Re: get certificate sent in security header to cxf web service

2011-07-26 Thread Colm O hEigeartaigh
Hi, Could you try with this jar? I fixed a problem recently in WSS4J that sounds like it could be the problem here: https://issues.apache.org/jira/secure/attachment/12487842/wss4j-1.6.2-SNAPSHOT.jar Colm. On Tue, Jul 19, 2011 at 3:34 PM, Jaime Hablutzel Egoavil hablutz...@gmail.com wrote: NO

Re: get certificate sent in security header to cxf web service

2011-07-26 Thread Jaime Hablutzel Egoavil
I thought the problem was because WSS4J now is expecting a different keystore for trusted certs and another for keys... or it should be backward compatible? On Tue, Jul 26, 2011 at 10:22 AM, Colm O hEigeartaigh cohei...@apache.orgwrote: Hi, Could you try with this jar? I fixed a problem

Re: get certificate sent in security header to cxf web service

2011-07-26 Thread Colm O hEigeartaigh
It should be backwards compatible. Colm. On Tue, Jul 26, 2011 at 5:40 PM, Jaime Hablutzel Egoavil hablutz...@gmail.com wrote: I thought the problem was because WSS4J now is expecting a different keystore for trusted certs and another for keys... or it should be backward compatible? On Tue,

Re: get certificate sent in security header to cxf web service

2011-07-19 Thread Colm O hEigeartaigh
Hi Jaime, What version of CXF are you using? There is a better way to do this than via a CXF interceptor from CXF 2.4.0 onwards. Trust validation is done by WSS4J via the SignatureTrustValidator, which is given the certificate used to verify the signature, and verifies trust via the CertPath API.

Re: get certificate sent in security header to cxf web service

2011-07-19 Thread Jaime Hablutzel Egoavil
NO I was using 2.3.5 because with 2.4.1 my configuration is not working, a wsdl like this one: ?xml version='1.0' encoding='UTF-8'?wsdl:definitions name=CXFLibraryImplService targetNamespace= http://service2.ws.service.kprtech.com/; xmlns:ns1= http://cxf.apache.org/bindings/xformat; xmlns:soap=

Re: get certificate sent in security header to cxf web service

2011-07-18 Thread Jaime Hablutzel Egoavil
Or at least, could someone tell me how to add a custom interceptor after WSS4J interceptor to access the signing certificate of a wss signed soap message? On Mon, Jul 18, 2011 at 1:30 PM, Jaime Hablutzel Egoavil hablutz...@gmail.com wrote: Hi I have a web service exposed with cxf with this

Re: get certificate sent in security header to cxf web service

2011-07-18 Thread Freeman Fang
Hi, I think you can take a look at [1] as an example. [1]https://svn.apache.org/repos/asf/servicemix/components/trunk/bindings/servicemix-cxf-bc/src/main/java/org/apache/servicemix/cxfbc/interceptors/JbiJAASInterceptor.java Freeman On 2011-7-19, at 上午6:35, Jaime Hablutzel Egoavil wrote: Or at

Re: get certificate sent in security header to cxf web service

2011-07-18 Thread Glen Mazza
On 07/18/2011 02:30 PM, Jaime Hablutzel Egoavil wrote: I have read that I need a second interceptor, but how to set an interceptor and give it lower precedence?? http://www.jroller.com/gmazza/entry/jaxwshandlers_to_cxfinterceptors HTH, Glen Thanks. -- Glen Mazza Application

Re: get certificate sent in security header to cxf web service

2011-07-18 Thread Jaime Hablutzel Egoavil
Freeman your sample is exactly what I was trying to achieve... and I have been searching for one entire day :S These are setting the order?? getAfter().add(WSS4JInInterceptor.class.getName()); getAfter().add(PolicyBasedWSS4JInInterceptor.class.getName()); I think that these kind of