Provisioning Gateway digital signature concept complies with W3C XML Signature Syntax and Processing recommendation [XMLDSIG]. From among open-source Web Service Security implementations Apache XML Security project [XMLSEC] was chosen since it the best way met high demands on PGW request processing performance, yet on the other hand it was able to fulfill need to ensure RA authenticity and integrity of the message.
How we can implement the below soap signed message below with apache camel and CXF ? or Jaxws , I have SPML WSDL. if applicable can you provide example ? or point to already existing example ? or should I go to XMLSEC apache open source project . SOAP Message : <?xml version="1.0" encoding="UTF-8"?> <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"; xmlns:xsd="http://www.w3.org/2001/XMLSchema"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";> <soapenv:Header> <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#";> <ds:SignedInfo> <ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> <ds:Reference URI="#Body"> <ds:Transforms> <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/> <ds:Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"/> </ds:Transforms> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> <ds:DigestValue>C/XuRHa+cndQKRJEk+falPNaYEE=</ds:DigestValue> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue> GxZMhsrcRIujUT5GKW/OUI06CIBNgoIjl8efq8ch5UmFyU6lH4XGslpOvxrCp/j7+B6o0FOOhZ5NZldKRihZoDzG9pzdNi9LjwEFO1p/wOaxisDoMNuDo0Ymi2TEEZzOKkApcDK6zF7oQqfONrRTM= </ds:SignatureValue> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate> MIICSDCCAbECBENY7uYwDQYJKoZIhvcNAQEFBQAwazELMAkGA1UEBhMCU0sxETAPBgNVBAgTCFNsZha2lhMRMwEQYDVQQHEwpCcmF0aXNsYXZhMRAwDgYDVQQKEwdTaWVtZW5zMRAwDgYDVQQLEwdVduMRAwDgYDVQQDEwdVbmtub3duMB4XDTA1MTAyMTEzMzYzOFoXDTA2MDExOTEzMzYzOFowUEBhMCU0sxETAPBgNVBAgTCFNsb3Zha2lhMRMwEQYDVQQHEwpCcmF0aXNsYXZhMRAwzMRAwDgYDVQQLEwdVbmtub3duMRAwDgYDVQQDEwdVbmtub3duMIGfMA0GDQEBAQUAA4GNADCBiQKBgQCXWlaAlfrNpRJUusJvTy+Mcn26fbU6lYz3136FKBUlAGdVdK8DmM9xlBtiQ0RjhsIb6ZzwbqgQ/DKbto03xPxERIQ6992zKQyGR8wsuhhsBEscSbD+INU1IKhyBtzpBYJglDp0yqUETuVicly5J39Mj79S0OTLDa1Hr/JQIDAQABMA0GCSqGSIb3DQEBBQUAGBAGDvPBP3bwGpKqCM8jurrX0JO+CjAuQh2u/SQLCsRO4GoVNkc+cCJyyvuXzr6ITxSf4OQ+mWjkTZvDmGaR/4RrPzx99Iqf2XIqX2fVa2Hlabqpj6T+OQpgCJLTV+ZIiEx+73wHIViQvASv39A0HzDxbM2e/PLj </ds:X509Certificate> </ds:X509Data> <ds:KeyValue> <ds:RSAKeyValue> <ds:Modulus> pWgJX6zaUSVLrCb08vjHJ9un21OpWM99d+hSgVJQBnVSL+eXSvA5jPcZQbYkNEY4bCG+mc8G6oaNN8T8RESEOvfdsykMhkfMLLoYbARLHEmw/iDVNbdCCocgbc6QWCYJQ6dMqlBE7lYnJcuS/TI+/UtDkyw2tR6/yU= </ds:Modulus> <ds:Exponent>AQAB</ds:Exponent> </ds:RSAKeyValue> </ds:KeyValue> </ds:KeyInfo> </ds:Signature> </soapenv:Header> <soapenv:Body Id="Body"> <spml:addRequest requestID="aaa-4711-1174-zzz" xsi:schemaLocation="urn:siemens:names:prov:gw:HLR_SUBSCRIBER:2:1 hrl_subscriber-2.0.xsd" xmlns:spml="urn:siemens:names:prov:gw:SPML:2:0"> <version>HLR_SUBSCRIBER_v21</version> <identifier>4711</identifier> <imsi> <mcc>312</mcc> <mnc>11</mnc> <msin>491711234567890</msin> </imsi> <auc> <encKey>01234567890123456789012345678901</encKey> <iccId>01234567890123456789</iccId> <algoId>99</algoId> ... </spml:addRequest> </soapenv:Body> </soapenv:Envelope> -- View this message in context: http://camel.465427.n5.nabble.com/XML-security-Signed-SOAP-message-with-apache-camel-tp5723373.html Sent from the Camel - Users mailing list archive at Nabble.com.
