message.getInterceptorChain().doInterceptStartingFrom

2016-12-11 Thread Jason Pell
In my client i have an interceptor which optionally adds an Exception to the message content. The interceptor is executed in Receive phase If an exception is added i want to skip all interceptors until after XMLFaultInInterceptor (i am using xml binding not soap) Is it safe to call doInterceptAf

Fault chains in cxf clients

2016-07-26 Thread Jason Pell
Hi, I am trying to get some more insight into when the outgoing and incoming fault interceptor chains are activated. I had thought that the fault chains are automatically executed if a Fault is thrown from an interceptor. But it appears as though this is not correct, at least for clients. I thi

cxf-codegen-plugin org.apache.cxf.tools.common.DataTypeAdapter

2016-04-26 Thread Jason Pell
Hi, The wsdl-to-java.html page still references this class, but I can't find it in the source. Have I missed it, or has it been removed. If its been removed is there a recommended replacement?

Re: slow wsdl generation

2016-03-20 Thread Jason Pell
As always, its useful to provide the CXF version you are currently using, and the previous version where the performance was acceptable. On Sat, Mar 19, 2016 at 7:20 AM, Jakub Neubauer wrote: > Hi, > we enountered some problem at our client. We have deployed a webservice > using CXF framework on

Re: Adding SoapAction to Service Model without changing java code or WSDL

2015-10-13 Thread Jason Pell
I managed to resolve it myself. https://github.com/pellcorp/JavaFirst/blob/cxf27/JavaFirst/src/main/java/com/pellcorp/server/interceptor/SoapActionFeature.java Add this to both the client and server, works perfectly. On Wed, Oct 14, 2015 at 9:02 AM, Jason Pell wrote: > Hi, > > If I

Adding SoapAction to Service Model without changing java code or WSDL

2015-10-13 Thread Jason Pell
Hi, If I wanted to be able to get a soap action (that is the same as the operation name) into the service model via an interceptor or other such would it be possible. We have a Web App which has CXF client code, and a Server Side which has CXF service code. I have a client who is facading one of

Re: search archives

2015-06-12 Thread Jason Pell
you could use nabble http://cxf.547215.n5.nabble.com/cxf-user-f547216.html On Sat, Jun 13, 2015 at 5:09 AM, Dunkle, Edward wrote: > Um, I don't see a search form on > http://mail-archives.apache.org/mod_mbox/cxf-users/, I don't want to > browse. How do I search? > > I suppose there is a FAQ

Re: Unmarshalling error content usability

2015-03-23 Thread Jason Pell
Hi, Please check out https://issues.apache.org/jira/browse/CXF-6242. This added the ability to customise the jaxb message that is thrown. By default jaxb just throws the first event encountered, which may not be the best one. You need to implement org.apache.cxf.jaxb.MarshallerEventHandler and/

Re: single CXF endpoint to accept SOAP message for different namespace versions

2015-01-27 Thread Jason Pell
http://cxf.apache.org/docs/service-routing.html On Wed, Jan 28, 2015 at 7:42 AM, ashwin74268 wrote: > Hi All, > As of now, we have three different webservice endpoint for each type of > Schema Version i.e has different namespaces. > We are using camel-cxf 2.8.0. > e.g > 1) Schema with Namespace

Re: JMS SessionTransacted

2014-12-04 Thread Jason Pell
I created a new jira and will commit my changes if you don't have a better way to support my requirement. https://issues.apache.org/jira/browse/CXF-6136 On Fri, Dec 5, 2014 at 3:23 AM, Jason Pell wrote: > This actually allows me a great deal of control over the web service impl. >

Re: JMS SessionTransacted

2014-12-04 Thread Jason Pell
r user"); On Fri, Dec 5, 2014 at 3:22 AM, Jason Pell wrote: > Hi Christian, > > I have a proposed change to JMSDestination to ignore checked exceptions > inside Faults. > > Be interested in your thoughts > > diff --git > a/rt/transports/jms/src/main/java/org/apache

Re: JMS SessionTransacted

2014-12-04 Thread Jason Pell
(RuntimeException)ex.getCause(); -} else { +} else if (jmsConfig.isRollbackCheckedExceptions()) { throw new RuntimeException(ex); } } On Fri, Dec 5, 2014 at 2:52 AM, Jason Pell wrote: >

Re: JMS SessionTransacted

2014-12-04 Thread Jason Pell
> > On 04.12.2014 15:34, Jason Pell wrote: > >> I have set this to true in the JMSCOnfiguration >> >> I am using CXF 2.7.x. I cannot upgrade to 3.x, so I need to get this >> working using the JMS Configuration style. >> >> What I am trying to get worki

JMS SessionTransacted

2014-12-04 Thread Jason Pell
I have set this to true in the JMSCOnfiguration I am using CXF 2.7.x. I cannot upgrade to 3.x, so I need to get this working using the JMS Configuration style. What I am trying to get working is JMS managed transactions. So If I throw an runtime exception from my JAX-WS Implementation, I would

RE: Mitigations for POODLE vulnerability

2014-11-03 Thread Jason Pell
Here is a sample of using your own custom version of the jetty factory in your spring context. It is pretty invasive, so its actually better to wait for 2.7.14 and take advantage of the code already there. https://github.com/pellcorp/cxf/tree/master/JavaFirst/src/main/java/com/pellcorp/server/jet

RE: Mitigations for POODLE vulnerability

2014-11-03 Thread Jason Pell
The client already does exclude SSL v3 if you use the secureSocketProtocol in the http factory config for client On 04/11/2014 3:54 AM, "David Roytenberg (Consultant)" < david.roytenb...@optimalpayments.com> wrote: > Will it also be disabled by default in the CXF client at the next release? > > Da

Re: Calling interceptor chain in-JVM with a SOAP request

2014-10-30 Thread Jason Pell
Try deploying your service on local transport http://cxf.apache.org/docs/local-transport.html On 31/10/2014 2:46 AM, "Warren, Jared S" wrote: > First off, I admit this is an odd request, and will come off as quite > hackish (because it is)...but I'm going to ask anyway. > > In a JVM where I am

Re: How to Disable SSLv2 client hello in CXF?

2014-10-28 Thread Jason Pell
Sorry not jetty config http config is what I meant to say On 29/10/2014 7:57 AM, "Jason Pell" wrote: > sorry forgot to get back to you on the 2.7.6 thing. > org.apache.cxf.transport.https.SSLSocketFactoryWrapper has not been changed > in 6 years, so its definately calling

Re: How to Disable SSLv2 client hello in CXF?

2014-10-28 Thread Jason Pell
to that code in SSLSocketFactoryWrapper On Tue, Oct 28, 2014 at 7:08 AM, Jason Pell wrote: > Hi, > > The code for poodle was added for server side. > > The conduit config that you use should have set the enabled protocols on > the jdk SSL context. > > I only checked cxf 2.

RE: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
ing all the ins and > outs of how SSL is configured under the hood. > > From what you wrote it sounds like SSLv2Hello protocol is going to be > removed in the client in CXF 2.7.14. Is that right? > > Thanks, > > David > > > -----Original Message- > From: jason

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
Here is the actual page which deals with the config for tls http://cxf.apache.org/docs/tls-configuration.html On Tue, Oct 28, 2014 at 5:06 AM, Jason Pell wrote: > See, but note that the secureSocketProtocol is missing from the examples. > (Search in the page for Configuring SSL S

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
See, but note that the secureSocketProtocol is missing from the examples. (Search in the page for Configuring SSL Support) http://cxf.apache.org/docs/client-http-transport-including-ssl-support.html On Tue, Oct 28, 2014 at 5:02 AM, Jason Pell wrote: > So I did some digging to remind myself

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
is being applied correctly in web logic, perhaps its not being picked up. On Tue, Oct 28, 2014 at 4:36 AM, Jason Pell wrote: > Hi, > > I run embedded jetty container > > Sorry I forgot that you were running weblogic when I responded. In that > case do you even use

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
11/wlserver_10.3/server/lib/DemoIdentity.jks" /> > value="DemoIdentityKeyStorePassPhrase" /> > name="secureSocketProtocol" value="TLSv1" /> >

Re: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
, Jason Pell wrote: > That setting won't actually control what protocols jetty will actually > use. I think it just controls what the highest protocol is used. > > The excluded protocols list needs to include the sslv2 setting. > > we actually overrode the jetty factory jet

RE: How to Disable SSLv2 client hello in CXF?

2014-10-27 Thread Jason Pell
That setting won't actually control what protocols jetty will actually use. I think it just controls what the highest protocol is used. The excluded protocols list needs to include the sslv2 setting. we actually overrode the jetty factory jetty engine and one other class to get access to the SSL

Re: Current situation: CXF client send nonce and timestamp

2014-10-14 Thread Jason Pell
I think you need to be looking in the wss4j out interceptor. We use WS policy based cxf clients and it all just works. If your wsdl includes the policies might be good to give that a go. Lots of samples in the systests and also on my github project too. On 15/10/2014 12:12 AM, "Chris" wrote: >

Re: CXF client send nonce and timestamp

2014-10-14 Thread Jason Pell
Ok sorry for the noise :-) On Oct 14, 2014 10:22 PM, "Chris" wrote: > Jason Pell wrote > > See this is where I don't see nonce as useful if connection is protected. > > TLS should be immune to replay attacks. > > Yes you are right - but I was attempting to

Re: CXF client send nonce and timestamp

2014-10-14 Thread Jason Pell
nonce adds additional protection to a TLS connection which already has replay protection at the protocol level On 14/10/2014 9:27 PM, "Jason Pell" wrote: > Hi, > > Yes sorry I was thinking of man in the middle. I was not aware it was > possible to replay a TLS transaction. I t

Re: CXF client send nonce and timestamp

2014-10-14 Thread Jason Pell
digested password valur . On 14/10/2014 6:09 PM, "Chris" wrote: > Jason Pell wrote > > As an aside having a timestamp and nonce with a username password does > > notprevent replay attacks. Because attacker has all info to replay they > > justneed to generate new times

Re: CXF Jaxrs client on Android

2014-10-13 Thread Jason Pell
I think you need to direct initial queries to android forums. There are limitations on what core APIs are implemented in android. http://stackoverflow.com/questions/5461127/using-jaxb-with-google-android On 14/10/2014 3:08 AM, "Sonam Samdupkhangsar" < sonam.samdupkhang...@imail.org> wrote: > I h

Re: CXF client send nonce and timestamp

2014-10-13 Thread Jason Pell
As an aside having a timestamp and nonce with a username password does not prevent replay attacks. Because attacker has all info to replay they just need to generate new timestamp and nonce and use existing password. >From what I read digest passwords are actually encoded with the nonce value so t

Re: CXF client send nonce and timestamp

2014-10-10 Thread Jason Pell
You are using cxf 3.0? For 2.7.x you can use: outProps.put(WSHandlerConstants.ADD_UT_ELEMENTS, WSConstants.NONCE_LN + " " + WSConstants.CREATED_LN); Not sure what the equivalent is for 3.0 Some examples of what works for 2.7 https://github.com/pellcorp/cxf/blob/master/JavaFirst/src/test/java/

Re: Configure DoSFilter in CXF Jetty Transport

2014-10-09 Thread Jason Pell
way to do it, but it certainly works well. On Thu, Oct 9, 2014 at 7:49 PM, Jason Pell wrote: > You can configure jetty handlers directly. I have even configured some > spring security jee filters this way. If I have a chance I will hunt up an > example and post it > On 03/10/

Re: Configure DoSFilter in CXF Jetty Transport

2014-10-09 Thread Jason Pell
You can configure jetty handlers directly. I have even configured some spring security jee filters this way. If I have a chance I will hunt up an example and post it On 03/10/2014 2:26 AM, "sandarenu" wrote: > Hi all, > > I've a REST server developed using CXF and it uses Jetty Transport. I've >

RE: conflicts with the registered path

2014-10-08 Thread Jason Pell
You can also set a property on the bus if you don't want to use a system property. Makes it simpler to define in spring. On 08/10/2014 8:27 PM, "Malisetti, Ramanjaneyulu" < ramanjaneyulu.malise...@ca.com> wrote: > That helps. We will wait for 3.0.2. > > Thank you. > > Regards > Raman > > -Ori

Re: schemaLocation rewrite

2014-07-06 Thread Jason Pell
Raise a bug with a test project that reproduces problem. Bugs get looked at quicker when easily reproduced On 07/07/2014 1:13 PM, "Lambert, Michael" wrote: > Any idea on this guys? My QA team cannot parse the published WSDLs for use > in thier SOAPUI test. I have to zip up the WSDL in source cont

Re: Catching java.io.IOException on the server side

2014-06-25 Thread Jason Pell
This is similiar to what we do http://stackoverflow.com/questions/8066474/how-to-transform-soapfault-to-soapmessage-via-interceptor-in-cxf On 25/06/2014 11:27 AM, "harald" wrote: > I hope somebody can point me in the right direction with the following: > > Think of a simple restful webservice w

Re: adding a ThreadLocal from Interceptor?

2014-06-24 Thread Jason Pell
Here is the interceptor that is used to store the spring security context https://github.com/pellcorp/cxf/blob/master/JavaFirst/src/main/java/com/pellcorp/server/interceptor/SecurityContextAuthenticationInterceptor.java On Wed, Jun 25, 2014 at 11:10 AM, Jason Pell wrote: > For an exam

Re: adding a ThreadLocal from Interceptor?

2014-06-24 Thread Jason Pell
For an example, check out how the spring org.springframework.security.core.context.SecurityContextHolder manages a thread local. We use this to store a spring SecurityContext in the incoming interceptor chain of a service, so that we can use the @PreAuthorise spring security annotations. A thread

Re: Sharing a eh cache manager

2014-06-14 Thread Jason Pell
added to the subclass close method with a comment that it can be removed if added to wss4j On Sun, Jun 15, 2014 at 2:06 PM, Jason Pell wrote: > https://issues.apache.org/jira/browse/WSS-503 > > > > On Sun, Jun 15, 2014 at 1:58 PM, Jason Pell wrote: > >> Colm, >> &g

Re: Sharing a eh cache manager

2014-06-14 Thread Jason Pell
https://issues.apache.org/jira/browse/WSS-503 On Sun, Jun 15, 2014 at 1:58 PM, Jason Pell wrote: > Colm, > > My solution does not work for CXF 3.0.x as the code I changed no longer > exists. Its been moved into wss4j. Any chance I can contribute a patch > for wss4j that wo

Re: Sharing a eh cache manager

2014-06-14 Thread Jason Pell
On Fri, Jun 13, 2014 at 11:10 AM, Jason Pell wrote: > I am going to work on allowing ehcache to use a Shared Cache manager. The > separate cache instances should still remain, but we should not be forcing > the creating of a new cache manager itself if possible. > > https://is

Re: How to get the spring WebApplicationContext created in CXFServlet?

2014-06-14 Thread Jason Pell
Its WebApplicationContextUtils A good article which covers its use http://www.mkyong.com/spring/spring-how-to-do-dependency-injection-in-your-session-listener/ On Sun, Jun 15, 2014 at 3:45 AM, David Karlsen wrote: > Spring provides a static method to get it. Don't have it at hand now. > S

Re: Sharing a eh cache manager

2014-06-12 Thread Jason Pell
Pell wrote: > Sorry typo. I mean having a single global ehcache manager to manage all > cache instances. > On 27/05/2014 7:41 AM, "Jason Pell" wrote: > >> I meant more sharing a single manager instance on a cache instance. But >> it's not too urgent for

RE: WS-Security + Custom Authentication

2014-05-26 Thread Jason Pell
The issue with password digest is you have to store passwords in persistent store as plain text. This should be ringing alarm bells for anyone. On 17/05/2014 4:59 AM, "Andrei Shakirin" wrote: > Hi, > > I assume you use Type=" > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-toke

Re: Sharing a eh cache manager

2014-05-26 Thread Jason Pell
Sorry typo. I mean having a single global ehcache manager to manage all cache instances. On 27/05/2014 7:41 AM, "Jason Pell" wrote: > I meant more sharing a single manager instance on a cache instance. But > it's not too urgent for me now that I have cxf using my ehcache c

Re: Sharing a eh cache manager

2014-05-26 Thread Jason Pell
in things that don't serialize (e.g. DOM Elements). > There is no reason why you couldn't use a single cache for UsernameToken > nonce + Signature/Timestamp caching though (ReplayCache) if you wanted. > > Colm. > > > On Mon, May 26, 2014 at 4:10 AM, Jason Pell wrote: >

Re: Sharing a eh cache manager

2014-05-25 Thread Jason Pell
;file:${spring.config.dir}/ehcache.xml")); Not sure what consequences disabling file overflow will have. On Mon, May 26, 2014 at 1:10 PM, Jason Pell wrote: > I realised sharing is not going to work, unless the shutdown sequence for > a manager is also disabled where it's a single global

Re: Sharing a eh cache manager

2014-05-25 Thread Jason Pell
at org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JInInterceptor.handleMessage(PolicyBasedWSS4JInInterceptor.java:106) On Mon, May 26, 2014 at 12:52 PM, Jason Pell wrote: > Hi, > > I already create a eh cache manager for caching spring security ldap user > details. I would like to force CXF to use the very same eh cache manager > rat

Sharing a eh cache manager

2014-05-25 Thread Jason Pell
Hi, I already create a eh cache manager for caching spring security ldap user details. I would like to force CXF to use the very same eh cache manager rather than create a new one. I have the following spring bean: org.springframework.cache.ehcache.EhCacheManagerFactoryBean

MSMQ integration with CXF

2014-03-04 Thread Jason Pell
Hi, Anyone ever done anything with integration MSMQ with CXF. I have a customer who wants to use MSMQ. I don't have all the details so my first thought is to use a MSMQ JMS Provider and CXF Soap/JMS. I will certainly be sucking it and seeing what happens, but figured did not hurt to ask here as

Re: Concurrent Modification Exception on multiple runs using n-1 threads

2014-01-06 Thread Jason Pell
Pretty sure cxf clients are not thread safe by default. http://cxf.apache.org/faq.html#FAQ-AreJAX-WSclientproxiesthreadsafe? Sharing request context is definately not thread safe. Have you done BindingProvider)proxy).getRequestContext().put("thread.local.request.context", "true"); On 03/01/2014

RE: Local transport testing of jax ws services

2013-12-18 Thread Jason Pell
Also I would recommend if you really want to properly test http based services that you just create http based service end points using a free port. There is a class in cxf that does this already for services and in that way you ensure you are testing closer to your production situation. The test

Re: Issue with TransportBinding (httpstoken)

2013-12-09 Thread Jason Pell
When you configure your jaxws endpoints to expose the http only web services. Don't add the interceptor to any HTTPS endpoints. Sent from my Android phone On 09/12/2013 10:40 PM, "Faz" wrote: > Thanks Jason, this looks apt as my https is striped in the LB layer and all > forwarded requests will

Re: Issue with TransportBinding (httpstoken)

2013-12-09 Thread Jason Pell
I do believe it will be a problem. Cxf will expect a TLS connection for that policy and so it will fail. If you need HTTPS token for other parts of policy what I do is actually trick cxf using following interceptor https://github.com/pellcorp/cxf/blob/master/JavaFirst/src/main/java/com/pellcorp/s

Re: jax-rs and jax-ws hosted concurrently

2013-11-20 Thread Jason Pell
ad varying RESTful and SOAP implementations > under the same http server port. I'll give what you've suggested a whirl > and see how it goes with what I'm attempting. > > Thanks. > > dan > > > On Tue, Nov 19, 2013 at 9:53 PM, Jason Pell wrote: > > > > >

Re: jax-rs and jax-ws hosted concurrently

2013-11-19 Thread Jason Pell
the jaxrs server, but the wadl displays and there are no errors in console ... https://localhost:8080/SimpleServiceWithNsServer?_wadl https://localhost:8080/SimpleServiceWithNs?wsdl On Wed, Nov 20, 2013 at 3:09 PM, Jason Pell wrote: > Cxf with embedded jetty works very well. I will prov

Re: jax-rs and jax-ws hosted concurrently

2013-11-19 Thread Jason Pell
Cxf with embedded jetty works very well. I will provide some examples in a couple of hours or less Sent from my Android phone On 20/11/2013 2:56 PM, "daniel williams" wrote: > To give an example of what I'm trying to do: I have a platform that > initially exposed a standardized internal API.

Re: jax-rs and jax-ws hosted concurrently

2013-11-19 Thread Jason Pell
When I get back to office I will hunt up the code I played with a ci to my git hub. Would definitely be able to host both a jaxws and jaxrs on same port just a different virtual location. Sent from my Android phone On 20/11/2013 2:48 PM, "daniel williams" wrote: > Jason, > > Would you have an

Re: jax-rs and jax-ws hosted concurrently

2013-11-19 Thread Jason Pell
You can even use the same class with both sets of annotations and declare a jaxws endpoint and jaxrs server ref the same impl Sent from my Android phone On 20/11/2013 2:37 PM, "Jason Wang" wrote: > Daniel, I got quite a few Restful services and WS live in the same maven > module. Some of them sh

Re: org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'cxf' is defined

2013-11-11 Thread Jason Pell
Always a good idea to indicate what version of cxf you are on for this kind of error. On Wed, Aug 14, 2013 at 2:39 AM, Gaetano Ciotola wrote: > Hello everyone, > I have developed dummy web service using CXF - jax-rs. > I have deployed on WebSphere 7. Everything works fine. > > My problem start

Re: cxf deadlock with spring 3.2?

2013-11-08 Thread Jason Pell
plane back to the US. > > > Dan > > > On Nov 6, 2013, at 11:32 PM, Jason Pell wrote: > > > Hi, > > > > I am continuing to try and understand the thread dump myself, but here it > > is in case anyone feels like giving me some pointers :-) > > > &g

Re: cxf deadlock with spring 3.2?

2013-11-07 Thread Jason Pell
So the spring launcher and jaxws endpoint are both trying to access the spring beans map at same time. I have not found a solution so far. Sent from my Android phone On 07/11/2013 9:32 AM, "Jason Pell" wrote: > Hi, > > I am continuing to try and understand the thread dump

Re: cxf deadlock with spring 3.2?

2013-11-06 Thread Jason Pell
Hi, I am continuing to try and understand the thread dump myself, but here it is in case anyone feels like giving me some pointers :-) http://pastebin.com/p75BtvPk On Thu, Nov 7, 2013 at 9:22 AM, Jason Pell wrote: > Hi, > > I am getting intermittent dead lock on startup of my ap

cxf deadlock with spring 3.2?

2013-11-06 Thread Jason Pell
Hi, I am getting intermittent dead lock on startup of my application. The two threads that are locking are accessing: java.lang.Thread.State: BLOCKED (on object monitor) INFO | jvm 1| 2013/11/07 08:50:30 | at org.apache.cxf.bus.extension.ExtensionManagerImpl.getExtension(ExtensionManag

Re: Potential Memory Leak

2013-10-29 Thread Jason Pell
Also what cxf version are you using? On 26/10/2013 12:05 AM, "DTaylor" wrote: > Good morning all, > > We are experiencing a rather severe memory leak issue in the use of the > DocumentImpl class (whether it be the org.apache.xerces.dom.DocumentImpl or > the com.sun.org.apache.xerces.internal.dom.

Re: preventing unused types in wsdl

2013-10-22 Thread Jason Pell
service doens't even reference them at all. > >>> > >>> If the classes are JAXB generated from schema, I don't think there is > an > >>> easy way. JAXB generates an ObjectFactory in the package which pretty > >>> much references everything. If the ObjectFactory is found, tha

Re: preventing unused types in wsdl

2013-10-22 Thread Jason Pell
rence them at all. > >> > >> If the classes are JAXB generated from schema, I don't think there is an > >> easy way. JAXB generates an ObjectFactory in the package which pretty > >> much references everything. If the ObjectFactory is found, that's used > to

Re: Tivoli access manager and cxf jaxws web services.

2013-10-21 Thread Jason Pell
use something like ws-trust and iDP. I will continue to pursue this and come back here with more targeted questions. Sorry for the spam! Cheers Jason On Mon, Oct 21, 2013 at 9:20 AM, Jason Pell wrote: > Anyone know of blog posts or examples of integrating tam and cxf? > > Sent from m

Tivoli access manager and cxf jaxws web services.

2013-10-20 Thread Jason Pell
Anyone know of blog posts or examples of integrating tam and cxf? Sent from my Android phone

Re: set of SSL ciphers that are 128+ and non cbc encryption

2013-10-12 Thread Jason Pell
Seems in Java 7 the ciphers for 128+ are the default. In Java 6 when no cipher suite filter I see a few < 128bit but with java 7 those ones disappeared. Sent from my Android phone On 10/10/2013 12:57 PM, "Jason Pell" wrote: > Agree 100% not a cxf issue thought we might have a

Re: preventing unused types in wsdl

2013-10-11 Thread Jason Pell
There is a parameter you can define to prevent this very thing. See here for an example: https://github.com/pellcorp/cxf/blob/master/JavaFirst/src/main/resources/META-INF/scanPackagesContext.xml Sent from my Android phone On 12/10/2013 1:25 AM, "Aaron Titus" wrote: > I am using CXF 2.7.6 a

Re: set of SSL ciphers that are 128+ and non cbc encryption

2013-10-09 Thread Jason Pell
ovider> >> >> Incidentally, I just published an article on InfoQ that discusses some of >> the issues around keeping your data communications secure with some >> discussion of TLS/SSL: http://www.infoq.com/articles/** >> keeping-your-secrets <http://www.infoq.com/

set of SSL ciphers that are 128+ and non cbc encryption

2013-10-09 Thread Jason Pell
Hi, Is there such a list in the docs for cxf somewhere?

Re: Getting Java user-defined object in C using CXF

2013-09-23 Thread Jason Pell
Be aware that gsoap does not appear to have a commercial friendly license which is different to cxf Sent from my Android phone On 24/09/2013 2:49 AM, "Tim Fulmer" wrote: > You may want to check on the gsoap mailing lists ;) > > On Sep 21, 2013, at 11:05 AM, Faz wrote: > > > Thanks you Benson,

Re: Timeout and CXF

2013-09-21 Thread Jason Pell
Since its all just XML the shortest answer is yes even if you have to hand code it :-) However any web service framework worth using should have WS security support. Just a matter of reading the docs for your chosen frameworks. Nothing Cxf is doing on server side would preclude that. But as we

Re: Timeout and CXF

2013-09-20 Thread Jason Pell
The http conduit is a cxf abstraction for configuring a http URL connection so its not anything magical. You cannot use this in a non cxf client. For a c or .net client you would make use of whatever http or web service client frameworks that are available The thing to remember is that between t

Re: How to stop WS-Security policy being applied to inbound message

2013-08-28 Thread Jason Pell
Not sure if its helpful, but if you define the policies on the jaxws web service interface or impl, you can use the placement parameter to control when they get applied. For instance I use the following: @Policy(uri = "#EndpointSecurityPolicy", placement = Policy.Placement.BINDING_OPERATION_INPUT

Re: Disabling WS-SecurityPolicy Processing on Client?

2013-08-26 Thread Jason Pell
Don't provide the ?wsdl as part of the address. In my project I apply the WS policies separately as part of an interceptor and that works by providing an address only no wsdl. Are you using a generated java client and jaxws:client in spring? On 27/08/2013 7:00 AM, "Jennifer Ruttan" wrote: > Hi a

Re: Generating proper Javadoc for SEI Implementation

2013-08-05 Thread Jason Pell
You should include @WebParam annotations to configure the parameter names. On 06/08/2013 4:54 AM, "Lewis John Mcgibbney" wrote: > Hi Users@, > I've been using Apache CXF 2.7.5 in Eclipse Juno Service Release 1... it is > going great and I am extremely happy with the service generation... it is >

Re: Error when building CXF

2013-07-31 Thread Jason Pell
ses! > > > On 01.08.2013 00:44, Daniel Kulp wrote: > >> >> Also, what version of maven are you using? Definitely use 3.0.4 or >> 3.1.0. >> >> Dan >> >> >> On Jul 31, 2013, at 6:41 PM, Jason Pell wrote: >> >> I have never tried to bui

Re: Error when building CXF

2013-07-31 Thread Jason Pell
I have never tried to build on Windows either. If you dont have a proxy in your way can you turn off firewall temporarily? In the past cxf has needed internet connection for downloading schemas and such On 01/08/2013 6:59 AM, "Jason Pell" wrote: > A proxy server can certainly af

Re: Error when building CXF

2013-07-31 Thread Jason Pell
A proxy server can certainly affect building cxf.i generally don't even try to build cxf at work. On 01/08/2013 6:09 AM, "Al Le" wrote: > Hello again. > > I've run the build (with the "-Pfastinstall" option) on another computer > with different system settings (firewal etc.) and it's succeeded. T

Re: Configuring a proxy server to connect over https

2013-07-30 Thread Jason Pell
ssl proxy certainly works with cxf. In our project we connect to a cntlm based proxy over ssl and that works fine. Can you stick tcpmon in the middle. Even with ssl you should be able to monitor the headers and negotiations. On 27/07/2013 5:07 AM, "droytenberg" wrote: > I've dug around on the we

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-29 Thread Jason Pell
OfwAzd25uNxfjPMzRHgZbXAoW0HQ20nkdNL/QS0KyyXH80es9RqzoB8F0QtXkJC4kcGr3xjHqftM > > jQUWxioFqk4G/jG01080kuJHkJULGVKkTf5zpJzu3F9cdfG9pkuhFjuPCKiFfIaxc5dDu20OT5KD > > EPjXFW7NqlIcBOFaVSM5feR224cRkvRqzqYOc3bCDSUpqT6+o5Gce5LyV4OKhPpWfsFy1g3FbSsF > > vElsygbjSxo3mDREBY3pEPBJruN5Gd8T/k

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-26 Thread Jason Pell
Changing all the Namespace="" to Namespace=" http://msa.ebs.health.ontario.ca/"; allows the policy to be loaded. On Sat, Jul 27, 2013 at 3:17 PM, Jason Pell wrote: > Yea the namespace cannot be Namespace="" either. > > > On Sat, Jul 27, 2013 at 3:1

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-26 Thread Jason Pell
e and the attribute has a > value. > > > > On 2013-07-27, at 1:11 AM, Jason Pell wrote: > > > that's with the new sp namespace I mean... > >

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-26 Thread Jason Pell
that's with the new sp namespace I mean...

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-26 Thread Jason Pell
than SupportingToken I also get: {http://schemas.xmlsoap.org/ws/2005/07/securitypolicy}UsernameToken is not a element. So I will have a play around with that now. On Sat, Jul 27, 2013 at 1:59 PM, Jason Pell wrote: > Actually I just realised what the problem is. Your original namespace for > s

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-26 Thread Jason Pell
Sat, Jul 27, 2013 at 1:57 PM, Jason Pell wrote: > In fact just replacing the SP namespace should do it. The xmlns:wsp=" > http://schemas.xmlsoap.org/ws/2004/09/policy"; seems to not be the problem. > > So just change the sp to: > > xmlns:sp="http://docs.oasis

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-26 Thread Jason Pell
In fact just replacing the SP namespace should do it. The xmlns:wsp=" http://schemas.xmlsoap.org/ws/2004/09/policy"; seems to not be the problem. So just change the sp to: xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702"; On Sat, Jul 27, 2013 at 1:55 P

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-26 Thread Jason Pell
hould I change the namespaces to? > > Thanks again > Jen > > > > > On 2013/07/26 23:16, Jason Pell wrote: > >> https://github.com/pellcorp/**cxf/blob/master/JavaFirst/src/** >> test/java/com/pellcorp/server/**PolicyServiceTest.java<https://github.com

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-26 Thread Jason Pell
quot;)); } } On Sat, Jul 27, 2013 at 11:22 AM, Jason Pell wrote: > Hi, > > I changed over my java first samples to use your namespaces, and I also > got the Must understand error. > > Since I can reproduce it, i will have a bit of a hunt around to see what >

Re: WSDLGetInterceptor congestion

2013-07-26 Thread Jason Pell
I added a testcase which asserts that the documents are created new every time. /cxf-systests-jaxws/src/test/java/org/apache/cxf/systest/jaxws/WsdlGetUtilsTest.java On Sat, Jul 27, 2013 at 12:13 PM, Jason Pell wrote: > Hi Dan, > > I know you are on leave, so perhaps others will co

Re: WSDLGetInterceptor congestion

2013-07-26 Thread Jason Pell
Hi Dan, I know you are on leave, so perhaps others will comment. I am currently working on a jira (CXF-5151) to add support for GZIP encoding of ?wsdl and ?xsd. I have had a look at WSDLGetUtils and the WSDLWriterImpl from WSDL4J and the WSDLWriter is creating a new document every time. In the

Re: Eclipse, CXF and WS-SecurityPolicy

2013-07-26 Thread Jason Pell
Hi, I changed over my java first samples to use your namespaces, and I also got the Must understand error. Since I can reproduce it, i will have a bit of a hunt around to see what the problem is. On Sat, Jul 27, 2013 at 3:42 AM, Jennifer Ruttan wrote: > Hi, > > Thanks for your help. > > The pro

Re: CXF XJC Maven Plugin (xsdtojava) Maven plugin usage

2013-07-25 Thread Jason Pell
n/resources/ and it worked. > > Maybe the documentation should be aware of this issue. Avoid using > "classpath:" URIs. > > Thank you very much! > > > On 25 July 2013 15:00, Jason Pell wrote: > > > Can you try referencing the XSD via absolute path rathe

Re: CXF XJC Maven Plugin (xsdtojava) Maven plugin usage

2013-07-25 Thread Jason Pell
m.sun.tools.xjc.util.**ErrorReceiverFilter.error(** >> ErrorReceiverFilter.java:77) >> at >> com.sun.tools.xjc.util.**ErrorReceiverFilter.error(** >> ErrorReceiverFilter.java:77) >> at >> com.sun.org.apache.xerces.**internal.jaxp.validation.** >> XMLSchemaFactory.n

Re: CXF XJC Maven Plugin (xsdtojava) Maven plugin usage

2013-07-25 Thread Jason Pell
Can you try this again using 2.6.2 version of the plugin On Thu, Jul 25, 2013 at 6:45 PM, Julio Carlos Barrera Juez < juliocarlos.barr...@i2cat.net> wrote: > I have just executed the goals with MAven debug option (-X) and this is the > output: > > at > > org.apache.maven.lifecycle.internal.MojoE

  1   2   3   4   >