Similar to last post :
((BindingProvider)iisrService).getRequestContext().put(SecurityConstants.ENCRYPT_PROPERTIES,
"client_sign.properties");
((BindingProvider)iisrService).getRequestContext().put(SecurityConstants.SIGNATURE_PROPERTIES,
"client_sign.properties");
((BindingProvider)iisrService).getRequestContext().put(SecurityConstants.SIGNATURE_USERNAME,
"signingonly");
((BindingProvider)iisrService).getRequestContext().put(SecurityConstants.CALLBACK_HANDLER,
ClientCallbackHandler.class.getName());
Is there a way to avoid having the client_sign.properties file storing the
username and password for the certificate alias in clear text on the hard
disk?
--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html
