[xfire-user] WS-Security nad WS-Addressing Problem

[Alejandro Otero Freire]

Hi I've a service where I need to implement WS-S and WS-A, my client
will be .Net.

 

This is my xfire-servlet.xml:

       <bean id="services.xfire.soapClientBean"

 
class="org.codehaus.xfire.spring.remoting.XFireExporter">

                <property name="serviceFactory">

                        <ref bean="xfire.serviceFactory" />

                </property>

                <property name="xfire">

                        <ref bean="xfire" />

                </property>

                <property name="serviceBean">

                        <ref bean="services.soapClient" />

                </property>

                <property name="serviceClass">

 
<value>com.banelco.webservices.ISoapClient</value>

                </property>

                <property name="inHandlers">

                        <list>

                                <bean
class="org.codehaus.xfire.util.dom.DOMInHandler" />

                                <ref bean="services.WSS4JInHandler" />

                                <bean
class="org.codehaus.xfire.addressing.AddressingInHandler" />

                                <bean
class="org.codehaus.xfire.util.LoggingHandler" />

                                <bean
class="com.banelco.webservices.handlers.WSInitHandler" />

                        </list>

                </property>

                <property name="outHandlers">

                        <list>

                                <bean
class="org.codehaus.xfire.util.dom.DOMOutHandler" />

                                <ref bean="services.WSS4JOutHandler" />

                                <bean
class="org.codehaus.xfire.addressing.AddressingOutHandler" />

                                <bean
class="org.codehaus.xfire.util.LoggingHandler" />

                        </list>

                </property>

                <property name="faultHandlers">

                        <list>

                                <!-- <bean
class="org.codehaus.xfire.util.dom.DOMOutHandler" />

                                <bean
class="org.codehaus.xfire.util.LoggingHandler" /> -->

                                <bean
class="com.banelco.webservices.handlers.WSFaultHandler" />

                        </list>

                </property>

        </bean>

 

When I received this msg:

<?xml version="1.0" encoding="UTF-8"?>

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/";
xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing";
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wsse
curity-secext-1.0.xsd"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssec
urity-utility-1.0.xsd" xmlns:xsd="http://www.w3.org/2001/XMLSchema";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>

<soap:Header>

<wsa:Action/>

<wsa:MessageID>urn:uuid:b6f02e03-f1f0-43f1-844e-813684920302</wsa:Messag
eID>

<wsa:ReplyTo>

<wsa:Address>http://schemas.xmlsoap.org/ws/2004/03/addressing</wsa:Addre
ss>

</wsa:ReplyTo>

<wsa:To>https://wssrvcert.banelcoservices.com.ar/services/BNLCSoapClient
</wsa:To>

<wsse:Security soap:mustUnderstand="1">

<wsu:Timestamp wsu:Id="Timestamp-374a70d6-015c-4f1c-b098-45db5426f24e">

<wsu:Created>2007-09-06T18:27:56Z</wsu:Created>

<wsu:Expires>2007-09-06T18:32:56Z</wsu:Expires>

</wsu:Timestamp>

<wsse:BinarySecurityToken
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-so
ap-message-security-1.0#Base64Binary"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-
token-profile-1.0#X509v3"
wsu:Id="SecurityToken-7f1dcad8-b629-4a10-8870-48f3b1af73d4"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssec
urity-utility-1.0.xsd"><xenc:EncryptedKey
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#";
Id="SecurityToken-35d201f0-c73b-4ad9-9bbf-bdd84021707a">

<xenc:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>

<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#";>

<wsse:SecurityTokenReference>

<wsse:KeyIdentifier
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-so
ap-message-security-1.0#Base64Binary"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-
token-profile-1.0#X509SubjectKeyIdentifier"> </wsse:KeyIdentifier>

</wsse:SecurityTokenReference>

</KeyInfo>

<xenc:CipherData>

<xenc:CipherValue> </xenc:CipherValue>

</xenc:CipherData>

<xenc:ReferenceList>

<xenc:DataReference URI="#Enc-0cf6d3b3-70d4-46a7-be19-fa3cde46f6ee"/>

</xenc:ReferenceList>

</xenc:EncryptedKey>

<Signature xmlns="http://www.w3.org/2000/09/xmldsig#";>

<SignedInfo>

<ds:CanonicalizationMethod xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>

<SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>

<Reference URI="#Timestamp-374a70d6-015c-4f1c-b098-45db5426f24e">

<Transforms>

<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>

</Transforms>

<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>

<DigestValue></DigestValue>

</Reference>

<Reference URI="#Id-89e79e1b-5f4e-4d7a-be56-dc0b76a7a816">

<Transforms>

<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>

</Transforms>

<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>

<DigestValue> </DigestValue>

</Reference>

</SignedInfo>

<SignatureValue> </SignatureValue>

<KeyInfo>

<wsse:SecurityTokenReference>

<wsse:Reference
URI="#SecurityToken-7f1dcad8-b629-4a10-8870-48f3b1af73d4"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-
token-profile-1.0#X509v3"/>

</wsse:SecurityTokenReference>

</KeyInfo>

</Signature>

</wsse:Security>

</soap:Header>

<soap:Body wsu:Id="Id-89e79e1b-5f4e-4d7a-be56-dc0b76a7a816">

<echo xmlns="http://webservices.banelco.com";>

<in0>HOLA MUNDO!!</in0>

</echo>

</soap:Body>

</soap:Envelope>

 

The result not include de wsa header at response.

 

Anyd Idea if I need and extra configuration?.

 

Regards

Alejandro