Hi Ruchith,
I've been trying to do some similar things with Rampart, and running
into a few unknowns. First off, how do I set the configuration to do
multiple steps in the outflow and inflow? In my case, I need to sign the
outgoing message with my local private key, then encrypt with the
server's public key (from the certificate in my keystore).
Secondly, how do I control the type of SecurityTokenReference used in
the message? By default I get an X509Data with X509IssuerSerial; I'd
prefer to use a KeyIdentifier instead. I tried:
ofc.setSignatureKeyIdentifier(WSSHandlerConstants.X509_KEY_IDENTIFIER);
But this didn't appear to have any effect.
- Dennis
Dennis M. Sosnoski
SOA, Web Services, and XML
Training and Consulting
http://www.sosnoski.com - http://www.sosnoski.co.nz
Seattle, WA +1-425-296-6194 - Wellington, NZ +64-4-298-6117
Ruchith Fernando wrote:
Please add the axis2-security-SNAPSHOT.jar [1] into your classpath to
access the OutflowConfiguration/InflowConfiguration classes.
Latest rampart-SNAPSHOT.mar is available here : [2].
Thanks,
Ruchith
[1]
http://people.apache.org/repository/axis2/jars/axis2-security-SNAPSHOT.jar
[2] http://people.apache.org/repository/axis2/mars/rampart-SNAPSHOT.mar
On 8/10/06, Brecht Yperman <[EMAIL PROTECTED]> wrote:
Ok,
Apparently I'm shit at using Axis2, no progress last two days...
Where can I find the latest rampart.mar-build?
Can I rename the .mar-file to .jar and add it to my build path (to use
the OutflowConfiguration class)?
Thanks,
Brecht
-----Original Message-----
From: Ruchith Fernando [mailto:[EMAIL PROTECTED]
Sent: donderdag 10 augustus 2006 10:02
To: axis-user@ws.apache.org
Subject: Re: [Axis2] Configure Rampart dynamically
Hi Brecht,
Yes it is possible. Please see here:
http://marc.theaimsgroup.com/?l=axis-user&m=115517624610919&w=2
Thanks,
Ruchith
On 8/10/06, Brecht Yperman <[EMAIL PROTECTED]> wrote:
>
>
>
>
> Hi,
>
>
>
> how do I configure Rampart dynamically?
>
>
>
> I tried something like this, but it does not work...
>
>
>
> private void configureSecurity(ServiceClient client) throws AxisFault
{
>
> if (true /*security == on*/) {
>
> Parameter parm = new Parameter();
>
> parm.setName("OutflowSecurity");
>
>
>
> OMFactory fact = OMAbstractFactory.getOMFactory();
>
>
>
> OMNamespace emptyNS = fact.createOMNamespace(null,
"");
>
> OMElement actionEl = fact.createOMElement("action",
> emptyNS);
>
>
>
> OMElement itemsEl = fact.createOMElement("items",
> emptyNS);
>
> itemsEl.setText("UsernameToken");
>
> actionEl.addChild(itemsEl);
>
>
>
> OMElement userEl = fact.createOMElement("user",
emptyNS);
>
> userEl.setText("bob");
>
> actionEl.addChild(userEl);
>
>
>
> OMElement pwCbEl =
> fact.createOMElement("passwordCallbackClass", emptyNS);
>
> pwCbEl.setText("CallbackHandler");
>
> actionEl.addChild(pwCbEl);
>
>
>
> parm.setParameterElement(actionEl);
>
>
>
> client.engageModule(new QName("rampart-1.0"));
>
> }
>
> }
>
>
>
> Thanks,
>
> Brecht
>
>
>
> Invenso - The "Integration Software" specialists.
> _____________________________________________
>
> Brecht Yperman
> Development team
>
> Direct: +32 (0)3 780 30 05
> Email: [EMAIL PROTECTED]
>
> INVENSO bvba
> Industriepark-West 75
> 9100 Sint-Niklaas
> Belgium - Europe
>
> Phone: +32 (0)3 780 30 02
> Fax: +32 (0)3 780 30 03
> Email: [EMAIL PROTECTED]
> Website: www.invenso.com
>
> "E-mail disclaimer: This e-mail, and any attachments thereto, is
intended
> only for use by the addressee(s) named herein and may contain legally
> privileged and/or confidential information. If you are not the
intended
> recipient, please note that any review, dissemination, disclosure,
> alteration, printing, copying or transmission of this e-mail and/or
any file
> transmitted with it, is strictly prohibited and may be unlawful. If
you have
> received this e-mail by mistake, please immediately notify the sender
and
> permanently delete the original as well as any copy of any e-mail and
any
> printout thereof."
>
>
--
www.ruchith.org
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
