it now! http://search.msn.com/results.aspx?q=weather&FORM=WLMTAG
-- www.ruchith.org --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
