Hi all,

I am trying to figure out how a WS-Security-enabled webservice
is marked in its WSDL, but after I have read all documentation
on WSS4J which I have found and after googling for an hour,
I still cannot find and answer. I even tried to read the
WS-Security spec itself, but I did not find it there.

The only piece of information that I found is in gSOAP WSSE
example, where the WSDL has the following added:

... xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
...
<message name="Header">
 <part name="Security" element="wsse:Security"/>
</message>
...
<operation name="add">
  <SOAP:operation style="rpc" soapAction=""/>
  <input>
     <SOAP:body ... />
     <SOAP:header use="literal" message="tns:Header" part="Security"/>
  </input>
...

but that seems to be incorrect, as the wsse:Security element schema
is not even imported. Also such specification only says that
a SOAP header element is needed, but it does not say
whether encryption or signature or username is needed.

Can somebody point me to more information, please ?

Thanks

Martin
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Supercomputing Center Brno             Martin Kuba
Institute of Computer Science    email: [EMAIL PROTECTED]
Masaryk University             http://www.ics.muni.cz/~makub/
Botanicka 68a, 60200 Brno, CZ     mobil: +420-603-533775
--------------------------------------------------------------

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to