Hai,
Yes, signatureParts is the way to do this. The following parameter
value will sign the Timestamp, an included SAML 1.0 Assertion, and the
Body of the envelope with a single signature. Of course the Timestamp
and Assertion (in this case) have to be present before the signature
action is invoked, or it will throw an exception.
<parameter name="signatureParts"
value="{Element}{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss
-wssecurity-utility-1.0.xsd}Timestamp;{Element}{urn:oasis:names:tc:SAML:
1.0:assertion}Assertion;{}{http://schemas.xmlsoap.org/soap/envelope/}Bod
y" />
{Element} directs the entire element to be signed, while {Content} or {}
(default) directs that just the contents of the element be signed.
--Scott
-----Original Message-----
From: Long, Hai [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 17, 2006 8:04 AM
To: Ruchith Fernando
Cc: [email protected]
Subject: RE: Timestamp configuration
Hello Ruchith,
Do you know how can I sign the timestamp in WSS4J? Per default is the
timestamp in security header just added as clear text and will not be
signed automatically. Can I use the signatureParts for the header?
Best regards,
Hai
-----Original Message-----
From: Ruchith Fernando [mailto:[EMAIL PROTECTED]
Sent: Montag, 14. August 2006 16:52
To: Long, Hai
Cc: [email protected]
Subject: Re: Timestamp configuration
Hi Hai,
Please try using "timeToLive" to set the value parameter in the case of
Axis1.x handlers. The value of this has to be set in terms of seconds.
Thanks,
Ruchith
On 8/14/06, Long, Hai <[EMAIL PROTECTED]> wrote:
> Hello,
>
> Can someone tell me how to configure the timestamp in wss4j. I think
the
> default value is 5 sec. How can I configure it to like 5 minutes?
Thanks
> for help.
>
> Best regards,
> Hai
>
>
> SAP Systems Integration AG
> Standort Ratingen
> Am Schimmersfeld 5
> D-40880 Ratingen
> Tel. : +49 (2102)125-426
> Tel. : +49 (6227)7-41388
> Mobil: +49 (0)160 90821526
> Fax : +49 (2102)125-125
>
> E [EMAIL PROTECTED]
> A www.sap-si.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
--
www.ruchith.org
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
