Re: WSS4J/Axis1 and .Net integration for web service security

[José Ferreiro]

Hello,

I strong believe I did what you want to do in the past.
Please refer to the article I use.

Server is: FULLY Java (Axis 1.4 + WSS4J 1.5.3)
.Net client used c# using dotnet framework 2.0 and Web Services enhancements
3.0 (WSE)
Java client used Java, WSS4J 1.5.2

I manage to exchange message on the above configuration.
Please refer to the article I wrote[1]. You may also find examples on the
WSS4J distribution.

Rgds.

José FERREIRO
ing.sys.com.dipl.EPFL

[1] -
http://magnot.blogspot.com/2008/04/secure-web-services-interoperability.html


On Thu, Dec 17, 2009 at 11:20 PM, mule_user  wrote:

>
> Can anyone share with me some good articles, or sample example on how to
> enable Sign and Encryption using X509 (self signed) certificate with .Net
> (WSE3) as a cleint and also as a server and Java web application as a
> client
> and also as a server? WSS4J web site is not thorough.
> --
> View this message in context:
> http://old.nabble.com/WSS4J-Axis1-and-.Net-integration-for-web-service-security-tp26836052p26836052.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>


-- 
José Ferreiro
Systems Analysis and Design Specialist
MSc in Communication Systems, EPFL.

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: < character converted to < in request XML

[José Ferreiro]

This is a work around I found.
It is a but into wss4j.

This problem does not happend if you do not use encryption or other.


See methods below on:

http://commons.apache.org/lang/api/org/apache/commons/lang/StringEscapeUtils.html

you should escape sent response by server
org.apache.commons.lang.StringEscapeUtils.escapeXml


and then on the client you should unscape received response
org.apache.commons.lang.StringEscapeUtils.unescapeXml


Hope this helps.


On Wed, Nov 11, 2009 at 8:38 PM, Selvaraj, Peter (eBusiness) <
peter.selva...@thehartford.com> wrote:

>  Hi,
>
> Could you please let me know how did you solve this using apache common
> utilities? Any sample code you have?
>
>
> Thanks & Regards,
>
> Peter R Selvaraj
>
>  --
> *From:* jose.ferre...@gmail.com [mailto:jose.ferre...@gmail.com] *On
> Behalf Of *José Ferreiro
> *Sent:* Wednesday, November 11, 2009 2:36 PM
>
> *To:* axis-user@ws.apache.org
> *Subject:* Re: < character converted to < in request XML
>
> Is this *<  *the payload?
> I had simular issue when using WSS4J, which if I am not wrong is within
> Rampart.
>
> I solved the solution by escaping the *< *using appche commons utilities
> if I am not wrong.
> Both at client and server side.
>
> Hope this helps.* *
>
> On Wed, Nov 11, 2009 at 8:19 PM, Selvaraj, Peter (eBusiness) <
> peter.selva...@thehartford.com> wrote:
>
>>  Hi,
>>
>> I'm using Axis2 1.4 and Rampart 1.4 java client which creates the request
>> xml and invokes the webservice.
>>
>> In the request xml, I can see the* <* character is converted to* < *
>>
>> Because of this I get ErrorResponse from the webservice.
>>
>> Any idea how to avoid this character conversion.
>>
>> Thanks & Regards,
>>
>> Peter R Selvaraj
>>
>> 
>> This communication, including attachments, is for the exclusive use of 
>> addressee and may contain proprietary, confidential and/or privileged 
>> information.  If you are not the intended recipient, any use, copying, 
>> disclosure, dissemination or distribution is strictly prohibited.  If you 
>> are not the intended recipient, please notify the sender immediately by 
>> return e-mail, delete this communication and destroy all copies.
>> 
>>
>>
>
>
> --
> José Ferreiro
> Systems Analysis and Design Specialist
> MSc in Communication Systems, EPFL.
>
> "Think little goals and expect little achievements. Think big goals and win
> big success."  David Joseph Schwartz
>
> 
> This communication, including attachments, is for the exclusive use of 
> addressee and may contain proprietary, confidential and/or privileged 
> information.  If you are not the intended recipient, any use, copying, 
> disclosure, dissemination or distribution is strictly prohibited.  If you are 
> not the intended recipient, please notify the sender immediately by return 
> e-mail, delete this communication and destroy all copies.
> 
>
>


-- 
José Ferreiro
Systems Analysis and Design Specialist
MSc in Communication Systems, EPFL.

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: < character converted to < in request XML

[José Ferreiro]

Is this *<  *the payload?
I had simular issue when using WSS4J, which if I am not wrong is within
Rampart.

I solved the solution by escaping the *< *using appche commons utilities if
I am not wrong.
Both at client and server side.

Hope this helps.* *

On Wed, Nov 11, 2009 at 8:19 PM, Selvaraj, Peter (eBusiness) <
peter.selva...@thehartford.com> wrote:

>  Hi,
>
> I'm using Axis2 1.4 and Rampart 1.4 java client which creates the request
> xml and invokes the webservice.
>
> In the request xml, I can see the* <* character is converted to* < *
>
> Because of this I get ErrorResponse from the webservice.
>
> Any idea how to avoid this character conversion.
>
> Thanks & Regards,
>
> Peter R Selvaraj
>
> 
> This communication, including attachments, is for the exclusive use of 
> addressee and may contain proprietary, confidential and/or privileged 
> information.  If you are not the intended recipient, any use, copying, 
> disclosure, dissemination or distribution is strictly prohibited.  If you are 
> not the intended recipient, please notify the sender immediately by return 
> e-mail, delete this communication and destroy all copies.
> 
>
>


-- 
José Ferreiro
Systems Analysis and Design Specialist
MSc in Communication Systems, EPFL.

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: how to set timeout in axis 1.4 web service client

[José Ferreiro]

Hello Ashish,

In order to complement the previously answer from Bauer, please take a look
here:
http://wiki.apache.org/ws/FrontPage/Axis/JavaTimeout

Hope this helps.

José Ferreiro

On Wed, Sep 30, 2009 at 8:40 PM, Ashish Kulkarni <
ashish.kulkarn...@gmail.com> wrote:

> HiThanks, do you have example of getting MessageContext and setting this
> message context to stub, all i have in my program is
>
> ExecutePortTypeBindingStub stub = new ExecutePortTypeBindingStub(new
> URL(endPoint), null);
> stub.callMethod(parameter)
>
>
>
> On Wed, Sep 30, 2009 at 1:34 PM, Bauer Horscht wrote:
>
>> In a custom handler, you can directly set it on the MessageContext object
>> (mc):
>>
>> mc.setTimeout(120*1000);   //120 seconds
>>
>>
>>
>> Ashish Kulkarni schrieb:
>>
>>> Hi
>>> How do we set connection timeout in axis 1.4 web service client, i think
>>> default is 10 minutes, I want to timeout if web service does not respond in
>>> 2 minutes, how can i do so
>>>
>>> --
>>> Ashish
>>> www.ayurwellness.com <http://www.ayurwellness.com>
>>> www.mysoftwareneeds.com <http://www.mysoftwareneeds.com>
>>>
>>
>
>
> --
> Ashish
> www.ayurwellness.com
> www.mysoftwareneeds.com
>



-- 
José Ferreiro
Systems Analysis and Design Specialist
MSc in Communication Systems, EPFL.

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: Is WRAPPED LITERAL web service not compatible for C# clients?

[José Ferreiro]

Hello,

in order to achieve interoperability with C# I have:



There was also another thing, but I do not remember now.
I know it was about the namimg and they should be the same...
Maybe this after I see on my deployed WS.

 qname="findPersons"

remove the namespace adn you will see.



Hope this helps! Let me know.

José Ferreiro
EPFL




On Tue, Sep 29, 2009 at 6:39 PM, Srinivasa K wrote:

> Thank you very much for your reply on this.
>
> We dont have C# connectivity issue. Below is the wsdd file where style is
> wrapped and use is literal. This is not working from C# client.
> The response has null references. But, in server side, we clearly see
> incoming and outgoing soap messages.
>
>  If I change style to "rpc" and use to "encoded", C# client gettting the
> results without changing anything esle. I dont know whats missing here. I
> really appreciate if you have any clue on this.
>
> Please note that I changed some namespace in the below wsdd file just for
> company privacy.
>
> +
>use="literal">
>   
> 
>  
>   https://us.org.test/WS/services/perservice"/<https://us.org.test/WS/services/perservice%22/>
> >
>   
>   https://us.org.test/WS/services/perservice,http://data.ws.test.org.us"/<https://us.org.test/WS/services/perservice,http://data.ws.test.org.us%22/>
> >
>   
>value="us.org.test.ws.PersonServiceImpl"/>
>   
>   
>xmlns:operNS="https://us.org.test/WS/services/perservice";
> returnQName="retNS:findPersonsReturn" xmlns:retNS="
> https://us.org.test/WS/services/perservice"; returnType="rtns:
> WSSearchResult" xmlns:rtns="http://data.ws.test.org.us"; soapAction="" >
>     https://us.org.test/WS/services/perservice"; type="tns: WSSearchCriteria"
> xmlns:tns="http://data.ws.test.org.us"/ <http://data.ws.test.org.us%22/>>
>   
> .
> .
> .
> .
> .
>
>
> +
>
> Thanks,
> Srini
> 2009/9/26 José Ferreiro 
>
>
>> Hello,
>>
>> I am using "Wrapped" and it works well with Java and C# dotnet 2.0
>> See links below.
>>
>> ht
>> tp://magnot.blogspot.com/2008/04/secure-web-services-interoperability.html<http://magnot.blogspot.com/2008/04/secure-web-services-interoperability.html>
>>
>> http://atmanes.blogspot.com/2005/03/wrapped-documentliteral-convention.html
>>
>> Hope this helps.
>>
>> José Ferreiro
>>
>>   On Fri, Sep 25, 2009 at 11:22 PM, Srinivasa K > > wrote:
>>
>>> We are having issue with WRAPPED LITERAL web service for our C# clients.
>>> The response object contains nulls.
>>>
>>> But, If I use RPC ENCODED, they are working fine. I see some
>>> discouragement to use the RPC ENCODED.
>>>
>>> I really appreciate if somebody suggest the right use and style of WSDL
>>> for both Java and C# clients.
>>>
>>> We produce web services using Axis1.4
>>>
>>> Thanks,
>>>
>>> Srini
>>>
>>
>>
>>
>> --
>> José Ferreiro
>> Systems Analysis and Design Specialist
>> MSc in Communication Systems, EPFL.
>>
>> "Think little goals and expect little achievements. Think big goals and
>> win big success."  David Joseph Schwartz
>>
>
>


-- 
José Ferreiro
Systems Analysis and Design Specialist
MSc in Communication Systems, EPFL.

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: Is WRAPPED LITERAL web service not compatible for C# clients?

[José Ferreiro]

Hello,

I am using "Wrapped" and it works well with Java and C# dotnet 2.0
See links below.

http://magnot.blogspot.com/2008/04/secure-web-services-interoperability.html<http://magnot.blogspot.com/2008/04/secure-web-services-interoperability.html>
http://atmanes.blogspot.com/2005/03/wrapped-documentliteral-convention.html

Hope this helps.

José Ferreiro

On Fri, Sep 25, 2009 at 11:22 PM, Srinivasa K wrote:

> We are having issue with WRAPPED LITERAL web service for our C# clients.
> The response object contains nulls.
>
> But, If I use RPC ENCODED, they are working fine. I see some discouragement
> to use the RPC ENCODED.
>
> I really appreciate if somebody suggest the right use and style of WSDL for
> both Java and C# clients.
>
> We produce web services using Axis1.4
>
> Thanks,
>
> Srini
>



-- 
José Ferreiro
Systems Analysis and Design Specialist
MSc in Communication Systems, EPFL.

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: activation.jar and mailapi.jar are missing from the download

[José Ferreiro]

Dear Hetal,

You may download the missing jars for example by using
http://www.findjar.com/

Then, place the jar in the corresponding folder.

Have a great day.
HTH,

José Ferreiro

On Thu, Jun 11, 2009 at 1:45 AM, Hetal Desai  wrote:

>
> Hello,
> I downloaded Axis 1.4 Zip but its missing activation.jar and mailapi.jar. I
> tried downloading from different mirror sites but still didnot have this
> file.
>
> I need these files to use wsdl2java for Siebel CRM OD wsdl.
>
> Appreciate your help,
> Thanks,
> Hetal
>
>
>
>
>
-- 
José Ferreiro

MSc in Communication Systems, EPFL.
"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: wss4j with Axis 1( no Axis2) comunicating with WSE3 configured webservice

[José Ferreiro]

Hello!

I successfully made a secure dotnet client using the dotnet. 2.0 and Web
services enhancement 3.0 (WSE 3.0) talking to axis 1.4 and wss4j 1.5.3 [1]
with *x509 v3 certificates*.

See this page which helps me as a start [2]! There is the equivalent file of
client.wsdd in the dotnet framework nammed as web.config. In my project I
called it [3] wse3PolicyCache.config. The name does not matter...

Happy Axis and Happy coding!

José Ferreiro



[1]-
http://magnot.blogspot.com/2008/04/secure-web-services-interoperability.html
[2]- http://erlend.oftedal.no/blog/?blogid=12
[3]-
http://bp1.blogger.com/_SFCs1WYrqtY/SBXPETktd3I/AXE/nNI7mNpQS6c/s1600-h/visualStudio.png
[4]-
http://bp0.blogger.com/_SFCs1WYrqtY/SBXILDktdzI/AWk/9wqequ_9vNk/s1600-h/pfx-pkcs12-1.PNG

On Fri, May 29, 2009 at 6:39 PM, Wishing Carebear <
wishing.careb...@gmail.com> wrote:

> Hello:
> I'm using wss4j with Apache Axis 1.4 (no Axis2). Wondering if someone could
> provide what should be the equivalent client.wsdd file for the following
> policy file. I have tried posting this in wss4j newsgroup but could not get
> any response. Hoping some one could give me some pointers. Thanks.
>
> http://schemas.microsoft.com/wse/2005/06/policy";>
>   
>  type="Microsoft.Web.Services3.Design.UsernameForCertificateAssertion,
> Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral,
> PublicKeyToken=31bf3856ad364e35" />
>  type="Microsoft.Web.Services3.Design.X509TokenProvider,
> Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral,
> PublicKeyToken=31bf3856ad364e35" />
>  type="Microsoft.Web.Services3.Design.RequireActionHeaderAssertion,
> Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral,
> PublicKeyToken=31bf3856ad364e35" />
>   
>   
>  renewExpiredSecurityContext="true" requireSignatureConfirmation="false"
> messageProtectionOrder="SignBeforeEncrypt" requireDerivedKeys="true"
> ttlInSeconds="300">
>   
>  findValue="CN=TMPDMDevelopment" findType="FindBySubjectDistinguishedName" />
>   
>   
> 
> 
> 
>   
> 
> 
>   
> 
>

Re: Axis 1.3 webservice C# client

[José Ferreiro]

Hello Santosh,

Well, I am using "wrapped" document/literal convention as this is the one to
achieve interoperability between Microsoft .net and Java server side based
on Axis 1.x. I can not say for RPC/encoded but according to Anne Thomas
Manes[1] .net doesn't support rpc/literal.

Hope this helps.

Jose Ferreiro


[1] -
http://atmanes.blogspot.com/2005/03/wrapped-documentliteral-convention.htmlby
Anne Thomas Manes



On Mon, Mar 23, 2009 at 9:47 AM, sh_santosh  wrote:

>
> Dear Jose,
>
> Can you please provide some link from where i can know about - How to
> consume Axis 1.3 RPC/encoded web services from C# client program.
>
> Any specific attributes / value need to put while consuming from C# client
> program in client program.
>
> Regards,
> Santosh
>
>
>
>
> José Ferreiro wrote:
> >
> > Hello Santosh,
> >
> > I assume that you already have a wsdl.
> >
> > Then to work with C# you may use the wsdl.exe tool provided by Microsoft.
> > I
> > suggest you to use at least .Net framework 2.0.
> >
> > See those links [1], [2]. It is possible you may face some
> > interoperabilitiy
> > issues. For that refer to the samples in the axis 1.3 package.
> >
> > Hope this helps.
> > Warmest regards
> > José
> >
> > [1] - 
> > http://msdn.microsoft.com/en-us/library/7h3ystb6(VS.80).aspx<http://msdn.microsoft.com/en-us/library/7h3ystb6%28VS.80%29.aspx>
> > [2] -
> > http://developer.searchmarketing.yahoo.com/docs/V4/sample_code/net.php
> >
> >
> >
> > On Mon, Mar 23, 2009 at 8:06 AM, sh_santosh 
> > wrote:
> >
> >>
> >> Dear Vali,
> >>
> >> How to write C# client code to access/consume Axis 1.3 web services
> >> developed in java.
> >>
> >> Please reply.
> >>
> >>
> >> Regards,
> >> Santosh
> >>
> >>
> >>
> >> Vali Grigoras wrote:
> >> >
> >> > Hello,
> >> >
> >> > I have some Axis webservices protect the service  with user and
> >> password
> >> > using WSS4J.  I can connect to the webservice via java client no
> >> problem,
> >> > but I need to do the same from C# client. I don't know how to provide
> >> user
> >> > credentials from a C# client. Have you guys done anything like that?.
> >> >
> >> > Thanks,
> >> > Vali
> >> >
> >> >
> >>
> >> --
> >> View this message in context:
> >>
> http://www.nabble.com/Axis-1.3-webservice-C--client-tp5749022p22655163.html
> >> Sent from the Axis - User mailing list archive at Nabble.com.
> >>
> >>
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/Axis-1.3-webservice-C--client-tp5749022p22656194.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>

Re: Axis 1.3 webservice C# client

[José Ferreiro]

Hello again Santosh,

If it is a secure client you need to use the Web Service Enhancements (WSE)
from Microsoft [1] and use wsewsdl3.exe command to generate a proxy if you
choose to use WSE version 3.0.

Hope this helps.
Rgds,
/JF

[1] - http://msdn.microsoft.com/en-us/library/aa529578.aspx


2009/3/23 José Ferreiro 

> Hello Santosh,
>
> I assume that you already have a wsdl.
>
> Then to work with C# you may use the wsdl.exe tool provided by Microsoft. I
> suggest you to use at least .Net framework 2.0.
>
> See those links [1], [2]. It is possible you may face some
> interoperabilitiy issues. For that refer to the samples in the axis 1.3
> package.
>
> Hope this helps.
> Warmest regards
> José
>
> [1] - 
> http://msdn.microsoft.com/en-us/library/7h3ystb6(VS.80).aspx<http://msdn.microsoft.com/en-us/library/7h3ystb6%28VS.80%29.aspx>
> [2] -
> http://developer.searchmarketing.yahoo.com/docs/V4/sample_code/net.php
>
>
>
>
> On Mon, Mar 23, 2009 at 8:06 AM, sh_santosh wrote:
>
>>
>> Dear Vali,
>>
>> How to write C# client code to access/consume Axis 1.3 web services
>> developed in java.
>>
>> Please reply.
>>
>>
>> Regards,
>> Santosh
>>
>>
>>
>> Vali Grigoras wrote:
>> >
>> > Hello,
>> >
>> > I have some Axis webservices protect the service  with user and password
>> > using WSS4J.  I can connect to the webservice via java client no
>> problem,
>> > but I need to do the same from C# client. I don't know how to provide
>> user
>> > credentials from a C# client. Have you guys done anything like that?.
>> >
>> > Thanks,
>> > Vali
>> >
>> >
>>
>> --
>> View this message in context:
>> http://www.nabble.com/Axis-1.3-webservice-C--client-tp5749022p22655163.html
>> Sent from the Axis - User mailing list archive at Nabble.com.
>>
>>
>
>

Re: Axis 1.3 webservice C# client

[José Ferreiro]

Hello Santosh,

I assume that you already have a wsdl.

Then to work with C# you may use the wsdl.exe tool provided by Microsoft. I
suggest you to use at least .Net framework 2.0.

See those links [1], [2]. It is possible you may face some interoperabilitiy
issues. For that refer to the samples in the axis 1.3 package.

Hope this helps.
Warmest regards
José

[1] - http://msdn.microsoft.com/en-us/library/7h3ystb6(VS.80).aspx
[2] - http://developer.searchmarketing.yahoo.com/docs/V4/sample_code/net.php



On Mon, Mar 23, 2009 at 8:06 AM, sh_santosh  wrote:

>
> Dear Vali,
>
> How to write C# client code to access/consume Axis 1.3 web services
> developed in java.
>
> Please reply.
>
>
> Regards,
> Santosh
>
>
>
> Vali Grigoras wrote:
> >
> > Hello,
> >
> > I have some Axis webservices protect the service  with user and password
> > using WSS4J.  I can connect to the webservice via java client no problem,
> > but I need to do the same from C# client. I don't know how to provide
> user
> > credentials from a C# client. Have you guys done anything like that?.
> >
> > Thanks,
> > Vali
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/Axis-1.3-webservice-C--client-tp5749022p22655163.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>

Re: Error in signature with X509Token

[José Ferreiro]

Looks like the file *server.jks* cannot be loaded  keys\\server.jks and not
found. Try to type the whole path..

or keys/server.jks


Whole localtion path c:/tomcat/foldername/foldername/keys/server.jks
HTH, Rgds,

Jose Ferreiro

On Mon, Feb 9, 2009 at 11:41 AM, TomazM  wrote:

> I still have problem, now I get error:
>
> ..
> org.apache.ws.security.util.Loader  - Caught Exception while in
> Loader.getResource. This may be innocuous.
> java.lang.NullPointerException
> ...
>
> org.apache.ws.security.components.crypto.Merlin cannot create instance
>
> What did you write in service.xml?
>
> Regard, Tomaz
>
>
> Erwin Reinhoud wrote:
> > Hello Tomaz,
> >
> > In my sanbox env i have put the file in the tomcat bin dir and no path
> indication in service.xml.
> >
> > Regards,
> >
> > Erwin
> >
> > -Oorspronkelijk bericht-
> > Van: TomazM [mailto:tomaz.majerh...@arnes.si]
> > Verzonden: donderdag 5 februari 2009 12:13
> > Aan: axis-user@ws.apache.org
> > Onderwerp: Re: Error in signature with X509Token
> >
> > I'm using rampart version 1.4, but it seem as the
> rampart(org.apache.ws.security.crypto.merlin.file) doesn't pick the
> keystore, because I change the name to a  nonexistent file and I don't get
> any error that file don't exist.
> >
> > Regards, Tomaz
> >
> > Erwin Reinhoud wrote:
> >> Hello Tomaz,
> >>
> >> Try also using rampart version 1.4 io 1.3.
> >>
> >> Regards,
> >> Erwin
> >>
> >> --
> >> --
> >> *Van:* m4rkuz [mailto:m4r...@gmail.com]
> >> *Verzonden:* woensdag 4 februari 2009 15:16
> >> *Aan:* axis-user@ws.apache.org
> >> *Onderwerp:* Re: Error in signature with X509Token
> >>
> >> Hi Tomaz,
> >>
> >> I think you should attach you'r policy.xml file  and your
> >> services.xml, and maybe an example of the soap message generated, so
> >> it could be esiar to help you.
> >>
> >>
> >>
> >> Marcus V. Sánchez D.
> >> __
> >> Enterprise Developer.
> >> Sun Certified Java Programmer (SCJP)
> >>
> >>
> >> On Wed, Feb 4, 2009 at 9:08 AM, TomazM  >> > wrote:
> >>
> >> Env:
> >>OS: Microsoft Windows XP [Version 5.1.2600]
> >>java: Java(TM) SE Runtime Environment (build 1.6.0_10-b33)
> >>Tomcat: 6.0.16
> >>Axis2: 1.4.1
> >>Rampart: 1.3
> >>
> >>
> >> I'm trying to sign message with my CallbackHandler and wsp:Policy,
> >> keys are in keystore of JKS type(server.jks and client.jks)
> >>
> >> 1) In service.xml  I have:
> >> .
> >>
> rampart.sign.service.SecurityHandler
> >>
> >> >> provider="org.apache.ws.security.components.crypto.Merlin">
> >> >>
> name="org.apache.ws.security.crypto.merlin.keystore.type">JKS
> >> >>
> name="org.apache.ws.security.crypto.merlin.file">keys\\server.jks
> >> >>
> name="org.apache.ws.security.crypto.merlin.keystore.password">
> >> 
> >>
> >>
> >> 2) In client I also have my CallbackHandler and applying
> >> RampartConfig which use client.jks(contain server key)
> >>
> >>
> >> The finger print of server and client certificates are the same in
> >> both keystore.
> >>
> >>
> >>
> >> Error:
> >> org.apache.axis2.AxisFault: Error in signature with X509Token
> >>at
> >>
> org.apache.axis2.util.Utils.getInboundFaultFromMessageContext(Utils.java:512)
> >>at
> >>
> org.apache.axis2.description.OutInAxisOperationClient.handleResponse(OutInAxisOperation.java:370)
> >>at
> >>
> org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:416)
> >>at
> >>
> org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:228)
> >>at
> >>
> >> org.apache.axis2.client.OperationClient.execute(OperationClient.java:1
> >> 63)
> >>
> >>
> >>
> >>
> >> Is anybody have a clue what I'm doing wrong
> >>
> >>
> >>
> >>
> >> Best regards, Tomaz
> >>
> >>
> >
> >
>
>

Re: Design AXIS2 web service for .NET

[José Ferreiro]

Hello,

This information is provided for explanation.

You would like to have a VB .net client.
The explanations provided below (Martin's mail) are for a C# (c-sharp) .net
client.
If you are using .net 2.0 the you may find the program wsdl.exe in the
installed .net package in your computer.

Hope those explanations provided you additional help to the excellent one
provided by Martin below and the link he provided to his example.

HTH too.

Rgds,
jose ferreiro

On Fri, Jan 23, 2009 at 6:29 PM, Martin Gainty  wrote:

>
> http://my.execpc.com/~gopalan/dotnet/webservices/webservice_csharp_client.html<http://my.execpc.com/%7Egopalan/dotnet/webservices/webservice_csharp_client.html>
>
> Create the .NET Service call from the WSDL
> wsdl /l:CS /protocol:SOAP
> http://localhost/ServerName/ServerServiceName.asmx?wsdl
>
> then compile the service
> csc /t:library /r:System.WebServices.sll /r:System.xml.dll OIDServer.cs
>
> then create the client
> wsdl /l:CS /protocol:SOAP http://localhost/OIDServer/OIDServer.asmx?WSDL
> wsdl /l:CS /protocol:HttpGet
> http://localhost/OIDServer/OIDServer.asmx?WSDL
> wsdl /l:CS /protocol:HttpPost
> http://localhost/OIDServer/OIDServer.asmx?WSDL
>
> Now compile
> csc /t:library /r:System.Web.Services.dll /r:System.Xml.dll OIDServer.cs
>
> HTH
> Martin Gainty
> __
> Disclaimer and confidentiality note
> Everything in this e-mail and any attachments relates to the official
> business of Sender. This transmission is of a confidential nature and Sender
> does not endorse distribution to any party other than intended recipient.
> Sender does not necessarily endorse content contained within this
> transmission.
>
>
>
>
> > Date: Fri, 23 Jan 2009 08:25:44 -0800
> > From: mathias.muel...@etc-consult.de
> > To: axis-user@ws.apache.org
> > Subject: Design AXIS2 web service for .NET
>
> >
> >
> > Hello,
> >
> > I'm new to AXIS2 web services. I have studied the POJO Weather example of
> > the AXIS2 user guide. The example runs fine.
> >
> > Now I have a question to make this web service available for a VB .NET
> > client.
> >
> > How can I get access to the methods of the Weather class? Do I have to
> make
> > these methods available in the WeatherService class and is this the right
> > design pattern for this case? I have access to the methods
> setWeather(...)
> > and getWeather() from the .NET client.
> >
> > Best regards, etcuser
> >
> >
> > --
> > View this message in context:
> http://www.nabble.com/Design-AXIS2-web-service-for-.NET-tp21627641p21627641.html
> > Sent from the Axis - User mailing list archive at Nabble.com.
> >
>
> --
> Windows Live™ Hotmail(R)…more than just e-mail. See how it 
> works.<http://windowslive.com/howitworks?ocid=TXT_TAGLM_WL_t2_hm_justgotbetter_howitworks_012009>
>



-- 
José Ferreiro
Systems Analysis and Design Specialist
MSc in Communication Systems, EPFL.

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: List of free webservices

[José Ferreiro]

; >>>>>
> >>>>> I'm a student in computer science and I need some web services for
> >>>> some
> >>>>> project. I don't know what kind of web services but I will chose one
> >>>> when I
> >>>>> will have some options. Please tell me where I can find some
> >>>>> nice/cool web services in the web. If you know some please send me
> >>>>> the link of the homepage.
> >>>>>
> >>>>>
> >>>>> Best regards,
> >>>>> Florin Botis
> >>>>> -- View this message in context:
> >>>> http://www.nabble.com/List-of-free-webservices-tp21315053p21315053.ht
> >>>> ml
> >>>>> Sent from the Axis - User mailing list archive at Nabble.com.
> >>>>>
> >>>>>
> >>>>
> >>>>
> >>>>
> >>>>   Add more friends to your messenger and enjoy! Go to
> >>>> http://messenger.yahoo.com/invite/
> >>>>
> >>>
> >>> --
> >>> View this message in context:
> >>> http://www.nabble.com/List-of-free-webservices-tp21315053p21606601.htm
> >>> l Sent from the Axis - User mailing list archive at Nabble.com.
> >>>
> >>>
> >>
> >>
> >>
> >>
> >>
> >>
> >> This message contains information that may be privileged or confidential
> >> and is the property of the Capgemini Group. It is
> >> intended only for the person to whom it is addressed. If you are not the
> >> intended recipient, you are not authorized to
> >> read, print, retain, copy, disseminate, distribute, or use this message
> or
> >> any part thereof. If you receive this message
> >> in error, please notify the sender immediately and delete all copies of
> >> this message.
> >>
> >>
> >>
> >
> > --
> > View this message in context:
> http://www.nabble.com/List-of-free-webservices-tp21315053p21608273.html
> > Sent from the Axis - User mailing list archive at Nabble.com.
> >
> >
>



-- 
José Ferreiro
Systems Analysis and Design Specialist
MSc in Communication Systems, EPFL.

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: .NET Web Service is accessed by java program

[José Ferreiro]

Hello Ferry,

You need to generate the proxy with the tool wsdl.exe that is in the dotnet
framework 2.0

After you generate the proxy you need to write your client.

See an example here.

Hope this helps.

Warmest regards,

José Ferreiro



On Thu, Nov 27, 2008 at 12:16 PM, ibrahim demir <[EMAIL PROTECTED]>wrote:

> Hi;
>
> No matter if it is .net or in other language. If you can reach the wsdl
> file you can generate the code with wsdl2java or Axis2 codegen eclipse
> plugin.
>
> And use the ganareted stub for that: http://wso2.org/library/1719
>
> Also you can use the RPC style :
> http://ws.apache.org/axis2/1_1/pojoguide.html#servicedef
>
> Yours
>
> Ibrahim DEMIR
> CyberSoft Yazilim Muh.
> http://www.ibrahimdemir.org
>
>
>
>
>
> --
> *From:* Ferry Sumendap <[EMAIL PROTECTED]>
> *To:* axis-user@ws.apache.org
> *Sent:* Thursday, November 27, 2008 12:32:48 PM
> *Subject:* .NET Web Service is accessed by java program
>
>
> Hello everybody,
> I am looking for a sample code how java access / call /execute functions
> which are available at .NET Web Service (.NET framework 2.0).
> The java program should retrieve the XML response (output) from the web
> service .
> If anyone knows tutorial about this matter, please let me know the url...
> :)
>
> Thank you very much.
>
> Regards,
> Ferry
>
>
>
>


-- 
José Ferreiro
MSc in Communication Systems, EPFL.

Encoding of non latin characters (Cyrillic)

[José Ferreiro]

Hello all,

I have the Russian Word (taken as example): *Основное*

that is encoded as UTF-8 by axis as:

Основное (a)

I may transmit this kind of information in a XML well formed packet using
axis 1.4 after a client request from the server to the client again. There
is no problem. The deserialization works perfectly.


However if I try to transmit applying wss4j with encryption signature and
timestamp the following error arises:

org.apache.xml.security.encryption.XMLEncryptionException: An invalid XML
character (Unicode: 0x1e)
was found in the element content of the document.

Therefore in order to avoid invalid characters in the packet I decide then
to escape all XML chars
using org.apache.commons.lang.StringEscapeUtils.escapeXML [1]



In the client in order to recover the original world I decide to do an
unescapeXML [1], which gives this Unicode string:

Основное (b)

First, it should be concluded that I am not getting the same Unicode string
as at the beginning (a) where [(a) != (b)]

I was then wondering what kind of encoding I got.
I looked at this web site http://2cyr.com/decode/?lang=en to understand more
and it looks like I got windows-1251 (see [2])
that can be displayed in a browser as encoding="iso8859-1".

*My question is: Why didn't i get UTF-8 and how is it possible I got (b)
?*


Thank you for your reading and any comments you might have.

José Ferreiro

Many thanks to Martin Gainty and Ognjen Blagojevic for already commeting and
helping in another thread I posted.


[1] -
http://commons.apache.org/lang/api-release/org/apache/commons/lang/StringEscapeUtils.html
[2] - http://en.wikipedia.org/wiki/CP1251

PS: Thanks to Martin and

-- 
José Ferreiro
MSc in Communication Systems, EPFL.

Re: Cyrillic characters.

[José Ferreiro]

Martin,

I fully agree with you!
I will develop a GUI and I will see better those problems.
Thank you for your advice.
PS: The display from the received XML message works in the  Browser. But
some problems arises when I apply WSS4J (encryption + signature) due to the
following error:
org.apache.xml.security.encryption.XMLEncryptionException: An invalid XML
character (Unicode: 0x1e) was found in the element content of the document.

Therefore I think I will escape XML of those characters:
Основное from the DB...

Thank you Martin.

.


2008/11/13 Martin Gainty <[EMAIL PROTECTED]>

>  the problem is accomodating input and display for cyrillic characters
> you should implement all of the features DB, AppServer as well as KB and
> Browser configurations on a separate machine
> so to maintain input (Keyboard) and display (browser)cleanly separated (and
> operational) for either latin or cyrillic
>
> Martin
> __
> Disclaimer and confidentiality note
> Everything in this e-mail and any attachments relates to the official
> business of Sender. This transmission is of a confidential nature and Sender
> does not endorse distribution to any party other than intended recipient.
> Sender does not necessarily endorse content contained within this
> transmission.
>
>
>
>
> > Date: Thu, 13 Nov 2008 16:57:57 +0100
> > From: [EMAIL PROTECTED]
> > To: axis-user@ws.apache.org
> > Subject: Re: Cyrillic characters.
> >
> > > As I am developping in a English (Western country) environment with
> > > eclipse I cannot display the word *Основное *from
> > > *Основное* in the
> > > Eclipse console (I mean when I do a System.out.println).
> >
> > Just try this:
> >
> > Run, Open run dialog...
> >
> > then locate the class where the main method is, then select Arguments
> > tab, and write
> >
> > -Dfile.encoding=UTF-8
> >
> > in VM arguments text field. Then, select Common tab, and for Console
> > Encoding select "Other: UTF-8".
> >
> > After that, you should be able to see cyrillic characters on the console.
> >
> > -Ognjen
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
>
> --
> Stay up to date on your PC, the Web, and your mobile phone with Windows
> Live Click here <http://clk.atdmt.com/MRT/go/119462413/direct/01/>
>



-- 
José Ferreiro
MSc in Communication Systems, EPFL.

Re: Cyrillic characters.

[José Ferreiro]

Thank you Ognjen.
I tried this and I see you logic but it is not working!
Well for me it is not the most important to see the data in the Output
Console (well it will help but as far as I know that the data is transfered
this is the most important).

I am trying now to develop a GUI to see better what I may display or not...

Thank you once again Ognjen!


On Thu, Nov 13, 2008 at 4:57 PM, Ognjen Blagojevic <[EMAIL PROTECTED]>wrote:

> As I am developping in a English (Western country) environment with eclipse
>> I cannot display the word *Основное *from
>> *Основное* in the Eclipse
>> console (I mean when I do a System.out.println).
>>
>
> Just try this:
>
>  Run, Open run dialog...
>
> then locate the class where the main method is, then select Arguments tab,
> and write
>
>  -Dfile.encoding=UTF-8
>
> in VM arguments text field. Then, select Common tab, and for Console
> Encoding select "Other: UTF-8".
>
> After that, you should be able to see cyrillic characters on the console.
>
> -Ognjen
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Re: Cyrillic characters.

[José Ferreiro]

Thank you Ognjen,

You are correct about your statement.

I also suceeded without any problem to do the excaping for
</codeDescription> -> 

As I am developping in a English (Western country) environment with eclipse
I cannot display the word *Основное *from *
Основное* in the Eclipse
console (I mean when I do a System.out.println).
This is due in my understanding because I am working with Latin encoding and
I should change my environment (of the Console output) to another encoding
thing that I do not want to do.

May I ask you which is your Environment setting in your machine (Russian
KOI)?

Thank you Ognjen.

Rgds,
/JF




On Thu, Nov 13, 2008 at 3:17 PM, Ognjen Blagojevic <[EMAIL PROTECTED]>wrote:

> José Ferreiro wrote:
>
>> Основное
>> </codeDescription></errorCodeItem>
>>
>> Does anyone has an idea how I can get the encoded word/phrase back to
>> cyrillic in the client?
>> I assume that it is UTF-8 encoded...
>>
>
> Actually, this is XML encoding. You can use apache commons class
> StringEscapeUtils[1] to work with it.
>
> For the given string,
>
> System.out.println(StringEscapeUtils.unescapeXml("Основное
>
> </codeDescription></errorCodeItem>"));
>
> prints
>
>   Основное 
>
> (Osnovnoe in cyrillic).
>
>
> -Ognjen
>
> [1]
>
> http://commons.apache.org/lang/api-release/org/apache/commons/lang/StringEscapeUtils.html
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


-- 
José Ferreiro
MSc in Communication Systems, EPFL.

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Cyrillic characters.

[José Ferreiro]

Hello

I am providing data in cyrillic characters using Axis 1.x.

The tag in the SOAP response looks like:

Основное
</codeDescription></errorCodeItem>

Does anyone has an idea how I can get the encoded word/phrase back to
cyrillic in the client?
I assume that it is UTF-8 encoded...

Thank you!


-- 
José Ferreiro
MSc in Communication Systems, EPFL.

Re: Problems with wss4j and timestamp

[José Ferreiro]

Hola Tomas!
Try using this parameter:


Although this is much for the signature, but you never know!

Un saludo


On Thu, Sep 18, 2008 at 4:47 PM, Nandana Mihindukulasooriya <
[EMAIL PROTECTED]> wrote:

> Hi Thomas,
>   Are you using Axis2 or Axis ? I assume you are using Axis.
> There is a property in WSSConfig in WSS4J called precisionInMilliSeconds.
> You must be able to set it to false using configuration. Sometimes having
> mili second precision in the time stamp cause a problem in the .NET side.
>
> thanks,
> nandana
>
>
> On Thu, Sep 18, 2008 at 8:05 PM, Tomás Tormo <[EMAIL PROTECTED]> wrote:
>
>>  Greetings
>>
>> I'm implementing a secure webservice client using wss4j wich is
>> supposed to use only signature Soap messages (I'm using it to communicate
>> with a public webservice server). In the beginning I had the following
>> problem:
>>
>> faultString: WSDoAllReceiver: security processing failed (actions
>> number mismatch)
>>
>> After searching for a while I discovered that if the server is implemented
>> in .NET, it always needs the message to be timestamped. So, just in case it
>> was the reason of the problem (and while they send me the correct
>> specification), I tried to add timestaping to the actions of the
>> WSDoAllSender with the following order:
>>
>> 
>>
>> and then the error is different, now it says:
>>
>> WSDoAllReceiver: security processing failed; nested exception is:
>> org.apache.ws.security.WSSecurityException: An error was
>> discovered processing the  header. (WSSecurityEngine: Invalid
>> timestamp {0}); nested exception is:
>> java.text.ParseException: Unparseable date:
>> "2008-09-18T14:29:10.722Z"
>>
>> that looks like the timestamp format is not correct. I was thinking that
>> maybe the problem was the time location difference, but i've seen on the
>> internet that in that case the error is different (and can be solved by the
>> "timetolive" parameter). I tried to put the "Signature" and "Timestamp" in
>> opposite way but I get the same error.
>>
>> Could anybody help me?
>>
>> Thank you very much
>>
>> --
>> Un saludo,
>>
>> Tomás Tormo Franco
>>
>> Indenova, S.L.
>> Tels.: +34 963 81 99 47  ext.519http://www.indenova.commailto:[EMAIL 
>> PROTECTED] <[EMAIL PROTECTED]>
>>
>>
>
>
> --
> Nandana Mihindukulasooriya
> WSO2 inc.
>
> http://nandana83.blogspot.com/
> http://www.wso2.org
>



-- 
Jose Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: *SPAM* RE: *SPAM* RE: Problem verifying the signature with wss4j... Good News!!

[José Ferreiro]

Correct Frank,

Why don't you get the right certificate you need that is issued and signed
by the correct third party?

Un saludo.
José

On Wed, Sep 3, 2008 at 7:09 PM, Tomás Tormo <[EMAIL PROTECTED]> wrote:

>  Good news!!! After changing the keystore for "interop2.jks", and using
> "alice" as alias the exception changed :). Now it looks like this:
>
> WSDoAllReceiver: The certificate used for the signature is not trusted
>
> I'm trying the webservice client against a public webservice, that's why I
> think this exception is pretty normal, cause this certificate is
> self-signed, and the public webservice maybe needs a trusted certificate. Am
> I right?
>
> Thank you very much
>
> Tomás Tormo escribió:
>
> Sorry, my mistake, the client_deploy.wsdd file I'm using is the following
> one:
>
>  xmlns="http://xml.apache.org/axis/wsdd/";xmlns:java=
> "http://xml.apache.org/axis/wsdd/providers/java";
> >
>   pivot="java:org.apache.axis.transport.http.HTTPSender"/>
>   
>   
> type="java:org.apache.ws.axis.security.WSDoAllSender" >
>  value="pruebawebserviceregistraduria.PWCallback"/>
> 
> 
> 
> 
>
>   
>   
> type="java:org.apache.ws.axis.security.WSDoAllReceiver">
>  value="pruebawebserviceregistraduria.PWCallback"/>
> 
> 
>
>   
> 
> 
>
> Thank you
>
> Tomás Tormo escribió:
>
> Ok, sorry i didn't see the link...
>
> Anyway i would like to ask you why you don't use "DirectReference" as
> "signatureKeyIdentifier" instead of  "X509KeyIdentifier".Is the server able
> to verify the sign just with that?
>
> The client_deploy.wsdd file I was using was the following one (now it's a
> mix of several xD):
>
> 
>  xmlns="http://xml.apache.org/axis/wsdd/";xmlns:java=
> "http://xml.apache.org/axis/wsdd/providers/java";
> >
>   pivot="java:org.apache.axis.transport.java.JavaSender"/>
>   pivot="java:org.apache.axis.transport.http.HTTPSender"/>
>   pivot="java:org.apache.axis.transport.local.LocalSender"/>
>   
>
>
>   
>
> 
> 
> 
> 
> 
>  "http://www.w3.org/2001/04/xmlenc#aes128-cbc";/>
>  "http://www.w3.org/2001/04/xmlenc#rsa-1_5";/>
>
>   
>   
>
> 
> 
> 
>
>   
> 
>
>
>
>
>
> Martin Gainty escribió:
>
> Tomas
>
> the provided example works with WSS4J ..specifically
>
> *WSS4J configuration*
> Below is the important parts from the deployment .wsdd-file for the web
> service. The test.PWCallback 
> class is a simple class returning the password of the private key in the
> keystore. I used the same 
> crypto.properties as the one supplied as wsstest.properties in the
> interop-folder. As you can see I have 
> specified which algorithms to use for the session key and ecrypted session
> key (RSA15 and AES128).
> 
> Did you try?
> Saludos
> Martin 
> __
> Disclaimer and confidentiality note
> Everything in this e-mail and any attachments relates to the official
> business of Sender. This transmission is of a confidential nature and Sender
> does not endorse distribution to any party other than intended recipient.
> Sender does not necessarily endorse content contained within this
> transmission.
>
>
> --
> Date: Wed, 3 Sep 2008 16:10:30 +0200
> From: [EMAIL PROTECTED]
> To: axis-user@ws.apache.org
> Subject: Re: *SPAM* RE: Problem verifying the signature with wss4j
>
> Thank you very much for your answer, but i forgot to specify that i'm
> writing a client in java using wss4j and not WSE, and i don't have access to
> the server (anyway, i'm new in this field,  so maybe i haven't understood it
> well...)
>
> Do you know how to do the same for wss4j in the client?
>
> Thank you.
>
> Martin Gainty escribió:
>
>  xmlns="http://schemas.microsoft.com/wse/2005/06/policy";
> >
> 
> assume the specified policy includes the directive
> messageProtectionOrder="SignBeforeEncrypt"
> 
>
> http://erlend.oftedal.no/blog/?blogid=12
> 
> Saludos
> Martin 
> __
> Disclaimer and confidentiality note
> Everything in this e-mail and any attachments relates to the official
> business of Sender. This transmission is of a confidential nature and Sender
> does not endorse distribution to any party other than intended recipient.
> Sender does not necessarily endorse content contained within this
> transmission.
>
>
> > Date: Wed, 3 Sep 2008 14:30:40 +0200
> > From: [EMAIL PROTECTED]
> > To: axis-user@ws.apache.org
> > Subject: Problem verifying the signature with wss4j
> >
> > Greetings
> >
> > I'm trying to write an webservice client wich uses signed SOAP
> > messages in order to communicate. For this, i'm using wss4j 1.5.3 wi

Re: Problem verifying the signature with wss4j

[José Ferreiro]

Hello Tomás,

May/Did you try using the certificates in the interop folder from the wss4j
1.5.3 distribution?
Maybe you have a problem with your certificate. Is it a self-signed
certificate?

Regards,

Jose Ferreiro


On Wed, Sep 3, 2008 at 2:30 PM, Tomás Tormo <[EMAIL PROTECTED]> wrote:

> Greetings
>
>   I'm trying to write an webservice client wich uses signed SOAP messages
> in order to communicate. For this, i'm using wss4j 1.5.3 with axis 1.4. I've
> succesfully wrote the client code wich signs the message and sends it to the
> server, but i'm getting the following error:
>
>  WSDoAllReceiver: security processing failed; nested exception is:
>   org.apache.ws.security.WSSecurityException: The signature
> verification failed (The provided certificate is invalid)
>
> As far as i know (by reading posts in the internet) this is caused because
> the XML is modified after it is signed. I've tried to set the
> disablePrettyXML to true and the enableNamespacePrefixOptimization to false,
> but it didn't work...
>
> I've read in other posts that this could be caused by the default blank
> namespaces  added by Axis (when I checked the XML thanks to TCPMonitor, i
> could see that the attributes of the sent objects had no namespace, but the
> object itself had).
>
> Does anybody have any solution for this problem? Could be possible to
> disable the default namespace in axis?
>
> Thank you very much
>
> --
> Un saludo,
>
> Tomás Tormo Franco
>
> Indenova, S.L.
> Tels.: +34 963 81 99 47  ext.519
> http://www.indenova.com
> mailto:[EMAIL PROTECTED]
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


-- 
Jose Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: Can I transfer/response an JPG or PDF file from server to client via AXIS 1.x?

[José Ferreiro]

Hi Thomas,

Yes you may send a PDF file as it is a binary file as well.
For that you need to adapt the MIME in the SOAP message ( Multipurpose
Internet Mail Extensions) type.

e.g.

   
  
 
  
  
 
  
   

For more info about the MIME types pleaser refer [1] [2].

Hope this helps.

Jose

[1] - Format of Internet Message Bodies (
ftp://ftp.isi.edu/in-notes/rfc2045.txt)
[2] - Media Types (ftp://ftp.isi.edu/in-notes/rfc2046.txt).

On Wed, Aug 27, 2008 at 1:27 PM, thomas2004 <[EMAIL PROTECTED]> wrote:

>
> Hi Jose,
>
> Thanks for the reply.
>
> Do you think I can transfer the PDF file in the same way?
>
> Regards
>
> Thomas
>
>
>
>
> José Ferreiro wrote:
> >
> > Hello Thomas,
> >
> > It is possible to transfer other data from the server to the client than
> > XML.
> > This can be done by sending binary data within the SOAP message.
> >
> > See an example for Axis 1.x here:
> > http://www.agileskills2.org/DWSAA/v10pub/source.zip
> >
> > Unzip the folder and refer to the folder *image service* : which shows
> the
> > example of uploading a JPG image from the client to the web service in
> the
> > server. For your example you only need to switch the request and the
> > response in the wsdl file.
> >
> > Hope this helps.
> >
> > Jose Ferreiro
> >
> > On Tue, Aug 26, 2008 at 9:11 PM, thomas2004 <[EMAIL PROTECTED]>
> wrote:
> >
> >>
> >> What I am going to do is:
> >>
> >> I get some datas from client and will return/transfer/response an JPG or
> >> PDF
> >> file to the client. Is it possible?
> >>
> >> So far I understand, the Web Service can only transfer XML-file. Is that
> >> right? Any example or infos?
> >>
> >> Regards
> >>
> >> Thomas
> >> --
> >> View this message in context:
> >>
> http://www.nabble.com/Can-I-transfer-response-an-JPG-or-PDF-file-from-server-to-client-via-AXIS-1.x--tp19168366p19168366.html
> >> Sent from the Axis - User mailing list archive at Nabble.com.
> >>
> >>
> >> -
> >> To unsubscribe, e-mail: [EMAIL PROTECTED]
> >> For additional commands, e-mail: [EMAIL PROTECTED]
> >>
> >>
> >
> >
> >
> > --
> > José Ferreiro
> > EPFL Communication Systems engineer
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/Can-I-transfer-response-an-JPG-or-PDF-file-from-server-to-client-via-AXIS-1.x--tp19168366p19179073.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: Can I transfer/response an JPG or PDF file from server to client via AXIS 1.x?

[José Ferreiro]

Hello Thomas,

It is possible to transfer other data from the server to the client than
XML.
This can be done by sending binary data within the SOAP message.

See an example for Axis 1.x here:
http://www.agileskills2.org/DWSAA/v10pub/source.zip

Unzip the folder and refer to the folder *image service* : which shows the
example of uploading a JPG image from the client to the web service in the
server. For your example you only need to switch the request and the
response in the wsdl file.

Hope this helps.

Jose Ferreiro

On Tue, Aug 26, 2008 at 9:11 PM, thomas2004 <[EMAIL PROTECTED]> wrote:

>
> What I am going to do is:
>
> I get some datas from client and will return/transfer/response an JPG or
> PDF
> file to the client. Is it possible?
>
> So far I understand, the Web Service can only transfer XML-file. Is that
> right? Any example or infos?
>
> Regards
>
> Thomas
> --
> View this message in context:
> http://www.nabble.com/Can-I-transfer-response-an-JPG-or-PDF-file-from-server-to-client-via-AXIS-1.x--tp19168366p19168366.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>



-- 
José Ferreiro
EPFL Communication Systems engineer

Re: Timestamp error when invoking a Rampart service from a .NET client.

[José Ferreiro]

Hello Sanjay,

Please observe the following:


SOAP Request from your .NET client

  
   
  2008-07-23T14:55:04Z
  2008-07-23T15:00:04Z
   
  

### Java ###
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Timestamp-1035988">
  2008-07-24T08:59:27.952Z
  2008-07-24T09:04:27.952Z



Please take a look at the clock synchonization between the two machines.

By default this value should not have a difference bigger than 300 seconds
(5 minutes) timetolive parameter in Axis(for sure) or Axis2( I guess
too) [1].


I you would like to change this default value in .NET proceed as follow in
the configuration file.

MICROSOFT World: WSE 3.0 [2] - Use the tags timeToleranceInSeconds and
defaultTtlInSeconds in the app.config file of the web service in your
project (illustration follows with the corresponding xml tags)

< configuration >
< microsoft.web.services3 >
< security >
< timeToleranceInSeconds value = "3600" / >
< defaultTtlInSeconds value = "3600" / >

Maybe you may investigate in this direction because your SOAP message seems
OK but it fails when verifying the timestamp.

Also in .NET the timestamp is always there by default. You cannot remove it.
This is not the case with Java where you may specify if it is there or not.

Hope this helps.

[1] - http://wiki.apache.org/ws/FrontPage/WsFx/wss4jFAQ#time [2] -
http://msdn.microsoft.com/en-us/library/ms824668.aspx

-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL



On 7/24/08, Sanjay Vivek <[EMAIL PROTECTED]> wrote:
>
>
>
> Hi everyone,
>
> I'm attempting to invoke a simple Rampart enabled EchoService from a .NET
> client. However, I get a "The timestamp could not be validated" error
> everytime. I've disabled the Timestamp option on the service side but it
> doesn't make any difference. I've compared the Timestamp formatting between
> a .NET and Java client and there's not much difference at all as shown
> below:
>
> ### .NET ###
> 
>   2008-07-23T14:55:04Z
>   2008-07-23T15:00:04Z
> 
>
> ### Java ###
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
> wsu:Id="Timestamp-1035988">
>   2008-07-24T08:59:27.952Z
>   2008-07-24T09:04:27.952Z
> 
>
> I've searched the web and one of the issues raised was that a .NET client
> appends the Timestamp at the top of the security header while a Java client
> appends the Timestamp at the bottom of the security header. Could this be an
> issue? Although I doubt the ordering of WSSE elements should make any
> difference.
>
> I've posted both the SOAP request (from a .NET client) and response (from a
> Rampart enabled service) messages at the bottom of this email for further
> reference. Any insight would be greatly appreciated. Cheers.
>
> Regards
> --
> Sanjay Vivek
>
>
>
>
> SOAP Request from a .NET client
> 
>
> 
>   http://schemas.xmlsoap.org/soap/envelope/";
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xmlns:xsd="
> http://www.w3.org/2001/XMLSchema"; xmlns:wsa="
> http://schemas.xmlsoap.org/ws/2004/08/addressing"; xmlns:wsse="
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
> xmlns:wsu="
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> ">
>  
> urn:echo
>
> 
> urn:uuid:1673e489-d3be-4810-b40e-854423fef2c2
> 
>
> http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
> 
> 
> 
> http://128.240.2.3:8083/rampart-echo/services/RampartEchoService.RampartEchoServiceHttpSoap11Endpoint
> 
> 
> wsu:Id="Timestamp-74569579-8e34-407f-a10c-c27d3b119b80">
>   2008-07-23T14:55:04Z
>   2008-07-23T15:00:04Z
>
> 
>  
>  
> http://service.echo.rampart";>
>hello
> 
>  
>   
>
>
> SOAP Response from a Rampart enabled service
> 
>
>
>http://schemas.xmlsoap.org/soap/envelope/";>
>http://schemas.xmlsoap.org/ws/2004/08/addressing";>
>
> http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
>
> urn:uuid:42C68E847DB869C8CA1216824473152
>
> http://schemas.xmlsoap.org/ws/200

Re: Signing SOAP messages with Axis

[José Ferreiro]

Hola Tomás,

You may use the library wss4j for accomplishing that [1].
If you are using Axis2 you should use Rampart[2]

Un saludo
Jose Ferreiro


[1] - http://ws.apache.org/wss4j/
[2] - http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html


On 7/21/08, Tomás Tormo <[EMAIL PROTECTED]> wrote:
>
>  Hello!
>
>  I have to communicate with a webservice wich needs signed SOAP messages in
> order to ensure communications. I'm using Axis in order to create the SOAP
> messages but my problem is that i don't really know how to sign the messages
> before sending them. I've been told that I should add a reference to a
> subclass of BasicHandler in my client-config.wsdd and use that subclass in
> order to access the generated XML and sign it with the XMLSecurity library.
> I've never used the client-config.wsdd file to communicate with a
> webservice...
>
> ¿Could anybody provide me any example/link about this? ¿Or how to modify a
> SOAP message?
>
> --
> Un saludo,
>
> Tomás Tormo Franco
>
> Indenova, S.L.
> Tels.: +34 963 81 99 47  ext.519http://www.indenova.commailto:[EMAIL 
> PROTECTED] <[EMAIL PROTECTED]>
>
>


-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: Question on WSS4J 1.5 Crypto Provider Configuration

[José Ferreiro]

Hello Santosh,

Your line:

http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="SecurityToken-9e141676-2400-4c6d-ab87-1d5af61729b3">
is based on the namespace:
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd

you may open the URL by double clicking in the link:
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd

By reading the provided documentation it follows that the attribute ID:

 

   This global attribute supports annotating
arbitrary elements with an ID.

 

Then we may conclude that this type defines the fault code value for
Timestamp message expiration
(wsu:Id="SecurityToken-9e141676-2400-4c6d-ab87-1d5af61729b3).


Hope this helps.

Jose Ferreiro


On 7/20/08, Werner Dittmann <[EMAIL PROTECTED]> wrote:
>
> Strange - same mail with different subjects - what do intend here?
>
> Regards,
> Werner
>
> sh_santosh schrieb:
>
>>
>>
>> Dear all,
>>
>> Hi Jose / all,
>>
>> just one word away.
>>
>> I am NOT able generate
>> 'SecurityToken-9e141676-2400-4c6d-ab87-1d5af61729b3'  inside the
>> wsse:UsernameToken tag.
>> In place of this i am able to generate only '
>> wsu:Id="UsernameToken-2691004"
>> '
>>
>> > xmlns:wsu="
>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
>> "
>>
>> wsu:Id="SecurityToken-9e141676-2400-4c6d-ab87-1d5af61729b3">
>>
>> What is this 'SecurityToken-9e141676-2400-4c6d-ab87-1d5af61729b3' ?
>>
>> How can I generate it in Java (using Axis 1.3 and wss4j) ?
>>
>> Required Security Header by other end( .Net WSE 3.0) 
>>
>> 
>> http://schemas.xmlsoap.org/soap/envelope/";
>>xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
>>xmlns:xsd="http://www.w3.org/2001/XMLSchema";
>>xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing";
>>   xmlns:wsse="
>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
>> "
>>   xmlns:wsu="
>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
>> ">
>>
>>
>>http://www.test.com/api/ws/internal/testInfo
>>
>>
>>urn:uuid:ca7e475b-484a-4bb8-974f-eb573438bb43
>>
>>
>>
>>
>> http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
>>
>>
>>
>>http://localhost:8080/testapi/testwsapi.asmx
>>
>>
>>>
>> wsu:Id="Timestamp-c70b72e2-561c-4b18-bc4b-acf8c3896b14">
>>
>> 2008-02-28T15:33:56Z
>>
>> 2008-02-28T15:38:56Z
>>
>>>   xmlns:wsu="
>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
>> "
>>
>> wsu:Id="SecurityToken-9e141676-2400-4c6d-ab87-1d5af61729b3">
>>   [EMAIL PROTECTED]
>> 
>>>   Type="
>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText
>> ">
>>SomePassword
>>
>>
>> 5SImW1gykzSPdeiWzcCdaQ==
>>
>> 2008-02-28T15:33:56Z
>>
>>
>>
>>
>>>xmlns="http://www.test.com/api/testing/ws/internal
>> ">
>>>VendorPassword="SomePassword"
>>   xmlns="
>> http://www.test.com/api/testing/testinforequest";>
>>SANBUS
>>GE
>>80135
>>
>>
>>
>> 
>>
>> Generated Security header By my side (Java- Axis 1.3 and wss4j
>> )-
>> 
>> >xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/";
>>xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing";
>>xmlns:xsd="http://www.w3.org/2001/XMLSchema";
>>xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>
>>
>>>   xmlns:wsse="
>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
>> "
>>soapenv:mustUnderstand="1">
>>>   xmlns:wsu="
>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
>> "
>>wsu:Id="UsernameToken-2691004">
>>
>>[EMAIL PROTECTED]
>>
>>>   Type="
>> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-user

Re: WSS4J , Rampart

[José Ferreiro]

Hello,

Basically, you may use WSS4J with Axis 1.x to implement WS-Security.

Rampart is the WS-Security module in Axis 2. Rampart uses WSS4J.

Hope this helps.

José Ferreiro

On Mon, Jul 14, 2008 at 6:38 PM, Chau, Hoang <[EMAIL PROTECTED]> wrote:

>  Hi all,
>
> I am new to webservice security so could anyone tell me the difference
> between WSS4j and Rampart or point me the link talk about them.
>
> Thanks
>
>  --
> *From:* Juan Gabriel Arias [mailto:[EMAIL PROTECTED]
> *Sent:* Monday, July 14, 2008 9:18 AM
> *To:* axis-user@ws.apache.org
> *Subject:* QName is null for...
>
> Hi all,
> i'm facing this issue. I try to generate the java files from this wsdl
>
> 
> 
> 
> 
> 
>
> And the generator throws this exception:
>
> Using AXIS2_HOME:   D:\java\axis2-1.4\
> Using JAVA_HOME:C:\Program Files\Java\jre1.6.0_05
> Retrieving document at 'OIContentProviderv0.2.wsdl'.
> Exception in thread "main" 
> org.apache.axis2.wsdl.codegen.CodeGenerationException:
> org.apache.axis2.wsdl.codegen.CodeGenerationException:
> java.lang.RuntimeException: Element QName is null for ErrorResponseMessage!
> at org.apache.axis2.wsdl.codegen.CodeGenerationEngine.generate(
> CodeGenerationEngine.java:271)
> at org.apache.axis2.wsdl.WSDL2Code.main(WSDL2Code.java:35)
> at org.apache.axis2.wsdl.WSDL2Java.main(WSDL2Java.java:24)
> Caused by: org.apache.axis2.wsdl.codegen.CodeGenerationException:
> java.lang.RuntimeException: Element QName is null for ErrorResponseMessage!
> at org.apache.axis2.wsdl.codegen.emitter.
> AxisServiceBasedMultiLanguageEmitter.emitStub(
> AxisServiceBasedMultiLanguageEmitter.java:534)
> at org.apache.axis2.wsdl.codegen.CodeGenerationEngine.generate(
> CodeGenerationEngine.java:260)
> ... 2 more
> Caused by: java.lang.RuntimeException: Element QName is null for
> ErrorResponseMessage!
> at org.apache.axis2.wsdl.codegen.emitter.
> AxisServiceBasedMultiLanguageEmitter.getFaultParamElements(
> AxisServiceBasedMultiLanguageEmitter.java:2829)
> at org.apache.axis2.wsdl.codegen.emitter.
> AxisServiceBasedMultiLanguageEmitter.getFaultElement(
> AxisServiceBasedMultiLanguageEmitter.java:2748)
> at org.apache.axis2.wsdl.codegen.emitter.
> AxisServiceBasedMultiLanguageEmitter.generateMethodElement(
> AxisServiceBasedMultiLanguageEmitter.java:2269)
> at org.apache.axis2.wsdl.codegen.emitter.
> AxisServiceBasedMultiLanguageEmitter.loadOperations(
> AxisServiceBasedMultiLanguageEmitter.java:2151)
> at org.apache.axis2.wsdl.codegen.emitter.
> AxisServiceBasedMultiLanguageEmitter.createDOMDocumentForCallbackHandler(
> AxisServiceBasedMultiLanguageEmitter.java:1151)
> at org.apache.axis2.wsdl.codegen.emitter.
> AxisServiceBasedMultiLanguageEmitter.writeCallBackHandlers(
> AxisServiceBasedMultiLanguageEmitter.java:1117)
> at org.apache.axis2.wsdl.codegen.emitter.
> AxisServiceBasedMultiLanguageEmitter.emitStub(
> AxisServiceBasedMultiLanguageEmitter.java:497)
> ... 3 more
>
> I found that the problem is the missing "fault" definition.
> I i try this, it works:
>
> 
> 
> 
> 
>  name="fault"/>
> 
>
> Why? AFAIK, this is not mandatory... am i wrong?
> And it would be nice to get a better error message.
>
> thanks in advance!
> Juan
>
> --
>
> * This message and any attachments are intended only for the use of the
> addressee and may contain information that is privileged and confidential.
> If the reader of the message is not the intended recipient or an authorized
> representative of the intended recipient, you are hereby notified that any
> dissemination of this communication is strictly prohibited. If you have
> received this communication in error, notify the sender immediately by
> return email and delete the message and any attachments from your system.
> *
>



-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: CRUD web service (Axis 1.4)

[José Ferreiro]

Hello Pedro,

The book will help you to understand how to develop/deploy web services
using Axis 1.4 but will definitely not provide you information
on how to implement CRUD.

You will have to develop your DAO layer by side.

I recommend you to read the book if you don't have experience with Web
services and if you will use Axis 1.4.
*Please note that I have any interest/relationship/benefit) with the author
of the book.*

Hope this helps.

José Ferreiro

Web page of the book: http://www.agileskills2.org/DWSAA/v10pub/index.html





On Mon, Jun 30, 2008 at 3:11 PM, Duseja, Sushil <[EMAIL PROTECTED]>
wrote:

>  Hello Pedro,
>
>
>
> Which chapter, of the book, should I go through, to learn how to write CRUD
> web service.
>
>
>
> Thanks.
>
> *From:* Pedro Felipe [mailto:[EMAIL PROTECTED]
> *Sent:* Monday, June 30, 2008 6:25 PM
> *To:* axis-user@ws.apache.org
> *Subject:* Re: CRUD web service (Axis 1.4)
>
>
>
> Hi Sushil!
>
>
>
> You should read this book: "TONG, Ka Iok 'Kent'. *Developing Web Services
> with Apache Axis*. 2005.
>
>
>
>
>
>
>
> []'s
>
>
>
>Pedro
>
> On Mon, Jun 30, 2008 at 9:30 AM, Duseja, Sushil <
> [EMAIL PROTECTED]> wrote:
>
> Hello,
>
>
>
> Can anyone please let me know as to – how can I create a simple *CRUD web
> service* (say - for an employee)? In other words, I want to develop a web
> service, with CREATE, RETRIEVE, UPDATE and DELETE operations, using *Axis
> 1.4*.
>
> Any sample application would help a great deal.
>
>
>
> Thanking you in anticipation.
>
>
>
>
>

Re: UUID generator in Axis2-1.3

[José Ferreiro]

Hello,

http://java.sun.com/j2se/1.5.0/docs/api/java/util/UUID.html

java.util.UUID a = UUID.randomUUID (  ) ;


Hope this helps.

José FERREIRO

PS: UUID is the equivalent of GUID in dotnet


On Thu, Jun 26, 2008 at 4:36 PM, Rajesh, Peter (CLAIMS, WIP) <
[EMAIL PROTECTED]> wrote:

>  Hi,
>
> How to generate and UUID? Below class is deprecated.
>
> org.apache.axis2.util.UUIDGenerator;
>
> Thanks & Regards,
>
> Peter Rajesh
>
>
> *
> This communication, including attachments, is
> for the exclusive use of addressee and may contain proprietary,
> confidential and/or privileged information. If you are not the intended
> recipient, any use, copying, disclosure, dissemination or distribution is
> strictly prohibited. If you are not the intended recipient, please notify
> the sender immediately by return e-mail, delete this communication and
> destroy all copies.
> *****
>



-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: Security requirements are not satisfied because the security header is not present in the incoming message.

[José Ferreiro]

Hello,

First you have to determine which Token profile you need to use[1]:
Is it:
- Username Token Profile
-X.509 Token Profile
- SAML Token profile
- Kerberos Token Profile

most probably I will be Username Token Profile or X.509 Token Profile

 You will have two ways to do add the security header to your soap message:

Either you use Axis2 and rampart module to generate a client (stubs, etc,
etc).
You don't need to add a security header. The module will do the work for
you.
Obviously you have to add the right configuration files.
You may download Axis2 and Rampart and there should be some examples in the
package.


Or you user Axis 1.3 with WSS4J.
Same thing as above the security header of your SOAP message will be added
by WSS4J according to
the deployement files (extension is wsdd, which measn web service
deployement descriptor)
You may find examples in the package WSS4J.

Also this link [2] in the URL source code in the book you may download some
examples.
They show you the configuration of a such project with WSS4J.
Please note that the author is using *X.509 Token profile*.

As you need to interoperate with donet. I will suggest you to read this
article from Anne Thomas Manes [3].
Dot net requires the "wrapped" style.

Hope this helps.

Jose FERREIRO


[1] -
http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss#overview
[2] - http://www.agileskills2.org/DWSAA/v10pub/index.html
[3] -
http://atmanes.blogspot.com/2005/03/wrapped-documentliteral-convention.html


On 6/18/08, sh_santosh <[EMAIL PROTECTED]> wrote:
>
>
> Hi Jose,
>
> Thanks for your reply,
>
> Problem with my Java Client Code is that I have a Limitation that either I
> can add Security headers to my org.apache.axis.client.Call class object or
> in the Stub class object.
>
> Can you guide me about, how I can use WSS4J classes and method with my Call
> or Stub's Class Object.so that i can set the security headers.
>
> Can you provide me some sample Java code or example ,from where I can get
> the idea that how should go further ,because right now I am totally stucked
> because of this.
>
> Thanks,
> Ritesh.
>
>
>
> José Ferreiro wrote:
> >
> > Hello Ritesh,
> >
> > If you are using Axis 1.x (i.e Axis 1.1, 1.2, 1.3 or 1.4) [1] then you
> > should use
> > the library Apache WSS4J [2] and not "Rampart"
> >
> > "Rampart" is a module based on Apache WSS4J that provides the WS-Security
> > features for Axis2 [3][4].
> >
> > Hope this helps:
> >
> > José Ferreiro
> >
> > [1] - http://ws.apache.org/axis/
> > [2] - http://ws.apache.org/wss4j/
> > [3] -
> http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html
> > [4] - http://ws.apache.org/axis2/
> >
> >
> > On Wed, Jun 18, 2008 at 11:12 AM, sh_santosh <[EMAIL PROTECTED]>
> > wrote:
> >
> >>
> >> Hi Keith,
> >>
> >> I am using Axis1.3 version not Axis2.
> >> So,is Rampart will work with Axis1.3 or it will work with only with
> Axis2
> >> and higher versions.
> >>
> >> Thanks,
> >> Ritesh.
> >>
> >> sh_santosh wrote:
> >> >
> >> > Dear All,
> >> >
> >> > I have a Java Client generated by using Axis1.3.By use of my Java
> >> Client
> >> I
> >> > want to access a Web Service Implemented in .NET using WSE3.0
> >> Standards.
> >> >
> >> > When I tried to submit my Request using a method available in my
> Client
> >> > Class ,I am getting Exception that "Security requirements are not
> >> > satisfied because the security header is not present in the incoming
> >> > message".
> >> >
> >> > Then I have added the SOAP Security Headers(which are not available in
> >> my
> >> > Java Client Code) in my Stub Object  by using SOAPHeaderElement
> Class's
> >> > Object and Tried to submit the Request ,but still I got the Same
> >> > Exception.
> >> >
> >> > Note : - That the Java Client Code Pass an Object as Request having
> >> > required Parameters and Gets the User Defined Object in Response.
> >> >
> >> > I have to generate a Structure Like below inside my SOAPHeader Tag :
> >> >
> >> > 
> >> > http://www.test/info
> >> >
> >>
> urn:uuid:ca6e465b-484a-4bb5-964f-eb513938bb84
> >> > 
> >> > 
> >> http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
> >> 
> >> > 
> >> > http://localhost:8080/bookingapi/b

Re: Security requirements are not satisfied because the security header is not present in the incoming message.

[José Ferreiro]

Hello Ritesh,

If you are using Axis 1.x (i.e Axis 1.1, 1.2, 1.3 or 1.4) [1] then you
should use
the library Apache WSS4J [2] and not "Rampart"

"Rampart" is a module based on Apache WSS4J that provides the WS-Security
features for Axis2 [3][4].

Hope this helps:

José Ferreiro

[1] - http://ws.apache.org/axis/
[2] - http://ws.apache.org/wss4j/
[3] - http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html
[4] - http://ws.apache.org/axis2/


On Wed, Jun 18, 2008 at 11:12 AM, sh_santosh <[EMAIL PROTECTED]>
wrote:

>
> Hi Keith,
>
> I am using Axis1.3 version not Axis2.
> So,is Rampart will work with Axis1.3 or it will work with only with Axis2
> and higher versions.
>
> Thanks,
> Ritesh.
>
> sh_santosh wrote:
> >
> > Dear All,
> >
> > I have a Java Client generated by using Axis1.3.By use of my Java Client
> I
> > want to access a Web Service Implemented in .NET using WSE3.0 Standards.
> >
> > When I tried to submit my Request using a method available in my Client
> > Class ,I am getting Exception that "Security requirements are not
> > satisfied because the security header is not present in the incoming
> > message".
> >
> > Then I have added the SOAP Security Headers(which are not available in my
> > Java Client Code) in my Stub Object  by using SOAPHeaderElement Class's
> > Object and Tried to submit the Request ,but still I got the Same
> > Exception.
> >
> > Note : - That the Java Client Code Pass an Object as Request having
> > required Parameters and Gets the User Defined Object in Response.
> >
> > I have to generate a Structure Like below inside my SOAPHeader Tag :
> >
> > 
> > http://www.test/info
> >
> urn:uuid:ca6e465b-484a-4bb5-964f-eb513938bb84
> > 
> > 
> http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
> 
> > 
> > http://localhost:8080/bookingapi/bookingapi.asmx
> > 
> > 
> > 2008-02-28T15:33:56Z
> > 2008-02-28T15:38:56Z
> > 
> >  > xmlns:wsu="
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> "
> > wsu:Id="SecurityToken-9e141575-2400-4c6d-ab86-1d5af61727b2">
> > [EMAIL PROTECTED]
> >  > Type="
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText
> ">SomePassword
> > 5SImW1gykzSPdeiWzcCdaQ==
> > 2008-02-28T15:33:56Z
> > 
> > 
> > 
> >
> >
> >
> > Any Help at Java Code Level or any Guidance/Example will be highly
> > appreciated.
> >
> > Thanks,
> > Ritesh.
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/Security-requirements-are-not-satisfied-because-the-security-header-is-not-present-in-the-incoming-message.-tp17960865p17976896.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Re: Send direct XML rather than using Java classes

[José Ferreiro]

Jack,

It is possible.
Instead of the "string" add your "xml" and it will work.
Nevertheless the xml should be escaped eg..

*<*item*>*description of the item*<*/item*>* becomes:
*<*item>description of the item*<*/item*>*


Jose Ferreiro





On 6/16/08, Paul Fremantle <[EMAIL PROTECTED]> wrote:
>
> Jacky
>
> Sure. If you use Axis2 it was designed this way. The Java classes
> model is actually just a separate layer on top of the core XML
> messaging layer.
>
> You just need to look at the ServiceClient API. The XML is represented
> in Axis2 as an OMElement.
>
> Paul
>
> 2008/6/16 Jacky Rymasz-Maillot <[EMAIL PROTECTED]>:
> > Hello,
> >
> >
> >
> > I would like to know if it is possible to send a WSDL request directly
> > without using Java classes to create the request.
> >
> > Let's say I want to create a WSDL request (XML format) into a text editor
> > and send the resulting String to my server without using the generated
> Java
> > classes from Axis.
> >
> >
> >
> > What I want looks like that but for SOAP:
> >
> > http://users.skynet.be/pascalbotte/rcx-ws-doc/xmlpost.htm
> >
> >
> >
> > Is it possible?
> >
> >
> >
> > Thx
> >
> >
> >
> > Jack
> >
> >
> >
> >
> >
> > No virus found in this outgoing message.
> > Checked by AVG.
> > Version: 7.5.524 / Virus Database: 270.3.0/1504 - Release Date:
> 15/06/2008
> > 17:52
> >
>
>
>
> --
> Paul Fremantle
> Co-Founder and CTO, WSO2
> Apache Synapse PMC Chair
> OASIS WS-RX TC Co-chair
>
> blog: http://pzf.fremantle.org
> [EMAIL PROTECTED]
>
> "Oxygenating the Web Service Platform", www.wso2.com
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: Trouble with a .NET client.

[José Ferreiro]

Zaq,

I assume that your .net client will not only authenticate in the java web
service.
It looks like you are not able to perform the first operation i.e " logon".
Therefore if you would like that your .net client also performs other
operations, I will suggest you to
follow the contract-first approach (also known as WSDL first) because you
will have other troubles with
the other function IMHO...

Hope this helps.

Jose FERREIRO




On 6/16/08, Anne Thomas Manes <[EMAIL PROTECTED]> wrote:
>
> There no option for asking the tools to generate attributes rather
> than elements. For the most part, it's considered a bad practice. Bear
> in mind that attributes must be simple types.
>
> Anne
>
> On Mon, Jun 16, 2008 at 8:08 AM, Zaq Rizer <[EMAIL PROTECTED]> wrote:
> > On Mon, Jun 16, 2008 at 6:54 AM, keith chapman <[EMAIL PROTECTED]>
> > wrote:
> >>>
> >>> I'd suggest to switch to the contract-first approach: you'll have to
> >>> learn WSDL, of course, but you have much more control over
> interoperability
> >>> and you'll get to use Axis2 (the latest version, at least) with
> success.
> >>
> >> Thanks,
> >> Keith
> >>
> >> Alternatively you can use a tool such a java2wsdl to generate the WSDL
> for
> >> you and then tune it accor ding to your needs (remove minoccurs and
> >> nillable).
> >>
> >> Thanks,
> >> Keith.
> >
> > Thanks for the input everyone.  I will go with Keith's recommendation of
> > modifying the produced WSDL.  Does anyone know of a way to automatically
> > change the format of the WSDL instead of modifying it by hand?  (e.g.
> > somehow modifying an underlying axis2 config file or perhaps even source
> > file?).
> >
> > I'll see how this solution works for us.
> >
> > Regards,
> > Zaq
> >
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Re: Trouble with a .NET client.

[José Ferreiro]

Thanks Keith!
I fully agree with your comments.
Jose FERREIRO

On Sat, Jun 14, 2008 at 5:13 AM, keith chapman <[EMAIL PROTECTED]>
wrote:

> Hi José,
>
> Why would you see this WSDL is not WS-I Compliant? I don't see any problem
> in the WSDL. But I do agree with you that the WSDL generated by Axis2 may
> have to be tweaked on some occations to best suite your needs. Especially
> the minOccurs and nillable attributes.
>
> Just to clarify the meaning of minOccurs and nillable. minoccurs="0" would
> mean that this element is optional. So it is a valid request even if this
> element is missing in the request. If I take the following schema as an
> example,
> 
>  
>
>   type="xs:string"/>
>   type="xs:string"/>
>   type="xs:string"/>
>   type="xs:string"/>
>
> 
> 
>
> in here,
>
> 
> Keith Chapman
> 
>
> is a valid request. As all elements are optional.
>
> On the other hand nillable means that the value of a certain element could
> be null (but the element has to exist)
>
> so the following is a valid request
>
> 
> http://www.w3.org/2001/XMLSchema-instance";
> xsi:nil="true"/>
> 
>
> So as all elements are optional I'm not sending in all element but I do
> send a logon element which has no value. So I state that its nill.
>
> Hope this gives you an understanding on minoccurs and nillable.
>
> Thanks,
> Keith.
>
>
> On Sat, Jun 14, 2008 at 3:27 AM, José Ferreiro <[EMAIL PROTECTED]>
> wrote:
>
>> Hello Zaq,
>>
>> The problem comes from the wsdl itself. It is not WS-I compliant, in terms
>> of interoperability.
>> If I understand well your wsdl is not so huge till now (two elements:
>> logon and logonResponse).
>>
>> I will advise you to write your wsdl yourself using the approach wsdl
>> first[1].
>> This is the price to pay if you want to achieve interoperability with
>> dotnet (wsdl.exe).
>> Please also read this interesting article from Anne Thomas Manes. There
>> is an example of WSDL wrapped style. This style is important to achieve
>> interoperability with dotnet. [2]
>> From there you may generate the stubs using ant wsdl2java.
>>
>> ::You wrote:
>> ::The XML response (in firefox)
>> ::
>> ::2046037248
>> ::
>>
>>
>> You may generate the UUID  type using java:
>> http://java.sun.com/j2se/1.5.0/docs/api/java/util/UUID.html
>> which corresponds in .net, c# as a GUID (e.g.
>> ad87084f-1f7e-4875-9e5d-8a626aad3bbd).
>> It is a type similar to MAC addresses [3].
>> Generating an integer shouldn't be the same in .net when the
>> deserialization happends in the .net client side.
>> This should probably raised an error.
>>
>> In my opinion, you may reduce this:
>>
>> 
>> 
>>  
>>
>>  
>> 
>> 
>>
>> to:
>>
>> 
>>
>> minOccurs should it  be equal to 1? Because you should always return a
>> UUID.
>> As written it means that sometimes the logonResponse element does not
>> exist.
>>
>> Hope this helps!
>>
>> Jose Ferreiro
>>
>> [1] http://www.mindreef.com/newsletter/newsletter-v6.html
>> [2]
>> http://atmanes.blogspot.com/2005/03/wrapped-documentliteral-convention.html
>> [3] http://www.csharpfriends.com/Articles/getArticle.aspx?articleID=335
>>
>> On Fri, Jun 13, 2008 at 10:41 PM, Chris Richmond <
>> [EMAIL PROTECTED]> wrote:
>>
>>>  Zaq,
>>>
>>>
>>>
>>> I have seen this similar problem.  The culprit is actually that
>>> nillable="true"  OR minOccurs = "0" or possibly both in those parameters(I
>>> don't' remember exactly which one(s) it was I had to modify to fix it).
>>> Unfortunately Axis2 produces this sort of wsdl and as far as I know you
>>> cannot easily change it.
>>>
>>>
>>>
>>> Let me guess…your .net client is adding to boolean parameters along the
>>> lines of isProvided? That is because .net proxy generator thinks some things
>>> are optional, and rightfully so according to the WSDL.
>>>
>>>
>>>
>>> The best thing to do is take your wsdl generated by axis 2 and hand tweak
>>> those attributes and .NET will produce cleaner clients for it.  Of course
>>> you could always just provide TRUE for all cases of the "isProvided"(or
>>> whatever it is ca

Re: Trouble with a .NET client.

[José Ferreiro]

Hello Zaq,

The problem comes from the wsdl itself. It is not WS-I compliant, in terms
of interoperability.
If I understand well your wsdl is not so huge till now (two elements: logon
and logonResponse).

I will advise you to write your wsdl yourself using the approach wsdl
first[1].
This is the price to pay if you want to achieve interoperability with dotnet
(wsdl.exe).
Please also read this interesting article from Anne Thomas Manes. There
is an example of WSDL wrapped style. This style is important to achieve
interoperability with dotnet. [2]
From there you may generate the stubs using ant wsdl2java.

::You wrote:
::The XML response (in firefox)
::
::2046037248
::


You may generate the UUID  type using java:
http://java.sun.com/j2se/1.5.0/docs/api/java/util/UUID.html
which corresponds in .net, c# as a GUID (e.g.
ad87084f-1f7e-4875-9e5d-8a626aad3bbd).
It is a type similar to MAC addresses [3].
Generating an integer shouldn't be the same in .net when the deserialization
happends in the .net client side.
This should probably raised an error.

In my opinion, you may reduce this:



 
   
 



to:



minOccurs should it  be equal to 1? Because you should always return a UUID.
As written it means that sometimes the logonResponse element does not exist.

Hope this helps!

Jose Ferreiro

[1] http://www.mindreef.com/newsletter/newsletter-v6.html
[2]
http://atmanes.blogspot.com/2005/03/wrapped-documentliteral-convention.html
[3] http://www.csharpfriends.com/Articles/getArticle.aspx?articleID=335

On Fri, Jun 13, 2008 at 10:41 PM, Chris Richmond <[EMAIL PROTECTED]>
wrote:

>  Zaq,
>
>
>
> I have seen this similar problem.  The culprit is actually that
> nillable="true"  OR minOccurs = "0" or possibly both in those parameters(I
> don't' remember exactly which one(s) it was I had to modify to fix it).
> Unfortunately Axis2 produces this sort of wsdl and as far as I know you
> cannot easily change it.
>
>
>
> Let me guess…your .net client is adding to boolean parameters along the
> lines of isProvided? That is because .net proxy generator thinks some things
> are optional, and rightfully so according to the WSDL.
>
>
>
> The best thing to do is take your wsdl generated by axis 2 and hand tweak
> those attributes and .NET will produce cleaner clients for it.  Of course
> you could always just provide TRUE for all cases of the "isProvided"(or
> whatever it is called) variables in your .net code.
>
>
>
> Hope this helps…I had a problem with this too and I just provided hand
> tweaked WSDL to clients to generate from.
>
>
>
> Chris
>
>
>  --
>
> *From:* Zaq Rizer [mailto:[EMAIL PROTECTED]
> *Sent:* Friday, June 13, 2008 6:02 AM
> *To:* axis-user@ws.apache.org
> *Subject:* Trouble with a .NET client.
>
>
>
> I have a fairly simple Axis2 setup (running in Tomcat5.5), using POJO.
> I've written the java client code, which generated the proper WSDLs and have
> used Ruby's wsdlDriver successfully to test my methods throughout my
> development process, all with great success.
>
> However, when attempting to consume this service from a .NET (2.0) client,
> the client is unable to understand the result of my service.  I see the call
> to my service, and the underlying database call succeeds, in fact.
> Basically, everything succeeds "on my end" but the client cannot handle it
> properly.  My .NET people are having issues because the .NET framework does
> not want to call my logon method with four input parameters and have it
> return a single int.  It's requiring them to send six input parameters, with
> the latter two being passed by reference (these are the outputs).  No matter
> what they do, they only see a single 1 returned as opposed to the ten-digit
> UUID that they should be getting.  I've read other reports and issues from
> people in similar situations but many of the solutions seem to pertain to
> either the nillable property, or the minOccurs property; how can I specify
> these if I'm using java2wsdl?
>
> Relevant code follows ...
>
> My method accepts four parameters, and returns a single int.
>
> *the WSDL for the logon method:*
>  
>  
>
>   type="xs:string"/>
>   type="xs:string"/>
>   type="xs:string"/>
>   type="xs:string"/>
>
> 
> 
> 
> 
>  
>
>  
> 
> 
>
> *The Java method:*
> public int logon(String user, String password, String device, String cell){
>  /* Database actions, create a session, etc.  */
>  return int;  // An integer representation of a UUID.
> }
>
> *The XML response (in firefox)
> *
> 2046037248
> 
>

Re: Consume Axis web service in .net client

[José Ferreiro]

The article from Anne Thomas Manes:

http://atmanes.blogspot.com/2005/03/wrapped-documentliteral-convention.html


On 6/12/08, José Ferreiro <[EMAIL PROTECTED]> wrote:
>
> Hello Mathias,
>
> The good news for you is that:
> IT IS POSSIBLE. I suceed to exchange arrays between a java service and a
> .net client (dotnet 2.0)
>
> I used the wsdl first approach, then I genarated the stubs [1].
>
> I suggest you to take a look at this pages:
>
> http://wiki.apache.org/ws/DotNetInteropArrays
>
> Also in order to interoperate with dotnet you should use the "wrapped"
> convention in your wsdl because dotnet uses it by default.
>
> This is a good article by Anne Thomas Manes about this topic with an WSDL
> file example.
>
>
> [1] http://www.mindreef.com/newsletter/newsletter-v6.html
>
> Regards,
>
> Jose FERREIRO
>
> PS: Try to implement those changes in your wsdl to see if you may
> interoperate (I assume you are using Axis 1.4):
>
>
>
>
>
> to
>
> name="getProcessedOrdersResponse"/>
>
>
> Change this to:
>
> 
>
> 
>   type="tns1:OrderHead"/>
> 
> 
>
>
> to
>
> 
>
> 
>
>
> 
> 
>
>
> On 6/11/08, Mathias P.W Nilsson <[EMAIL PROTECTED]> wrote:
>>
>>
>> Hi!
>>
>> I have developed a simple Axis webservice and it works fine when invoking
>> it
>> from a java client. When trying to invoke it in .net client I get an array
>> but all the values in the array is empty or nothing.
>>
>> I have read some posts here about this but I can't resolve this. Has
>> anyone
>> consumed Axis webservice from .net with success?
>>
>> Here is the wsdl genereted from a pojo using eclipse plugin
>>
>> 
>> http://ws.hairless.edgesoft.se";
>> xmlns:apachesoap="http://xml.apache.org/xml-soap";
>> xmlns:impl="http://ws.hairless.edgesoft.se";
>> xmlns:intf="http://ws.hairless.edgesoft.se";
>> xmlns:tns1="http://model.ws.hairless.edgesoft.se";
>> xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/";
>> xmlns:wsdlsoap="http://schemas.xmlsoap.org/wsdl/soap/";
>> xmlns:xsd="http://www.w3.org/2001/XMLSchema";>
>> 
>> 
>> > targetNamespace="http://ws.hairless.edgesoft.se";
>> xmlns="http://www.w3.org/2001/XMLSchema";>
>>   http://model.ws.hairless.edgesoft.se"/>
>>   
>>
>>   
>>   
>>
>> 
>>  > type="tns1:OrderHead"/>
>> 
>>
>>   
>> 
>> > targetNamespace="http://model.ws.hairless.edgesoft.se";
>> xmlns="http://www.w3.org/2001/XMLSchema";>
>>   
>>
>> 
>> 
>>
>>   
>> 
>> 
>>
>>   
>>
>>  
>>
>>   
>>
>>   
>>
>>  > name="parameters"/>
>>
>>   
>>
>>   
>>
>>  
>>
>> > name="getProcessedOrdersRequest"/>
>>
>> > name="getProcessedOrdersResponse"/>
>>
>>  
>>
>>   
>>
>>   
>>
>>  > transport="http://schemas.xmlsoap.org/soap/http"/>
>>
>>  
>>
>> 
>>
>> 
>>
>>
>>
>> 
>>
>> 
>>
>>
>>
>> 
>>
>>  
>>
>>   
>>
>>   
>>
>>  > name="OrderService">
>>
>> > location="http://192.168.1.2/hairless-web/services/OrderService"/>
>>
>>  
>>
>>   
>>
>> 
>>
>> --
>> View this message in context:
>> http://www.nabble.com/Consume-Axis-web-service-in-.net-client-tp17784604p17784604.html
>> Sent from the Axis - User mailing list archive at Nabble.com.
>>
>>
>> -
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>
>
> --
> José Ferreiro
> EPFL Communication Systems engineer
> ing.sys.com.dipl.EPFL
>
> "Think little goals and expect little achievements. Think big goals and win
> big success."  David Joseph Schwartz




-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: Consume Axis web service in .net client

[José Ferreiro]

Hello Mathias,

The good news for you is that:
IT IS POSSIBLE. I suceed to exchange arrays between a java service and a
.net client (dotnet 2.0)

I used the wsdl first approach, then I genarated the stubs [1].

I suggest you to take a look at this pages:

http://wiki.apache.org/ws/DotNetInteropArrays

Also in order to interoperate with dotnet you should use the "wrapped"
convention in your wsdl because dotnet uses it by default.

This is a good article by Anne Thomas Manes about this topic with an WSDL
file example.


[1] http://www.mindreef.com/newsletter/newsletter-v6.html

Regards,

Jose FERREIRO

PS: Try to implement those changes in your wsdl to see if you may
interoperate (I assume you are using Axis 1.4):


   
   

to
   
   


Change this to:


   

 




to


   

   
   




On 6/11/08, Mathias P.W Nilsson <[EMAIL PROTECTED]> wrote:
>
>
> Hi!
>
> I have developed a simple Axis webservice and it works fine when invoking
> it
> from a java client. When trying to invoke it in .net client I get an array
> but all the values in the array is empty or nothing.
>
> I have read some posts here about this but I can't resolve this. Has anyone
> consumed Axis webservice from .net with success?
>
> Here is the wsdl genereted from a pojo using eclipse plugin
>
> 
> http://ws.hairless.edgesoft.se";
> xmlns:apachesoap="http://xml.apache.org/xml-soap";
> xmlns:impl="http://ws.hairless.edgesoft.se";
> xmlns:intf="http://ws.hairless.edgesoft.se";
> xmlns:tns1="http://model.ws.hairless.edgesoft.se";
> xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/";
> xmlns:wsdlsoap="http://schemas.xmlsoap.org/wsdl/soap/";
> xmlns:xsd="http://www.w3.org/2001/XMLSchema";>
> 
> 
>  targetNamespace="http://ws.hairless.edgesoft.se";
> xmlns="http://www.w3.org/2001/XMLSchema";>
>   http://model.ws.hairless.edgesoft.se"/>
>   
>
>   
>   
>
> 
>   type="tns1:OrderHead"/>
> 
>
>   
> 
>  targetNamespace="http://model.ws.hairless.edgesoft.se";
> xmlns="http://www.w3.org/2001/XMLSchema";>
>   
>
> 
> 
>
>   
> 
> 
>
>   
>
>  
>
>   
>
>   
>
>   name="parameters"/>
>
>   
>
>   
>
>  
>
>  name="getProcessedOrdersRequest"/>
>
>  name="getProcessedOrdersResponse"/>
>
>  
>
>   
>
>   
>
>   transport="http://schemas.xmlsoap.org/soap/http"/>
>
>  
>
> 
>
> 
>
>
>
> 
>
> 
>
>
>
> 
>
>  
>
>   
>
>   
>
>  
>
>  location="http://192.168.1.2/hairless-web/services/OrderService"/>
>
>  
>
>   
>
> 
>
> --
> View this message in context:
> http://www.nabble.com/Consume-Axis-web-service-in-.net-client-tp17784604p17784604.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: .Net web service Security problem while invoking from axis 1.3

[José Ferreiro]

It looks like you are using

http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0.pdf(see
http://ws.apache.org/wss4j/package.html)

if yes, then for the actions you may use

  in order to
interoperate with .net and WSE 3.0
in WSDoAllSender and WSDoAllReceiver handlers.


Hope this helps.

Jose Ferreiro

On Fri, Jun 6, 2008 at 2:44 PM, sh_santosh <[EMAIL PROTECTED]> wrote:

>
> Dear Jose,
>
> How do i include timestamp in the actions While invoking .Net web services
> from axis 1.3.
> can you please explain.
>
> Regards
> Santosh
>
>
> José Ferreiro wrote:
> >
> > Hello,
> >
> > Did you included the timestamp in the actions?
> >
> > .net requires it by default.
> >
> > Jose Ferreiro
> >
> > On Fri, Jun 6, 2008 at 2:26 PM, sh_santosh <[EMAIL PROTECTED]>
> > wrote:
> >
> >>
> >> Dear All,
> >>
> >>
> >> I want to access a .NET webservice implemented on WSE3.0 Standards
> >> through
> >> my java application using Axis 1.3,but I am getting the Security Header
> >> missing Exception ,which i have mention below :-
> >>
> >> Exception in thread "main" AxisFault
> >> faultCode:
> >> {
> >>
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security<http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd%7DSecurity>
> <
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd%7DSecurity
> >
> >> faultSubcode:
> >> faultString: Microsoft.Web.Services3.Security.SecurityFault: Security
> >> requirements are not satisfied because the security header is not
> present
> >> in
> >> the incoming message.
> >>  at
> >>
> >>
> Microsoft.Web.Services3.Design.UsernameOverTransportAssertion.ServiceInputFilter.ValidateMessageSecurity(SoapEnvelope
> >> envelope, Security security)
> >>  at
> >>
> >>
> Microsoft.Web.Services3.Security.ReceiveSecurityFilter.ProcessMessage(SoapEnvelope
> >> envelope)
> >>  at Microsoft.Web.Services3.Pipeline.ProcessInputMessage(SoapEnvelope
> >> envelope)
> >>  at Microsoft.Web.Services3.WseProtocol.FilterRequest(SoapEnvelope
> >> requestEnvelope)
> >>  at Microsoft.Web.Services3.WseProtocol.RouteRequest(SoapServerMessage
> >> message)
> >>  at System.Web.Services.Protocols.SoapServerProtocol.Initialize()
> >>  at System.Web.Services.Protocols.ServerProtocolFactory.Create(Type
> type,
> >> HttpContext context, HttpRequest request, HttpResponse response,
> >> Boolean& abortProcessing)
> >> faultActor: https://testingapitest.test.com/testingapi.asmx
> >> faultNode:
> >> faultDetail:
> >>
> >> {
> >>
> http://xml.apache.org/axis/}stackTrace:Microsoft.Web.Services3.Security.SecurityFault<http://xml.apache.org/axis/%7DstackTrace:Microsoft.Web.Services3.Security.SecurityFault>
> <
> http://xml.apache.org/axis/%7DstackTrace:Microsoft.Web.Services3.Security.SecurityFault
> >
> >> :
> >> Security requirements are not satisfied because the security header is
> >> not
> >> present in the incoming message.
> >>  at
> >>
> >>
> Microsoft.Web.Services3.Design.UsernameOverTransportAssertion.ServiceInputFilter.ValidateMessageSecurity(SoapEnvelope
> >> envelope, Security security)
> >>  at
> >>
> >>
> Microsoft.Web.Services3.Security.ReceiveSecurityFilter.ProcessMessage(SoapEnvelope
> >> envelope)
> >>  at Microsoft.Web.Services3.Pipeline.ProcessInputMessage(SoapEnvelope
> >> envelope)
> >>  at Microsoft.Web.Services3.WseProtocol.FilterRequest(SoapEnvelope
> >> requestEnvelope)
> >>  at Microsoft.Web.Services3.WseProtocol.RouteRequest(SoapServerMessage
> >> message)
> >>  at System.Web.Services.Protocols.SoapServerProtocol.Initialize()
> >>  at System.Web.Services.Protocols.ServerProtocolFactory.Create(Type
> type,
> >> HttpContext context, HttpRequest request, HttpResponse response,
> >> Boolean& abortProcessing)
> >>  at
> >>
> >>
> org.apache.axis.message.SOAPFaultBuilder.createFault(SOAPFaultBuilder.java:222)
> >>  at
> >>
> >>
> org.apache.axis.message.SOAPFaultBuilder.endElement(SOAPFaultBuilder.java:129)
> >>  at
> >>
> >>
> org.apache.axis.encoding.DeserializationContext.endElement(DeserializationContext.java:1087)
> >> 

Re: .Net web service Security problem while invoking from axis 1.3

[José Ferreiro]

ll.java:2366)
>  at org.apache.axis.client.Call.invoke(Call.java:1812)
>  at
>
> com.vtech.external.implementation.test.testWSDLfiles.test.www.api.test.ws.internal.testAPISoapStub.testInfo(testAPISoapStub.java:859)
>  at
>
> com.vtech.external.implementation..test.testWSDLfiles.test.www.api.test.ws.internal.test.main(test.java:21)
>
>  
> {http://xml.apache.org/axis/}hostname:vibpj167<http://xml.apache.org/axis/%7Dhostname:vibpj167>
>
> Microsoft.Web.Services3.Security.SecurityFault: Security requirements are
> not satisfied because the security header is not present in the incoming
> message.
>  at
>
> Microsoft.Web.Services3.Design.UsernameOverTransportAssertion.ServiceInputFilter.ValidateMessageSecurity(SoapEnvelope
> envelope, Security security)
>  at
>
> Microsoft.Web.Services3.Security.ReceiveSecurityFilter.ProcessMessage(SoapEnvelope
> envelope)
>  at Microsoft.Web.Services3.Pipeline.ProcessInputMessage(SoapEnvelope
> envelope)
>  at Microsoft.Web.Services3.WseProtocol.FilterRequest(SoapEnvelope
> requestEnvelope)
>  at Microsoft.Web.Services3.WseProtocol.RouteRequest(SoapServerMessage
> message)
>  at System.Web.Services.Protocols.SoapServerProtocol.Initialize()
>  at System.Web.Services.Protocols.ServerProtocolFactory.Create(Type type,
> HttpContext context, HttpRequest request, HttpResponse response, Boolean&
> abortProcessing)
>  at
>
> org.apache.axis.message.SOAPFaultBuilder.createFault(SOAPFaultBuilder.java:222)
>  at
>
> org.apache.axis.message.SOAPFaultBuilder.endElement(SOAPFaultBuilder.java:129)
>  at
>
> org.apache.axis.encoding.DeserializationContext.endElement(DeserializationContext.java:1087)
>  at
>
> com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:633)
>  at
>
> com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.scanEndElement(XMLNSDocumentScannerImpl.java:719)
>  at
>
> com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(XMLDocumentFragmentScannerImpl.java:1685)
>  at
>
> com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:368)
>  at
>
> com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:834)
>  at
>
> com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:764)
>  at
>
> com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:148)
>  at
>
> com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1242)
>  at javax.xml.parsers.SAXParser.parse(SAXParser.java:375)
>  at
>
> org.apache.axis.encoding.DeserializationContext.parse(DeserializationContext.java:227)
>  at org.apache.axis.SOAPPart.getAsSOAPEnvelope(SOAPPart.java:696)
>  at org.apache.axis.Message.getSOAPEnvelope(Message.java:435)
>  at
>
> org.apache.axis.handlers.soap.MustUnderstandChecker.invoke(MustUnderstandChecker.java:62)
>  at org.apache.axis.client.AxisClient.invoke(AxisClient.java:206)
>  at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
>  at org.apache.axis.client.Call.invoke(Call.java:2767)
>  at org.apache.axis.client.Call.invoke(Call.java:2443)
>  at org.apache.axis.client.Call.invoke(Call.java:2366)
>  at org.apache.axis.client.Call.invoke(Call.java:1812)
>  at
>
> com.vtech.external.implementation..test.testWSDLfiles.test.www.api.test.ws.internal.testAPISoapStub.testInfo(testAPISoapStub.java:859)
>  at
>
> com.vtech.external.implementation..test.testWSDLfiles.test.www.api.test.ws.internal.testBkgDepInfo.main(testBkgDepInfo.java:21)
>
> --
> View this message in context:
> http://www.nabble.com/.Net-web-service-Security-problem-while-invoking-from-axis-1.3-tp17690995p17690995.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

"Think little goals and expect little achievements. Think big goals and win
big success." David Joseph Schwartz

Re: Using WSS4J with Axis 1.4

[José Ferreiro]

Hello Shirpad,

You need to determine first which Token Profile you will be using [1]:
Username Token Profile 1.1
X.509 Token Profile 1.1
SAML Token profile 1.1
Kerberos Token Profile 1.1

Also in the distribution of wss4j, there is samples.

Hope this helps


[1] http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss#overview




On 6/4/08, Shripad Gokhale <[EMAIL PROTECTED]> wrote:
>
>  Hi,
>
>
>
> I have developed a soap server using axis 1.4 in core java. Now I want to
> add security support using ws4j. What are the changes I need to do in order
> to achieve this?
>
>
>
> Thanks
>
> Shripad
>
> This message and the information contained herein is proprietary and 
> confidential and subject to the Amdocs policy statement,
> you may review at http://www.amdocs.com/email_disclaimer.asp
>
>


-- 
Jose Ferreiro
ing.sys.com.dipl.EPFL

Re: Interoperability in axis 1.4 and wse 3.0

[José Ferreiro]

Hello Anthony,

Apache has two projects on web services [http://ws.apache.org/].
1 - Axis 1.x [2]
2 - and Axis2 which is a redesign of Axis 1.x [3].

I fully agree with you that Axis2 will be more compatible with WSE 3.0.

In my test I used Axis 1.x (version Axis 1.4) implementing X.509 Token
Profile from WS-Security.

Kind regards,
Jose Ferreiro

[1] - http://ws.apache.org/
[2] - http://ws.apache.org/axis/
[3] - http://ws.apache.org/axis2/

On Fri, May 16, 2008 at 1:05 AM, Anthony Bull <[EMAIL PROTECTED]>
wrote:

>  Are you using Axis 1 1.4 or Axis 2 1.4?  Axis 2 is most certainly
> compatible, I've got projects in production doing interop with WSE 3.0
> services,using the WS-Addressing, WS-Security, WS-Kerberos profiles going
> over SSL.
>
>
> Shripad Gokhale wrote:
>
>  Hi,
>
>  I am using axis 1.4 currently in my application. I want to know if it is
> compactible with web services extension 3.0 (wse 3.0). Where can I get this
> information?
>
> Thanks
>
> Shripad
>
> This message and the information contained herein is proprietary and 
> confidential and subject to the Amdocs policy statement,
> you may review at http://www.amdocs.com/email_disclaimer.asp
>
>
>
> --
>
> Anthony
> -
> Anthony Bull
> Senior Developer
> Black Coffee Software Ltd
> PO Box 10-192 The Terrace
> Wellington, New Zealand
>  [EMAIL PROTECTED]
> Ph  +64 4 472 8818
> Fax +64 4 472 8811
> - www.bcsoft.co.nz
> ---
> This email may contain confidential or privileged information,
> and is intended for use only by the addressee, or addressees.
> If you are not the intended recipient please advise the sender
> immediately and do not copy, use or disclose the contents to
> any other person or organisation.
> Black Coffee Software Ltd accepts no responsibility for viruses
> received with this email, or to any changes made to the original
> content. Any views or opinions expressed in this email may be
> personal to the sender and are not necessarily those of Black
> Coffee Software Ltd.
> ---
>
>  ----- To
> unsubscribe, e-mail: [EMAIL PROTECTED] For additional
> commands, e-mail: [EMAIL PROTECTED]




-- 
José Ferreiro
EPFL Communication Systems engineer

Re: Interoperability in axis 1.4 and wse 3.0

[José Ferreiro]

Hello Shripad,

Some explanations from my side to avoid confusion in the answer:

WSE = The Web Services Enhancements (WSE) 3.0 for Microsoft(R) .NET is an
add-on to Microsoft Visual Studio(R) 2005 and the Microsoft .NET Framework 2.0
that enables developers to build secure Web services based on the latest Web
services protocol specifications [1].

Please note the word secure web services.

Axis 1.x = Java framework (formerly know as "Apache SOAP") that implements
the SOAP protocol (or a web service) [2]

Then WSE cannot be compactible with Axis 1.x because WSE allows
you develop secured web services and Axis 1.x allows you do develop web
services.

If I understood well your question should be:

Is Axis 1.4 and WSS4J compactible with WSE 3.0?

WSS4J being a Java implementation of OASIS Web Services Security
(WS-Security) standard [3]
and WSE 3.0 being a Microsoft implementation of of OASIS Web Services
Security (WS-Security) standard.

The whole question is to know if both technologies can
interoperate/communicate between them.

The answer in theory is yes.
But making it work is another question...

I may say that thanks to previous work from Erlend [4] I succeed making work
WSE 3.0 using the X.509 Certificate Token Profile [5].
For further information please check a blog I wrote with some significant
snapshots [6].

In my opinion, it depends on which Token Profile you would like to use you
will face different challenges to solve.
But I would say yes.

The different Token Profiles are:
Username, SAML, X.509 (the one I implemented and it works), Kerberos [7].

I will advice you to take a look to Axis2 as well.

Hope all this information will help you!
Happy axis!

Jose Ferreiro

[1] -
http://www.microsoft.com/downloads/details.aspx?familyid=018a09fd-3a74-43c5-8ec1-8d789091255d&displaylang=en
[2] - http://wiki.apache.org/ws/FrontPage/Axis/AxisGeneral
[3] - http://ws.apache.org/wss4j/
[4] - http://erlend.oftedal.no/blog/?blogid=12
[5] - http://www.oasis-open.org/specs/index.php#wssv1.0
[6] -
http://www.google.ch/search?q=Secure+Web+Services+Interoperability+using+X.509+Certificate+Token+Profile+(AXIS+1.4%2C+WSS4J+1.5.3%2C+dotnet+2.0%2C+WSE+3.0+)


http://magnot.blogspot.com/2008/04/secure-web-services-interoperability.html
[7] - http://www.oasis-open.org/specs/index.php#wssv1.0



On 5/15/08, Shripad Gokhale <[EMAIL PROTECTED]> wrote:
>
>   Hi,
>
>  I am using axis 1.4 currently in my application. I want to know if it is
> compactible with web services extension 3.0 (wse 3.0). Where can I get this
> information?
>
> Thanks
>
> Shripad
>
> This message and the information contained herein is proprietary and 
> confidential and subject to the Amdocs policy statement,
> you may review at http://www.amdocs.com/email_disclaimer.asp
>
>


-- 
José Ferreiro
EPFL Communication Systems engineer

Re: AXIS 1.4 and WSS4J - Client with different LOCAL TIMES [SOLUTION]

[José Ferreiro]

Here is the solution:

I started developing a secure web service in my development computer.
However when I deployed the application (in another server[JBoss]) to
simulate different clients connecting to the web service with different
LOCAL TIME ZONES, things went bad...

Problems with TIMESTAMP validation...

I got error the following error depending on the tested client (either
dotnet or java):

In Microsoft
[dotnet framework 2.0, WSE 3.0]
WSE065: Creation time of the timestamp is in the future. This typically
indicates lack of synchronization between
sender and receiver clocks.

or  for java
[Axis 1.4, wss4j 1.5.3]
Exception: WSDoAllReceiver: security processing failed; nested exception is:

org.apache.ws.security.WSSecurityException: An error was discovered
processing the  header. (WSSecurityEngine: Invalid timestamp
The security semantics of message have expired)

The problems are due that the two clocks in the clients and the server are
not synchonized.

JAVA World: WSS4J - Use the timeToLive parameter in the handler to resolve
this problem [1] [2].

MICROSOFT World: WSE 3.0 - Use the tags timeToleranceInSeconds  and
defaultTtlInSeconds in the app.config file of the web service in your
project (illustration follows with the corresponding xml tags) [3]


   




[1] - http://wiki.apache.org/ws/FrontPage/WsFx/wss4jFAQ#time
[2] -
http://ws.apache.org/wss4j/apidocs/org/apache/ws/security/handler/WSHandlerConstants.html#TTL_TIMESTAMP
[3] - http://msdn.microsoft.com/en-us/library/ms824668.aspx
[fyi] -
http://www.google.ch/search?q=Secure+Web+Services+Interoperability+using+X.509+Certificate+Token+Profile+(AXIS+1.4%2C+WSS4J+1.5.3%2C+dotnet+2.0%2C+WSE+3.0+)&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:fr-FR:official&client=firefox-a

Hope this helps!

Jose Ferreiro

On Wed, May 14, 2008 at 1:38 PM, José Ferreiro <> wrote:

> Dear newsgroup,
>
> I successfully developed a server side service using axis 1.4 and wss4j
> 1.5.3.
> I implemented the signature, encryption and timestamp features.
>
> I may manage the local time in the server.
> Nevertheless, I will have clients from different local times (not same
> time as in the server. the local time in the server is GMT+1 ).
>
> How can a java client implement/apply the right timestamp according to the
> server GMT+1 using axis 1.4 and wss4j 1.5.3?
>
> All suggestions are welcome.
>
> Thank you in advance
>
> Jose Ferreiro
>



-- 
José Ferreiro
EPFL Communication Systems engineer

AXIS 1.4 and WSS4J - Client with different LOCAL TIMES

[José Ferreiro]

Dear newsgroup,

I successfully developed a server side service using axis 1.4 and wss4j
1.5.3.
I implemented the signature, encryption and timestamp features.

I may manage the local time in the server.
Nevertheless, I will have clients from different local times (not same time
as in the server. the local time in the server is GMT+1 ).

How can a java client implement/apply the right timestamp according to the
server GMT+1 using axis 1.4 and wss4j 1.5.3?

All suggestions are welcome.

Thank you in advance

Jose Ferreiro

Jboss 4.0.3SP1 and Axis 1.x

[José Ferreiro]

Dear newsgroup,

I sucessfully developped a web service using tomcat.
However I would like to set up the web service using the Jboss server.

Does anyone could provide me with some info on how to do that?
I am having trouble to *deploy* the web service in the Jboss server.

I created a web folder webapps under %JBoss_Home%/server/default/deploy

Within the webapps folder I placed the whole folder axis. That I renamed
axis.war.

I may sucessfully start Jboss and the servlet (
http://localhost:8080/axis/servlet/AxisServlet).
*Nevertheless I am not eager to deploy my webservice (wsdd file).*

Any help or hints will be welcomed.

Thank you in advance.

[SOLUTION] - Is it possible to use interop (JAVA<->Microsoft) with x.509 Token profile? Response -> YES!

[José Ferreiro]

Dear newsgroup list,

I would like to share with you that it is possible to achieve *interoperability
*with the following combination of software for the x.509 Token profile:

*Goal: *server side fully developped using java. The secured web service
must be accessed by java or microsoft secured clients using x.509 Token
profile .

*Server side*: axis 1.4, wss4j 1.5.3, java jdk1.6.0_05 (keytool), tomcat 4.1
(I used tomcat 4.1 bcse it is faster for the test purposes)
*Java client side*: axis 1.4, wss4j 1.5.3
*Microsoft client side*: dotnet framework 2.0 and Web Services Enhancements
3.0 (WSE 3.0)
*Operating System*: XP with SP2
*Development software*: Microsoft Visual Studio 2005 and Eclipse Europe.

*Conversion jks to pfx *(PKCS #12): Version of OpenSSL 0.9.8g 19 Oct 2007.
This step is necessary to interoperate with the microsoft keystore.

I posted a small blog with some snapshots from my test environment:
http://magnot.blogspot.com/2008/04/secure-web-services-interoperability.html

Hope this helps!

Jose Ferreiro

Re: WSS4J: Hybrid system (Symmetric and asymmetric cryptography)

[José Ferreiro]

 Thank you for your reply Werner!

By the way, I found this interesting article explaining the *Mechanics of
WS-Security*.
Additionally it has some UML sequence diagrams corresponding to a *r**eal-world
WS-Security scenario*.

The link: http://www.ibm.com/developerworks/webservices/library/ws-best11/

Regards,



On 4/21/08, José Ferreiro <[EMAIL PROTECTED]> wrote:
>
> Thank you for your reply Werner!
>
> By the way, I found this interesting article explaining the *Mechanics of
> WS-Security*.
> Additionally it has some UML sequence diagrams corresponding to a 
> *r**eal-world
> WS-Security scenario*.
>
> Regards,
>
> Jose Ferreiro
>
> On 4/21/08, Dittmann, Werner (NSN - DE/Muenich) <[EMAIL PROTECTED]>
> wrote:
> >
> >  Jose,
> >
> > most of your question relate to the WS-Security specifications. Would
> > you be so
> > kind and refer to these specifications (OASIS Web Service Security). The
> > WSS4J
> > documentation (mostly Javadoc) and interop/demo programs give you some
> > more information how to use and deply WSS4J in Axis1 and Axis2
> > environments
> >
> > Best regards,
> > Werner
> >
> >
> >  --
> >  *Von:* ext José Ferreiro [mailto:[EMAIL PROTECTED]
> > *Gesendet:* Montag, 21. April 2008 17:03
> > *An:* [EMAIL PROTECTED]; axis-user@ws.apache.org
> > *Betreff:* WSS4J: Hybrid system (Symmetric and asymmetric cryptography)
> >
> >
> >
> >  *Hello,*
> > **
> > Definitions:
> > Asymmetric cryptography: Form of cryptography in which a user has a pair
> > of cryptographic keys (a *public key* and a *private key*)
> > Symmetric cryptography:  Form of cryptography in which many user shared
> > a secret-key (*single key*)
> >
> > *WSS4J works as follows for encryption*:
> >
> > WSS4J generates a random session key (*single key*) for every new
> > "session" (SOAP message), encrypts the data using the *single key*.
> > The server's *public key* (usually contained in a X.509 certificate)
> > encrypts the *session key* and packs it into the relevant SOAP header
> > structure.
> >
> > Is this correct?
> > Which is the default *symmetric* algorithm to encrypt the SOAP body data
> > in WSS4J? Is it aes128-cbc?
> > Which is the default *asymmetric* algorithm to encrypt the symmetric key
> > (*single key*) in WSS4J? Is it RSA?
> >
> >
> > *WSS4J works as follows for signing*:
> >
> > The client uses its *private key* to sign the SOAP body. The server uses
> > the client's public key to check the signature of the SOAP body content
> > using a cryptographic hash fuction.
> > The client's public key is usually contained in a signed certificate by
> > a Certificate Authority (such as Verisign)
> >
> > Is this correct?
> >  Which is the default hash algorithm to sign the SOA body data in WSS4J?
> > Is it SHA-1?
> >
> > Thank you in advance for your comments.
> >
> > Jose Ferreiro
> >
> >
> >
> >
> >
> >
>
>
> --
> José Ferreiro
> EPFL Communication Systems engineer
> ing.sys.com.dipl.EPFL
>
> "Think little goals and expect little achievements. Think big goals and
> win big success."  David Joseph Schwartz




-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: WSS4J: Hybrid system (Symmetric and asymmetric cryptography)

[José Ferreiro]

Thank you for your reply Werner!

By the way, I found this interesting article explaining the *Mechanics of
WS-Security*.
Additionally it has some UML sequence diagrams corresponding to a *r**eal-world
WS-Security scenario*.

Regards,

Jose Ferreiro

On 4/21/08, Dittmann, Werner (NSN - DE/Muenich) <[EMAIL PROTECTED]>
wrote:
>
>  Jose,
>
> most of your question relate to the WS-Security specifications. Would you
> be so
> kind and refer to these specifications (OASIS Web Service Security). The
> WSS4J
> documentation (mostly Javadoc) and interop/demo programs give you some
> more information how to use and deply WSS4J in Axis1 and Axis2
> environments
>
> Best regards,
> Werner
>
>
>  --
>  *Von:* ext José Ferreiro [mailto:[EMAIL PROTECTED]
> *Gesendet:* Montag, 21. April 2008 17:03
> *An:* [EMAIL PROTECTED]; axis-user@ws.apache.org
> *Betreff:* WSS4J: Hybrid system (Symmetric and asymmetric cryptography)
>
>
>
>  *Hello,*
> **
> Definitions:
> Asymmetric cryptography: Form of cryptography in which a user has a pair
> of cryptographic keys (a *public key* and a *private key*)
> Symmetric cryptography:  Form of cryptography in which many user shared a
> secret-key (*single key*)
>
> *WSS4J works as follows for encryption*:
>
> WSS4J generates a random session key (*single key*) for every new
> "session" (SOAP message), encrypts the data using the *single key*.
> The server's *public key* (usually contained in a X.509 certificate)
> encrypts the *session key* and packs it into the relevant SOAP header
> structure.
>
> Is this correct?
> Which is the default *symmetric* algorithm to encrypt the SOAP body data
> in WSS4J? Is it aes128-cbc?
> Which is the default *asymmetric* algorithm to encrypt the symmetric key (
> *single key*) in WSS4J? Is it RSA?
>
>
> *WSS4J works as follows for signing*:
>
> The client uses its *private key* to sign the SOAP body. The server uses
> the client's public key to check the signature of the SOAP body content
> using a cryptographic hash fuction.
> The client's public key is usually contained in a signed certificate by a
> Certificate Authority (such as Verisign)
>
> Is this correct?
>  Which is the default hash algorithm to sign the SOA body data in WSS4J?
> Is it SHA-1?
>
> Thank you in advance for your comments.
>
> Jose Ferreiro
>
>
>
>
>
>


-- 
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

WSS4J: Hybrid system (Symmetric and asymmetric cryptography)

[José Ferreiro]

*Hello,*
**
Definitions:
Asymmetric cryptography: Form of cryptography in which a user has a pair of
cryptographic keys (a *public key* and a *private key*)
Symmetric cryptography:  Form of cryptography in which many user shared a
secret-key (*single key*)

*WSS4J works as follows for encryption*:

WSS4J generates a random session key (*single key*) for every new "session"
(SOAP message), encrypts the data using the *single key*.
The server's *public key* (usually contained in a X.509 certificate)
encrypts the *session key* and packs it into the relevant SOAP header
structure.

Is this correct?
Which is the default *symmetric* algorithm to encrypt the SOAP body data in
WSS4J? Is it aes128-cbc?
Which is the default *asymmetric* algorithm to encrypt the symmetric
key (*single
key*) in WSS4J? Is it RSA?


*WSS4J works as follows for signing*:

The client uses its *private key* to sign the SOAP body. The server uses the
client's public key to check the signature of the SOAP body content using a
cryptographic hash fuction.
The client's public key is usually contained in a signed certificate by a
Certificate Authority (such as Verisign)

Is this correct?
 Which is the default hash algorithm to sign the SOA body data in WSS4J? Is
it SHA-1?

Thank you in advance for your comments.

Jose Ferreiro

Re: Adapting my "Java only" webservice security to a .net client

[José Ferreiro]

Hello Steve,

I am glad my indications could help you to produce a Axis2/Rampart service
where a .net client could connect to the service!

May I ask you which security scenario did you use in your Axis2/Rampart
project:

TIMESTAMP, ENCRYPTION, SIGNATURE?

Which certificates did you use (own ones or sample ones).

I assume you used the framework .net 2.0 with WSE 3.0 . Is  this correct?

Thank you

José Ferreiro



On Mon, Apr 14, 2008 at 10:17 PM, <[EMAIL PROTECTED]> wrote:

> Jose,
>
> Wow - I just got a new project where our Axis2/Rampart web services will
> be
> consumed by .NET client. You answered most of the questions I had.
>
> Many thanks!
>
> - Steve
>
> __
>
>
>

"Think little goals and expect little achievements. Think big goals and win
big success." David Joseph Schwartz

Re: Adapting my "Java only" webservice security to a .net client

[José Ferreiro]

Hello Raphaël,

I will suggest you to download WSE 3.0 (Web Services Enhancements) which
requires .net 2.0 framework (although you said you need a client  using .net
1.1).

I will strongly recommend you to use .net 2.0 framework.

If you need to use .net 1.1. I think you may use it with WSE 2.0.

The thing is that WSE 3.0 should be more robust than WSE 2.0 in terms of
stability and above all more compliant in terms of the WS-security standard
point of view from OASIS.

You are correct when saying that you need to use the TIMESTAMP parameter.

When you will install the WSE 2.0 or WSE 3.0, there is some examples
provided with the package.
Please also note that WSS4J package provides examples under the folder
"interop".

There is specially the folder interop/keys that contains the keys in the jks
format and keys in the pfx format. They explain how they generated them
(from jks -> pfx), but it is still unclear for me about the formats.

Maybe some of the wss4j developers may provide us more information!
Because it is not easy to transfer the keys generated with the keytool to
the Microsoft world.

You may use the WSDL Proxy class tool (WseWsdl3.exe - this comes with WSE
3.0  ) from microsoft to generate the proxy code for the Web service client
from the existing WSDL file you have.

Please note that your wsdl should be compliant with WS-I, in order to
achieve maximal interoperability between the two technologies (Microsoft WSE
3.0 - Axis 1.4, wss4j)  (http://www.ws-i.org/).

To develop the .net client you may use Visual C# 2005 Express
Edition<http://msdn.microsoft.com/vstudio/express/visualcsharp/>(free),
there is also a c-sharp plugin for Eclipse if you decide to write
your client in C-sharp language.

Well Raphaël, hope I provide some directions to inspire you.

Kind regards,

José Ferreiro


On 4/14/08, Raphaël Di Cicco <[EMAIL PROTECTED]> wrote:
>
>
> Hello,
>
> I have the following configuration :
> tomcat 5.5.25
> axis 1.4
> wss4j 1.5.3
> JDK1.5
> JKS and self signed certificates
>
> I was able to secure the connection between my java client and the server
> by
> using the following conguration :
>
> SERVER WSDD
>  xmlns:ict="urn:dtos.client.ws.ic.axa.com">
> 
> 
> 
>   
> value="com.ic.ws.helpers.PWCallback"/>
>
> />
>   
> 
> ...
> 
>
> CRYPTO SERVER PROPERTIES
>
> org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
> org.apache.ws.security.crypto.merlin.keystore.type=jks
> org.apache.ws.security.crypto.merlin.keystore.password=keystorepassword
> org.apache.ws.security.crypto.merlin.keystore.alias=serverUser
> org.apache.ws.security.crypto.merlin.alias.password=myserverpassword
> org.apache.ws.security.crypto.merlin.file=serverkeystore.jks
>
> CLIENT WSDD
> 
> http://xml.apache.org/axis/wsdd/";
> xmlns:java="http://xml.apache.org/axis/wsdd/providers/java";>
>  pivot="java:org.apache.axis.transport.http.HTTPSender"/>
> 
>   
>
> 
>  value="com.axa.ic.ws.client.helpers.PWCallback"/>
> 
> 
>  />
> 
> 
>  value="{Element}{
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}UsernameToken
> "
> />
>
>   
> 
> 
>
>
> The hard part comes now... I have to make this work with a .Net 1.1
> client.
> I understand the .net framework must use WSE but I'm unsure which version
> :
> 2.0 or 3.0 ?
> I also know that I must use the Timestamp action for it to be compatible.
> Beeing a complete newbie to .Net I looked for a sample or tutorial that
> could fit to my project but could not find any. I'm especially confused
> about certificates, which format should I use to be compatible on both
> sides, and also about the policy file from the .net side that seems rather
> complex.
>
> So I was wondering if any of you had success with such configuration. Some
> pointers or code samples would be greatly appreciated in order for me to
> advance to interoperability.
>
> Thank you,
> Raphaël
> --
> View this message in context:
> http://www.nabble.com/Adapting-my-%22Java-only%22-webservice-security-to-a-.net-client-tp16678577p16678577.html
> Sent from the WSS4J mailing list archive at Nabble.com.
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


-- 
José Ferreiro

"Think little goals and expect little achievements. Think big goals and win
big success."  David Joseph Schwartz

Re: Ws-secureconversation rampart samples

[José Ferreiro]

Thank you so much for the interesting links. I appreciate it.


On Jan 18, 2008 1:31 PM, ahurtado <[EMAIL PROTECTED]> wrote:

>
> Precisely I'm trying this at this time, but most links you can get about
> interoperability-work between platforms (.net - java ) is shown using
> windows communication foundation + .net 3.0/3.5 in the .net side. If you
> need a choice in the client side, I think WCF is a better choice. In the
> case of server side, an api that can expose your policies as a mex (like
> https://wsit.dev.java.net/ metro , or axis-2 + some other configuration
> does), is a good candidate.
>
> About interoperability with wse-3.0 in the .net (client side), here is a
> link that can help you (take in mind that this service example does not
> show
> the secure conversation that you can enable with the wse-3.0 wizard:
> http://www.shellysaunders.co.uk/Blog/tabid/65/EntryID/2/Default.aspx
> http://www.shellysaunders.co.uk/Blog/tabid/65/EntryID/2/Default.aspx
> (this does not shown the flag establishSecurityContext enabled as you can,
> as described in the Hands On Labs of wse-3 about security:
>
> http://www.microsoft.com/Downloads/details.aspx?familyid=018A09FD-3A74-43C5-8EC1-8D789091255D&displaylang=en
> )
>
>
>
>
>
>
>
> José Ferreiro wrote:
> >
> > Hello,
> >
> > Do you think this configuration could work?
> >
> > Client  side : .net 2.0 wse 3.0, authentication using: x.509
> > server side : axis2, rampart + rahas, authentication using: x.509,
> >
> > Is there any example or article?
> >
> > Thank you in advance for your answers
> >
> >
> > On Jan 18, 2008 2:08 AM, ahurtado <[EMAIL PROTECTED]> wrote:
> >
> >>
> >> I have seen that for web service secure conversation:
> >>  + for axis1 there are some classes in wss4j and in wss4j-sandbox that
> >> indicates that "once upon a time" was some interest for do that (this
> is,
> >> enable axis 1 for secure conversation), but i have not found a concrete
> >> sample working doing this, specially if you want to integrate the web
> >> service with .net 2.0 + web service enhancements (wse-3.0), mantaining
> >> x.509
> >> security certificates enabled at the same time.
> >>  + for axis2, you can use rampart + rahas for this support, but the
> >> sample
> >> uses x.509, I think that you need to configure the services.xml of the
> >> sample to make it work with usernametoken (  section ). you
> >> can
> >> explore http://www.mssoapinterop.org/ilab/ to find some samples for
> write
> >> this section.
> >>
> >>
> >> Anil Misra wrote:
> >> >
> >> > Hi,
> >> >
> >> >  I have the same requirement and I see no reply to the question
> below,
> >> > if some has a sample please let me know.
> >> >
> >> > Thanks,
> >> > -Anil Misra
> >> >
> >> >
> >> > 
> >> > Hi Ruchith,
> >> >
> >> > Do you have please sample configuration where the base token in RST
> is
> >> > usernametoken instead of x509?
> >> >
> >> > Thank you,
> >> > Elena
> >> >
> >> > - Original Message 
> >> > From: Ruchith Fernando <[EMAIL PROTECTED]>
> >> > To: axis-user@ws.apache.org
> >> > Sent: Tuesday, February 13, 2007 9:25:28 AM
> >> > Subject: Re: Ws-secureconversation rampart samples
> >> >
> >> >
> >> > Hi Elena,
> >> >
> >> > Please have a look at "policy/sample04" in the samples directory of
> >> > the rampart-1.1 release.
> >> >
> >> > Thanks,
> >> > Ruchith
> >> >
> >> > On 2/11/07, Elena Neroslavskaya <[EMAIL PROTECTED]> wrote:
> >> >>
> >> >> Hello,
> >> >>
> >> >> I'm looking to implement an axis client establishing and canceling
> >> > security
> >> >> context
> >> >> with ws-secureconversation protocol. Do you have a code sample
> sending
> >> > RST,
> >> >> using context and cancelling it in Rampart?
> >> >>
> >> >>
> >> >> Any tutorial or sample will be very helpful,
> >> >>
> >> >> thank you in advance,
> >> >> Elena
> >> >>
> >> >
> >> >
> >> >
> >> >
> >> >
> >>
> >> --
> >> View this message in context:
> >>
> http://www.nabble.com/Ws-secureconversation-rampart-samples-tp14807694p14942019.html
> >> Sent from the Axis - User mailing list archive at Nabble.com.
> >>
> >>
> >> -
> >> To unsubscribe, e-mail: [EMAIL PROTECTED]
> >> For additional commands, e-mail: [EMAIL PROTECTED]
> >>
> >>
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/Ws-secureconversation-rampart-samples-tp14807694p14949166.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Re: Ws-secureconversation rampart samples

[José Ferreiro]

Hello,

Do you think this configuration could work?

Client  side : .net 2.0 wse 3.0, authentication using: x.509
server side : axis2, rampart + rahas, authentication using: x.509,

Is there any example or article?

Thank you in advance for your answers


On Jan 18, 2008 2:08 AM, ahurtado <[EMAIL PROTECTED]> wrote:

>
> I have seen that for web service secure conversation:
>  + for axis1 there are some classes in wss4j and in wss4j-sandbox that
> indicates that "once upon a time" was some interest for do that (this is,
> enable axis 1 for secure conversation), but i have not found a concrete
> sample working doing this, specially if you want to integrate the web
> service with .net 2.0 + web service enhancements (wse-3.0), mantaining
> x.509
> security certificates enabled at the same time.
>  + for axis2, you can use rampart + rahas for this support, but the sample
> uses x.509, I think that you need to configure the services.xml of the
> sample to make it work with usernametoken (  section ). you
> can
> explore http://www.mssoapinterop.org/ilab/ to find some samples for write
> this section.
>
>
> Anil Misra wrote:
> >
> > Hi,
> >
> >  I have the same requirement and I see no reply to the question below,
> > if some has a sample please let me know.
> >
> > Thanks,
> > -Anil Misra
> >
> >
> > 
> > Hi Ruchith,
> >
> > Do you have please sample configuration where the base token in RST is
> > usernametoken instead of x509?
> >
> > Thank you,
> > Elena
> >
> > - Original Message 
> > From: Ruchith Fernando <[EMAIL PROTECTED]>
> > To: axis-user@ws.apache.org
> > Sent: Tuesday, February 13, 2007 9:25:28 AM
> > Subject: Re: Ws-secureconversation rampart samples
> >
> >
> > Hi Elena,
> >
> > Please have a look at "policy/sample04" in the samples directory of
> > the rampart-1.1 release.
> >
> > Thanks,
> > Ruchith
> >
> > On 2/11/07, Elena Neroslavskaya <[EMAIL PROTECTED]> wrote:
> >>
> >> Hello,
> >>
> >> I'm looking to implement an axis client establishing and canceling
> > security
> >> context
> >> with ws-secureconversation protocol. Do you have a code sample sending
> > RST,
> >> using context and cancelling it in Rampart?
> >>
> >>
> >> Any tutorial or sample will be very helpful,
> >>
> >> thank you in advance,
> >> Elena
> >>
> >
> >
> >
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/Ws-secureconversation-rampart-samples-tp14807694p14942019.html
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Re: WSS4J, AXIS1.X, WSE (interop)

[José Ferreiro]

I am asking for a possible configuration client and server side (doesn't
need to be with tomcat)
Thank you.

On Jan 4, 2008 2:56 PM, José Ferreiro <[EMAIL PROTECTED]> wrote:

> Hello everybody,
>
> I would like to ask the developers (or if someone knows) from WSS4J or
> AXIS 1.X world
> if there is interoperability scenarios that *works* with:
>
> AXIS + WSS4J (server side with tomcat)
> and WSE2.0 or WSE3.0
>
> using digital certificates.
>
> Any information will be very much appreciated.
> Thank you in advance.
>
>
>

WSS4J, AXIS1.X, WSE (interop)

[José Ferreiro]

Hello everybody,

I would like to ask the developers (or if someone knows) from WSS4J or AXIS
1.X world
if there is interoperability scenarios that *works* with:

AXIS + WSS4J (server side with tomcat)
and WSE2.0 or WSE3.0

using digital certificates.

Any information will be very much appreciated.
Thank you in advance.

Re: Web Services: Axis -> C# :: AuthenticationException

[José Ferreiro]

Hello,

Try to use this tool because I think you are having problem with the
accepted format in .net.

http://www.alphaworks.ibm.com/tech/keyman

KeyMan is a tool for managing keys, certificates, certificate revocation
lists (CRLs), and the respective repositories for storing and retrieving
these items. The full life cycle of certificates is supported, as are
processes involved in handling user and server certificates.

Are you using your own generated cer? Do you use WSE 2.0 or WSE 3.0? Which
.net framework do you user .net 1.1 or .net 2.0



Jose Ferreiro


On 7/23/07, Srinivasa Rao K <[EMAIL PROTECTED]> wrote:


Hi,

I have extracted certificate ".der" (its not allowing ".cer") file by
using IBM ikeyman tool.
C:\Program
Files\IBM\irRational\SDP\6.0\runtimes\base_v51\etc\DummyServerTrustFile.JKS
file is used as input file for the too. ( RAD6 )

 C# client for Version Service which is on WebSphere.

 X509Certificate x509 = X509Certificate.CreateFromCertFile
(@"C:\downloads\CSharpTest\certificates\cert.der");
 Project2.version.VersionService Ver = new Project2.Version.VersionService
();
 Ver.ClientCertificates.Add(x509);
 Ver.Credentials = new System.Net.NetworkCredential("", "*");
 string version = Ver.getVersion();

I am getting the below error.

Unhandled Exception: System.Net.WebException: The underlying connection
was clos
ed: Could not establish trust relationship for the SSL/TLS secure channel.
--->
System.Security.Authentication.AuthenticationException: The remote
certificate i
s invalid according to the validation procedure.

Thanks,
Srini

--
Park yourself in front of a world of choices in alternative vehicles.
Visit the Yahoo! Auto Green 
Center.<http://us.rd.yahoo.com/evt=48246/*http://autos.yahoo.com/green_center/;_ylc=X3oDMTE5cDF2bXZzBF9TAzk3MTA3MDc2BHNlYwNtYWlsdGFncwRzbGsDZ3JlZW4tY2VudGVy>





--
José Ferreiro Jose Ferreiro

Re: docs for wss4j

[José Ferreiro]

Hello,

You may visit this page:

http://wso2.org/projects/wss4j

and then refer to the paragraph Links which refers to substantive
information.

Hope this helps

José Ferreiro
Jose


On 6/21/07, Richard DeGrande <[EMAIL PROTECTED]> wrote:


Hi

I'm trying to write a WS client to a secure service using axis 1.4 and
wss4j.  I am having some difficulty finding information on the use of
wss4j.  Does anyone know of any links that could help me out ?

thanks in advance


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

[SOLUTION] Example of Logging SOAP requests/responses in AXIS 1.4

[José Ferreiro]

Dear Rich,


This will probably of your interest. I am using successfully the log method
in Axis 1.4. It made it working but i didn't investigate all the options,
for example where to store the log file, the log file name, etc. I was only
curious to see if it could work to keep a trace of the message requests and
responses!

In my case it works as follows:

In the client wsdd file add the following code:


 

 

  

  
 
  


This will create a log file by default nammed axis.log and it is in the root
folder of my eclipse project when I run the web service client.

Add this in deploy.wsdd
It is really interesting feature because it logs the REQUEST AND THE
RESPONSES.



  

 

  

  
 
  

   


the log file is nammed axis.log and in my case it is stored in



Those links will provide you more information:

http://www.theserverside.com/discussions/thread.tss?thread_id=35765
http://www.google.com/support/adwordsapi/bin/answer.py?answer=15137
http://forum.java.sun.com/thread.jspa?threadID=724190

HOPE THIS HELPS.

CHEERS

Jose Ferreiro
José Ferreiro



2007/5/24, Rich Adili <[EMAIL PROTECTED]>:


Hi dims,

Thanks! That's just what I need for my product design. However, I'm also
babysitting a legacy application written around an Axis1.4 beta, I
forget exactly which beta. Do you know if this technique also applies to
the older code?

Rich

-Original Message-
From: Davanum Srinivas [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 23, 2007 3:06 PM
To: axis-user@ws.apache.org
Subject: Re: Logging SOAP requests?

Rich,

See http://blogs.cocoondev.org/dims/archives/004668.html

thanks,
dims

On 5/23/07, Rich Adili <[EMAIL PROTECTED]> wrote:
>
>
>
>
> Was thinking in terms of an option that field personnel could flip on
and
> off. Debugging proxies are a bit arduous for such folks. I'm surprised
a
> simple logging mechanism isn't built in.
>
>
>
>  
>
>
> From: robert lazarski [mailto:[EMAIL PROTECTED]
>  Sent: Wednesday, May 23, 2007 3:01 PM
>  To: axis-user@ws.apache.org
>  Subject: Re: Logging SOAP requests?
>
>
>
>
> If you are talking about writing them to a file / db via log4j , look
at the
> modules guide and their howto on writing a logging module:
>
>  http://ws.apache.org/axis2/1_2/modules.html
>
>  If you just want to look at it, try tcpmon or the soapmonitor.
>
>  HTH,
>  Robert
>
>
> On 5/23/07, Rich Adili < [EMAIL PROTECTED]> wrote:
>
>
> Hi,
>
> How does one go about logging the outgoing SOAP requests?
>
> Rich Adili
>
>


--
Davanum Srinivas :: http://davanum.wordpress.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-----
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: create Java base Web service client

[José Ferreiro]

Hello Ashish,

I am myself using axis 1.x. and there is a folder with examples on the
binary distribution.
And it is the same for Axis2.

You may start downloading the binary distribution here (
http://ws.apache.org/axis2/download/1_2/download.html#std-bin):

http://ws.apache.org/axis2/
http://ws.apache.org/axis2/1_2/quickstartguide.html

This web side wwill be also useful for you:

http://wso2.org/projects/axis2/java

Have a nice day.

José


On 4/28/07, Ashish Kulkarni <[EMAIL PROTECTED]> wrote:


Hi
Thanks for your email, i will be using axis 2 as the webservice is written
in java, and is writting using egate interface,
Now with axis 2, do i run wsdl2java to create java classes and then call
some methods?

do you have any example of doing so using axis 2

Ashish

On 4/27/07, José Ferreiro <[EMAIL PROTECTED] > wrote:
>
> Dear Ashish,
>
> I will say that you have two technologies to do that (among many
> others).
>
> You may choose Microsoft or Open source libraries.
>
> In this mailing list you have people working with Axis 1.x and Axis2.
> Axis 1.4 doesn't has any further development.
> Axis2 is evolving and supports different types of WS-standarts (which is
> not the case for Axis 1.x).
>
> Well, in my opinion you should ask the people who gave you the wsdl what
> kind of web service server do they have.
> If they are working with open source I will suggest your client should
> be open source.
> On the other hand if they are using microsoft, then I will suggest you
> to use Microsoft.
>
> Basically, using the same technology as they use will simplify your
> development life of your client.
>
> After you choose that you should then understand how to build the client
> with the desired technology.
>
> For Axis 1.4 or Axis2 you will use wsdl2java. This utility will generate
> automatically the "stubs".
> Then, you need to complete the code with your logic.
> You may also write your own client using the a DYNAMIC INVOCATION
> INTERFACE method.
> However the source code for a DII client is more complicated than the
> code for the other two types of clients.
> I will suggest you to use the wsdl2java (at least for starting).
>
> If you will use Microsoft, then you have to learn  about .NET frametwork
> and choose C# for example as programming language. You probably will need MS
> visual studio as IDE
> There you will use the command wsdl.exe (for java wsdl2java, use eclipse
> with ant).
>
> Hope this little introduction was helpfull.
>
> José Ferreiro
>
>
>
>
> On 4/27/07, Ashish Kulkarni <[EMAIL PROTECTED]> wrote:
> >
> > Hi
> > I recently got a WSDL file, and i am expected to write a web service
> > client to access this web service,
> > Can some one give some pointers, and code or example or tutorial to do
> > so.
> > What are the steps, do i have to used WSDL2JAVA to create some thing.
> >
> >
> > Ashish
> >
>
>
>
> --
> José Ferreiro
> EPFL Communication Systems engineer
> ing.sys.com.dipl.EPFL






--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: create Java base Web service client

[José Ferreiro]

Dear Ashish,

I will say that you have two technologies to do that (among many others).

You may choose Microsoft or Open source libraries.

In this mailing list you have people working with Axis 1.x and Axis2.
Axis 1.4 doesn't has any further development.
Axis2 is evolving and supports different types of WS-standarts (which is not
the case for Axis 1.x).

Well, in my opinion you should ask the people who gave you the wsdl what
kind of web service server do they have.
If they are working with open source I will suggest your client should be
open source.
On the other hand if they are using microsoft, then I will suggest you to
use Microsoft.

Basically, using the same technology as they use will simplify your
development life of your client.

After you choose that you should then understand how to build the client
with the desired technology.

For Axis 1.4 or Axis2 you will use wsdl2java. This utility will generate
automatically the "stubs".
Then, you need to complete the code with your logic.
You may also write your own client using the a DYNAMIC INVOCATION INTERFACE
method.
However the source code for a DII client is more complicated than the code
for the other two types of clients.
I will suggest you to use the wsdl2java (at least for starting).

If you will use Microsoft, then you have to learn  about .NET frametwork and
choose C# for example as programming language. You probably will need MS
visual studio as IDE
There you will use the command wsdl.exe (for java wsdl2java, use eclipse
with ant).

Hope this little introduction was helpfull.

José Ferreiro




On 4/27/07, Ashish Kulkarni <[EMAIL PROTECTED]> wrote:


Hi
I recently got a WSDL file, and i am expected to write a web service
client to access this web service,
Can some one give some pointers, and code or example or tutorial to do so.
What are the steps, do i have to used WSDL2JAVA to create some thing.


Ashish





--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: How to validate WSDL file?

[José Ferreiro]

Hello,

Well, I am using this tool wsdlviewer (
http://wcf.netfx3.com/files/folders/development_tools/entry5214.aspx )
WSDL files, especially large ones, are ofter hard to read as plain XML and
when adding an element you may forgot to close a tag, etc.

This tool helps me to parse the file quickly and tell me if it is valid or
not.

This is my main usage.

Hope this helps.

José FERREIRO




On 4/12/07, Thilina Gunarathne <[EMAIL PROTECTED]> wrote:


Eclipse WTP[1] comes with a WSDL validator. It's open source too..

Thilina
[1]http://www.eclipse.org/webtools/main.php

On 4/12/07, Vikas <[EMAIL PROTECTED]> wrote:
>
>
> Hi Friends,
>
> I have created WSDL file for simple "HelloWorld" application. It is
simple,
> but when our WSDL file will grow; then it is very difficult to validate
that
> wsdl file.
>
> So for that, Is there any functionality available from Axis2 to validate
> wsdl file OR by using wsdl2java utility?
> OR is there any open source tool is available to validate WSDL file?
>
> Is there any thing available with data binding framework like
> ADB/XMLBeans/JiBX for validating WSDL?
>
> With best regards
>
> From
> Vikas R. Khengare
>


--
Thilina Gunarathne  -  http://www.wso2.com - http://thilinag.blogspot.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Re: Can we define multiple web services in single WSDL?

[José Ferreiro]

gt;
> > > --
> > > Now that's room service! Choose from over 150,000 hotels
> > > in 45,000 destinations on Yahoo! 
Travel<http://travel.yahoo.com/hotelsearchpage;_ylc=X3oDMTFtaTIzNXVjBF9TAzk3NDA3NTg5BF9zAzI3MTk0ODEEcG9zAzIEc2VjA21haWx0YWdsaW5lBHNsawNxMS0wNw--%0A>to
 find your fit.
> > >
> >
> >
> >
> > --
> > ##
> > Sr. Software Developer
> > +919899566690
> > ##
> >
> >
> >
> >
> >   o o o o o o o . . .   __
> > o  _   |||
> >   .][__n_n_|DD[  _  | |
> > >(|__|_[_]_||
> > _/oo O oo`  ooo   ooo  'o!o!o  o!o!o`
> > -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
> >
> >
>
>
> --
> ##
> Sr. Software Developer
> +919899566690
> ##
>
>
>
>
>   o o o o o o o . . .   __
> o  _   |||
>   .][__n_n_|DD[  _  | |
> >(|__|_[_]_||
> _/oo O oo`  ooo   ooo  'o!o!o  o!o!o`
> -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>



--
##
Sr. Software Developer
+919899566690
##




  o o o o o o o . . .   __
o  _   |||
  .][__n_n_|DD[  _  | |
>(|__|_[_]_||
_/oo O oo`  ooo   ooo  'o!o!o  o!o!o`
-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+





--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

Download WSS4J 1.5.0

[José Ferreiro]

Hello

Where can I donwload the WSS4J 1.5.0 version?
Can't find it in any of the mirrors proposed at WSS4J web site. (
http://www.apache.org/dyn/closer.cgi/ws/wss4j/)

Thank you in advance and best regards

--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

[AXIS 1.4] WS-addressing

[José Ferreiro]

Hello,

Does anyone know if it is possible to make working WS-Addressing with AXIS
1.4?
All suggestions are welcome.

Thank you.


--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

[AXIS 1.4 WSS4J] - Keystore interop

[José Ferreiro]

HELLO,

I have a key store from Java in the JKS format that was created with
KEYTOOL.

I programmed a .net client.
As the .net client, more specifically Windows keystores do not support JKS I
successfully exported a key for my client to the format PFX (PKCS12), which
is a format recognized by the Windows Keystores.

Then, I have the public key of the client in the java keystore (format JKS).
I have the public and private key in the windows keystore (format PFX
[PKCS12]).

This is my question:

Does the inteoperability work like this for the x509 certificates?
That is to say if a key is in JKS format in the server and the client has a
PFX key (generated from the one in the server).

Thank you for any hint or tip.

Regards,
José

[Axis 1.4, WSS4J] - Timestamp in SOAP is one hour less than my current time in the computer (my timezone is : GMT+1 - Switzerland)

[José Ferreiro]

Hello,

I am introducing the timestamp in the messages SOAP.

The capture of the messages shows that the

Timestamp of the REQUEST IS:

<..omitted..>
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Timestamp-16795115">
  2007-02-23T15:57:47.093Z
  2007-02-23T16:02:47.093Z
   
<..omitted.>

Timestamp of the RESPONSE IS;

<..omitted..>
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Timestamp-9715140">
  2007-02-23T15:57:48Z
  2007-02-23T16:02:48Z
 
<..omitted..>

And the current time settins of my computer is (GMT +1).

Is there a way to configure that?
Did someone notice this also?

I expected to have, that is to say the timestamp accordingly with my
timezone:

<..omitted..>
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Timestamp-9715140">
  2007-02-23T16:57:48Z
  2007-02-23T17:02:48Z
 
<..omitted..>

All answers or suggestions are welcome.


--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

[Axis 1.4 & WSS4J] - WS-Addressing

[José Ferreiro]

Hello,

Did someone try to implement WS-addressing using Axis 1.4 and WSS4J?
I am working in a prototype for interoperability ( C#, .net 2.0, and WSE 3.0).

Any coments, suggestions are welcome.

Regards

--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

(Interop) - Serialization /Deseralization in .net Client c# accesssing Axis 1.4

[José Ferreiro]

Hello,

I am trying to achieve interoperability between a .net client written in C#
(.net 2.0)  to access a axis 1.4 web service.

Java client access without any problem the web service and is able to
deserialize the class in the response.

I'm using document/litteral.

When I use a c# client after generating the proxy using wsdl.exe tool from
the WSDL file written by hand for axis.
the call is successfull but I am not able to get the answer (web service
response).
All the field are null.

Does anybody knows a solution for this?
I am thinking to use arrays as it seems there is problems when using classes
(to serialize and deserialize, mainly deserialize in the .net client).

Any suggestion, comments, doc are welcome.
I wish all of you a nice day.

Happy Axis

José Ferreiro

--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

[AXIS 1.x - WSS4J] - HTTPs or Secure HTTP

[José Ferreiro]

Hi!
Could someone tell me if HTTPs or Secure HTTP is supported by Axis 1.x and
WSS4J?

Thank you.

Re: Client .net using WSE to access Secure Web Service implemeted using Axis 1.4

[José Ferreiro]

Life is funny!No I didn't try but the problem is similar.We should be able to build up soap messages that both understand (Axis and .Net) with the correct headers and right mappings.Have a nice day.
José FerreiroOn 9/13/06, Xinjun Chen <[EMAIL PROTECTED]> wrote:
Hi Jose, 
 
I am trying the reverse. Have you done that? 
 
Regards, 
Xinjun 
On 9/12/06, José Ferreiro <[EMAIL PROTECTED]
> wrote:

Hello,Does/Did anyone program/ed a .net client using WSE to access a secure web service done with Axis 1.4?If you have a link with some example, or some related help, it will be great!I appreciate your help 
I wish you a nice day.Thank you for your help. 
José Ferreiro

-- José FerreiroEPFL Communication Systems engineering.sys.com.dipl.EPFL

Re: WSS4J in the real word for more than 1 client

[José Ferreiro]

CIARO LUCA,Following this links you will find the anwers to your question.
[1] http://wiki.apache.org/ws/FrontPage/WsFx/wss4jParameters
[2]http://ws.apache.org/wss4j/apidocs/org/apache/ws/security/handler/WSHandlerConstants.html#USE_REQ_SIG_CERT
[3] http://wiki.apache.org/ws/FrontPage/WsFx/wss4jFAQ#many
[4] http://archives.devshed.com/forums/apache-92/aw-aw-encryption-not-asking-for-the-right-private-key-815343.html

Answer is :add this line in the Server part, response 
Hope this helpsHappy AXIS :-)
CIAOJosé FerreiroOn 9/12/06, Davanum Srinivas <[EMAIL PROTECTED]> wrote:
http://www.wso2.net/tutorials/rampart/java/2006/09/06/sec-msg-exchg
On 9/12/06, Luca Risello <[EMAIL PROTECTED]> wrote:>> Hi everybody, I've a question. In the real word server has to trust more> than one client. For example If Have I to trust 20 client how can i
> configure my scenario for WSS to provide a two way security transmission?> For the certificate trusting there isn't problem>> Client i Keystore> Own keys> Server public key>
>> Server Keystore> Own Keys> Client 1 public key> Client 2 public key> [...]> Client 20 public key>>> For the PWCallback class I can use a Db to manage all the clients...
>> The problem is the server side wsdd configuration file In fact in my example> I specified the user for the encryption and the digital signature (both in> requestFlow and in the responseFlow) but if I have one more than client? How
> Can I Do!!!>> Thanks For Your Attention! Hope in your help! Bye. Luca>>>  __> Do You Yahoo!?
> Poco spazio e tanto spam? Yahoo! Mail ti protegge dallo spam e ti da tanto> spazio gratuito per i tuoi file e i messaggi> http://mail.yahoo.it--Davanum Srinivas : 
http://www.wso2.net (Oxygen for Web Service Developers)-To unsubscribe, e-mail: 
[EMAIL PROTECTED]For additional commands, e-mail: [EMAIL PROTECTED]

Client .net using WSE to access Secure Web Service implemeted using Axis 1.4

[José Ferreiro]

Hello,Does/Did anyone program/ed a .net client using WSE to access a secure web service done with Axis 1.4?If you have a link with some example, or some related help, it will be great!I appreciate your help
I wish you a nice day.Thank you for your help.José Ferreiro

Re: How to start up with keystores, and setting up your own CA (some tips)

[José Ferreiro]

For the server side you may define your crypto.properties in the filedeploy.wsddusing but you have to understand what is happening (in terms of cryptography and exchange messages)within and same thing in the client side configutration file for 
crypto.propeties.I will suggest you to label them like thisserver side server.crypto.properties andin the client side client.crypto.properties.try to read/try this sample too.
http://weblogs.asp.net/jdanforth/archive/2005/01/16/354060.aspxHope this helps!José FerreiroOn 9/6/06, Ruchith Fernando <
[EMAIL PROTECTED]> wrote:Following is a step by step guide on setting up keystores for a client
and a service:http://www.wso2.net/tutorials/rampart/java/2006/06/29/setting-up-keystoresThanks,Ruchith
On 9/6/06, José Ferreiro <[EMAIL PROTECTED]> wrote:> Hello Risello,>> Try to understand the keytool included in the Java SDK (how it works,
> how to generate keys, certificate request,  etc...).> This will allow you to define a crypto.propeties file... (one should be in> the client side and another one in the server side...)>> The following links will be VERY helpful:
>> http://www.churchillobjects.com/c/11201e.html>>  http://www.churchillobjects.com/c/11201g.html
>>> http://marc.theaimsgroup.com/?l=tomcat-user&m=106293430225790&w=2>> Happy Axis
>> José Ferreiro>>>>> On 9/6/06, Luca Risello <[EMAIL PROTECTED]> wrote:> >> >> > Good Morning, I'm a student and I'm trying to use wss4j features to secure
> SOAP messages. The Problem is that I follow step by step the tutorial> http://ws.apache.org/wss4j/package.html but there are some> problems about the XML Encyption and 
D.Signature.> >> > I Follow the tutorial but when i run the client with this config file:> >> > http://xml.apache.org/axis/wsdd/
"> xmlns:java="http://xml.apache.org/axis/wsdd/providers/java> ">> > > pivot="java:
org.apache.axis.transport.http.HTTPSender"/>> > > > > > 
> > > value="16c73ab6-b892-458f-abf5-2f875f74882e"/>> > > value="org.apache.ws.axis.oasis.PWCallback
"/>> > > > > > 
> > > > > > > >> > There is this excepion:> >> > AxisFault> > faultCode: {
> http://schemas.xmlsoap.org/soap/envelope/}Server.userException> > faultSubcode:> > faultString: java.lang.RuntimeException
 : CryptoFactory: Cannot load> properties: crypto.properties> > faultActor:> > faultNode:> > faultDetail:> > {> 
http://xml.apache.org/axis/}stackTrace:java.lang.RuntimeException> : CryptoFactory: Cannot load properties: crypto.properties> > at> org.apache.ws.security.components.crypto.CryptoFactory.getProperties
(CryptoFactory.java> :185)> > at> org.apache.ws.security.components.crypto.CryptoFactory.getInstance(CryptoFactory.java:110> )> > at> org.apache.ws.security.handler.WSHandler.loadSignatureCrypto
(WSHandler.java:337)> > at> org.apache.ws.security.handler.WSHandler.doSenderAction> (WSHandler.java:123)> > at> org.apache.ws.axis.security.WSDoAllSender.invoke(WSDoAllSender.java
> :170)> > at> org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32> )> > at> org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)> > at 
org.apache.axis.SimpleChain.invoke(> SimpleChain.java:83)> > at> org.apache.axis.client.AxisClient.invoke(AxisClient.java:127> )> > at> org.apache.axis.client.Call.invokeEngine
(Call.java:2784)> > at org.apache.axis.client.Call.invoke (Call.java:2767)> > at org.apache.axis.client.Call.invoke(Call.java:2443)> > at org.apache.axis.client.Call.invoke( Call.java:2366)
> > at org.apache.axis.client.Call.invoke(Call.java:1812)> > at prova2.client.Saluto2SoapBindingStub.saluto> (Saluto2SoapBindingStub.java:106)> > at prova2.client.ClientSaluto.main(ClientSaluto.java
 :49)> > { http://xml.apache.org/axis/}hostname:Chianti> > java.lang.RuntimeException: CryptoFactory: Cannot load properties:> crypto.properties
> > at> org.apache.axis.AxisFault.makeFault(AxisFault.java:101)> > at> org.apache.axis.client.AxisClient.invoke(AxisClient.java:216)> > at org.apache.axis.client.Call.invokeEngine
(> Call.java:2784)> > at org.apache.axis.client.Call.invoke(Call.java:2767)> > at org.apache.axis.client.Call.invoke (Call.java:2443)> > at org.apache.axis.client.Call.invoke(Call.java
:2366 )> > at org.apache.axis.client.Call.invoke(Call.java:1812)> > at prova2.client.Saluto2SoapBindingStub.saluto(> Saluto2SoapBindingStub.java:106)> > at prova2.client.ClientSaluto.main
(ClientSaluto.java:49 )> >

How to start up with keystores, and setting up your own CA (some tips)

[José Ferreiro]

Hello Risello,Try to understand the keytool included in the Java SDK (how it works,how to generate keys, certificate request,  etc...).This will allow you to define a crypto.propeties file... (one should be in the client side and another one in the server side...)
The following links will be VERY helpful:http://www.churchillobjects.com/c/11201e.html
http://www.churchillobjects.com/c/11201g.htmlhttp://marc.theaimsgroup.com/?l=tomcat-user&m=106293430225790&w=2
Happy AxisJosé FerreiroOn 9/6/06, Luca Risello <[EMAIL PROTECTED]> wrote:
Good Morning, I'm a student and I'm trying to use wss4j features to secure SOAP messages. The Problem is that I follow step by step the tutorial 
http://ws.apache.org/wss4j/package.html but there are some problems about the XML Encyption and 
D.Signature.     I Follow the tutorial but when i run the client with this config file:     
http://xml.apache.org/axis/wsdd/" xmlns:java="http://xml.apache.org/axis/wsdd/providers/java
">      There is this excepion:
     AxisFault  faultCode: {
http://schemas.xmlsoap.org/soap/envelope/}Server.userException  faultSubcode:   faultString: java.lang.RuntimeException
: CryptoFactory: Cannot load properties: crypto.properties  faultActor:   faultNode:   faultDetail:   {
http://xml.apache.org/axis/}stackTrace:java.lang.RuntimeException
: CryptoFactory: Cannot load properties: crypto.properties  at org.apache.ws.security.components.crypto.CryptoFactory.getProperties(CryptoFactory.java
:185)  at org.apache.ws.security.components.crypto.CryptoFactory.getInstance(CryptoFactory.java:110
)  at org.apache.ws.security.handler.WSHandler.loadSignatureCrypto(WSHandler.java:337)  at org.apache.ws.security.handler.WSHandler.doSenderAction
(WSHandler.java:123)  at org.apache.ws.axis.security.WSDoAllSender.invoke(WSDoAllSender.java
:170)  at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32
)  at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)  at org.apache.axis.SimpleChain.invoke(
SimpleChain.java:83)  at org.apache.axis.client.AxisClient.invoke(AxisClient.java:127
)  at org.apache.axis.client.Call.invokeEngine(Call.java:2784)  at org.apache.axis.client.Call.invoke
(Call.java:2767) 
 at org.apache.axis.client.Call.invoke(Call.java:2443)  at org.apache.axis.client.Call.invoke(
Call.java:2366)  at org.apache.axis.client.Call.invoke(Call.java:1812)  at prova2.client.Saluto2SoapBindingStub.saluto
(Saluto2SoapBindingStub.java:106)  at prova2.client.ClientSaluto.main(ClientSaluto.java
:49)  {
http://xml.apache.org/axis/}hostname:Chianti  java.lang.RuntimeException:
 CryptoFactory: Cannot load properties: crypto.properties  at org.apache.axis.AxisFault.makeFault(AxisFault.java:101)  at 
org.apache.axis.client.AxisClient.invoke(AxisClient.java:216)  at org.apache.axis.client.Call.invokeEngine(
Call.java:2784)  at org.apache.axis.client.Call.invoke(Call.java:2767)  at org.apache.axis.client.Call.invoke
(Call.java:2443)  at org.apache.axis.client.Call.invoke(Call.java:2366
)  at
 org.apache.axis.client.Call.invoke(Call.java:1812)  at prova2.client.Saluto2SoapBindingStub.saluto(
Saluto2SoapBindingStub.java:106)  at prova2.client.ClientSaluto.main(ClientSaluto.java:49
)  Caused by: java.lang.RuntimeException: CryptoFactory: Cannot load properties: crypto.properties  at org.apache.ws.security.components.crypto.CryptoFactory.getProperties
(CryptoFactory.java:185)  at org.apache.ws.security.components.crypto.CryptoFactory.getInstance(
CryptoFactory.java:110)  at org.apache.ws.security.handler.WSHandler.loadSignatureCrypto(WSHandler.java:337
)  at org.apache.ws.security.handler.WSHandler.doSenderAction(WSHandler.java:123)  at org.apache.ws.axis.security.WSDoAllSender.invoke
(WSDoAllSender.java:170)  at org.apache.axis.strategies.InvocationStrategy.visit(
InvocationStrategy.java:32)  at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118
)  at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) 
 at org.apache.axis.client.AxisClient.invoke(AxisClient.java:127)  ... 7 more        
I don't understand how to use the certificate and how to configure the client...somebody can help me please? __Do You Yahoo!?
Poco spazio e tanto spam? Yahoo! Mail ti protegge dallo spam e ti da tanto spazio gratuito per i tuoi file e i messaggi 
http://mail.yahoo.it 
-- José FerreiroEPFL Communication Systems engineering.sys.com.dipl.EPFL

Re: Axis tutorial. Did anyone buy it?

[José Ferreiro]

It is more like a tutorial.Don't expect buying this book that they will explain in all details how the libraries work and so on but it is a good starting develop your first secure web service using Tomcat, Axis 
1.x, WSS4J, keytool and Eclipse.Hope this helpsHappy Axis.Jose FerreiroOn 9/5/06, HHDirecto. Net <
[EMAIL PROTECTED]> wrote:I saw it but, it the first chapter is very simple. Are another chapters more detailled?
Thanks 
Obviously you should not neglect to look always at the javadoc of WSS4J and Axis 
1.X .You may look at the table of contents here:http://www.agileskills2.org/DWSAA/FourtyPages.pdf
Hope this helps.I wish a wonderful day to everybody
and HAPPY AXISJosé FerreiroOn 9/4/06, Martin Gainty <

[EMAIL PROTECTED]> wrote:







Whats the ISBN?M-
*This 
email message and any files transmitted with it contain 
confidentialinformation intended only for the person(s) to whom this email 
message isaddressed.  If you have received this email message in error, 
please notifythe sender immediately by telephone or email and destroy the 
originalmessage without making a copy.  Thank you.
 
 

  - Original Message - 
  


From: 
  HHDirecto.Net 
  To: 


axis-user@ws.apache.org 
  Sent: Monday, September 04, 2006 12:18 
  PM
  Subject: Axis tutorial. Did anyone buy 
  it?
  
  Hi,
  Did anyone buy "Axis book:Developing Web Services 
  with Apache Axis" ?
  http://www.agileskills2.org/DWSAA/index.html



   
  Have it interesting things? or is all in 
  ws.apache.org/axis reference?
   
  Thanks
   
   

-- José FerreiroEPFL Communication Systems engineering.sys.com.dipl.EPFL

Re: Axis tutorial. Did anyone buy it?

[José Ferreiro]

Hello ISBN is: 1-4116-7032-9.I wanted to learn how to set up a secure web service using signature and encryption and I bought it. It is a good way to achieve your goal.Obviously you should not neglect to look always at the javadoc of WSS4J and Axis 
1.X .You may look at the table of contents here:http://www.agileskills2.org/DWSAA/FourtyPages.pdfHope this helps.I wish a wonderful day to everybody
and HAPPY AXISJosé FerreiroOn 9/4/06, Martin Gainty <[EMAIL PROTECTED]> wrote:







Whats the ISBN?M-
*This 
email message and any files transmitted with it contain 
confidentialinformation intended only for the person(s) to whom this email 
message isaddressed.  If you have received this email message in error, 
please notifythe sender immediately by telephone or email and destroy the 
originalmessage without making a copy.  Thank you.
 
 

  - Original Message - 
  
From: 
  HHDirecto.Net 
  To: 
axis-user@ws.apache.org 
  Sent: Monday, September 04, 2006 12:18 
  PM
  Subject: Axis tutorial. Did anyone buy 
  it?
  
  Hi,
  Did anyone buy "Axis book:Developing Web Services 
  with Apache Axis" ?
  http://www.agileskills2.org/DWSAA/index.html

   
  Have it interesting things? or is all in 
  ws.apache.org/axis reference?
   
  Thanks
   
   

-- José FerreiroEPFL Communication Systems engineering.sys.com.dipl.EPFL

Re: axis 1.4 questions

[José Ferreiro]

Hello Ravi,My message answers only to your second question denoted  B.I was investigating last friday the different tools to view the soap messages from the web services I am writting using Axis 1.4:
Seehttp://www.oio.de/m/jaxrpc/axis-tcp-monitor.htmhttp://ws.apache.org/axis/java/user-guide.html
see Appendix: Appendix : Using the Axis TCP Monitor (tcpmon) [ http://ws.apache.org/axis/java/user-guide.html#AppendixUsingTheAxisTCPMonitorTcpmon
 ]or you may also use the soap monitorhttp://ws.apache.org/axis/java/user-guide.html#AppendixUsingTheSOAPMonitor
Another possibility is also to use tcptracehttp://www.pocketsoap.com/tcptrace/Hope this helps you.Have a nice day and weekJosé Ferreiro
On 8/20/06, Ravi Krishnamurthy <[EMAIL PROTECTED]> wrote:
Hello:a. Is it possible to generate only the java beans for the complex typementioned in the wsdl using axis1.4 wsdl2javab. Also is it possible to get a sample soap message for a givenwebservice and operation using axis 
1.4. If not is there any other toolsavailable.Thanks for your time and help,Ravi-To unsubscribe, e-mail: 
[EMAIL PROTECTED]For additional commands, e-mail: [EMAIL PROTECTED]

[Partially SOLVED] - TCP capture/tunel (java server - c# .net client)

[José Ferreiro]

[Solution]To look at the payload, when writing C# code, here is the way I used to send the request from my C# client through an HTTP proxy.using System.Net; // for proxy setup...

  IWebProxy proxyObject = new WebProxy("http://hostname:8099", false);  service.Proxy = proxyObject;
Note: do not use localhost or 127.0.0.1
 if you want to hit the network layer.However the TCPMonitor (org.apache.axis.utils.tcpmon) is able to return back the REQUEST field (possible bug in Axis 1.x)The same beheviour is observed with this tool 
http://www.pocketsoap.com/tcptrace/
On 8/18/06, José Ferreiro <[EMAIL PROTECTED]> wrote:

Hello everybody,Here is my configuration:Java server using Axis 1.4 in Tomcat.Am using .Net Framework 1.1 for a client to access the java server web service.I did a web service and the related client using Java and .Net (they work fine)
Everything is running on my LOCALHOST machine.I am testing the interoperability with the .Net client  (c#).The .net client access properly the java server web service.To analyze the TCP traffic I use as provided from Axis the TCPMonitor 
URL: http://ws.apache.org/axis/java/user-guide.html#AppendixUsingTheAxisTCPMonitorTcpmon
I successfully am able to capture the trafic between the java client and the java server web service.
However I have no idea how to capture the trafic between the .Net Client and the java server web service.FYI: I also implemented a .Net Proxy in the .net Client using c#  to access the java server web service.
Did someone of you try out to do something this?All suggestions are welcome.Thank you in advance and a I wish a good week-end to everybodyJosé Ferreiro

TCP capture/tunel (java server - c# .net client)

[José Ferreiro]

Hello everybody,Here is my configuration:Java server using Axis 1.4 in Tomcat.Am using .Net Framework 1.1 for a client to access the java server web service.I did a web service and the related client using Java and .Net (they work fine)
Everything is running on my LOCALHOST machine.I am testing the interoperability with the .Net client  (c#).The .net client access properly the java server web service.To analyze the TCP traffic I use as provided from Axis the TCPMonitor 
URL: http://ws.apache.org/axis/java/user-guide.html#AppendixUsingTheAxisTCPMonitorTcpmonI successfully am able to capture the trafic between the java client and the java server web service.
However I have no idea how to capture the trafic between the .Net Client and the java server web service.FYI: I also implemented a .Net Proxy in the .net Client using c#  to access the java server web service.
Did someone of you try out to do something this?All suggestions are welcome.Thank you in advance and a I wish a good week-end to everybodyJosé Ferreiro

Book for Axis (NEXT)

[José Ferreiro]

Well, 
 
All my developpers friends are using Apache 1.x and no one is using Axis 2...
I don't know really what is the best, but if they are all using Apache 1.x it should be because of something...
 
The user group (newsgroup) of Axis 2 seems to have more questions/mails than Axis 1.x - I am folowing both
 
Does this means that there is more problems using Axis 2 because of lacks of documentation or because it is still not a mature release. I cannot answer or figure out an answer.
 
And as we all know things in computer science use to go very fast.
 
Then does anyone has an input to give about Apache Axis 1.x against Apache Axis 2?
 
Thank you for your contribution.
 
Regards
José 
On 8/2/06, Wenbo Zhu <[EMAIL PROTECTED]> wrote:
 



I also like to hear about the actual use/design of Axis 2, compared to 1.3 ... ?

 


-Original Message-From: sudip shrestha [mailto:
 [EMAIL PROTECTED]] Sent: Wednesday, August 02, 2006 3:52 PMTo: axis-user@ws.apache.org 
Subject: Re: Book for AxisWondering if Axis 2 is production ready or if not when we should expect it to be production ready?
On 8/2/06, José Ferreiro < [EMAIL PROTECTED] 
> wrote: 

hello Sudip,I am also new to web services and I bought this book: http://agileskills2.org/DWSAA/ 
I am interested in WSS4J security.As I am a beginner I don't know if this is a good book or not. I start it and it is not too bad.It explains Eclipse, Axis 1.3 and WSS4J! Hope this helps. I am starting soon also with a project about web services. 
However I think I will use Axis 1.4 (obviously Axis 2 is another way). Some comments from someone between Axis 1.x and Axis2 will be appreciated.Thank you.José

On 8/2/06, sudip shrestha < [EMAIL PROTECTED]> wrote: 


Hi,What is a good reference book for Apache Axis?  Need to start diggin into Web Services  I am new to web services, should I jump into Axis 2, (not studyin Axis 2)?  

-- José FerreiroEPFL Communication Systems engineering.sys.com.dipl.EPFLPhone: +41 (0)79 644 98 25 [+41 (0)76 526 55 55] 

Re: Book for Axis

[José Ferreiro]

hello Sudip,I am also new to web services and I bought this book:http://agileskills2.org/DWSAA/I am interested in WSS4J security.As I am a beginner I don't know if this is a good book or not.
I start it and it is not too bad.It explains Eclipse, Axis 1.3 and WSS4J! Hope this helps. I am starting soon also with a project about web services.However I think I will use Axis 1.4 (obviously Axis 2 is another way).
Some comments from someone between Axis 1.x and Axis2 will be appreciated.Thank you.JoséOn 8/2/06, sudip shrestha <
[EMAIL PROTECTED]> wrote:Hi,What is a good reference book for Apache Axis?  Need to start diggin into Web Services  I am new to web services, should I jump into Axis 2, (not studyin Axis 2)?


-- José FerreiroEPFL Communication Systems engineering.sys.com.dipl.EPFLPhone: +41 (0)79 644 98 25 [+41 (0)76 526 55 55]