Hi Jose,

sure here it comes:

server-config.wsdd:
...
<service name="simple_webservice" provider="java:RPC" style="document"
        use="literal">
        <requestFlow>
                <handler
                        type="java:org.apache.ws.axis.security.WSDoAllReceiver">
                        <parameter name="passwordCallbackClass"
                                value="com.bmw.security.wss4j.callback.PWCallback" 
/>
                        <parameter name="action" value="Signature Encrypt" />
                        <parameter name="signaturePropFile"
                                value="crypto.properties" />

                        <parameter name="decryptionUser" value="alice" />
                        <parameter name="encryptionUser" value="alice" />
                        <parameter name="user" value="bob" />
                        <parameter name="encryptionKeyIdentifier"
                                value="X509KeyIdentifier" />
                        <parameter name="decryptionKeyIdentifier"
                                value="X509KeyIdentifier" />
                        <parameter name="signatureKeyIdentifier"
                                value="X509KeyIdentifier" />
                        <parameter name="encryptionSymAlgorithm"
                                
value="http://www.w3.org/2001/04/xmlenc#aes128-cbc"; />
                </handler>
        </requestFlow>
        <parameter name="className"
                value="com.bmw.wss.test.webservice.SimpleWebservice" />
        <parameter name="allowedMethods" value="*" />
        <parameter name="scope" value="application" />
</service>
...

My crypto.properties looks as follows:

org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
org.apache.ws.security.crypto.merlin.keystore.type=jks
org.apache.ws.security.crypto.merlin.keystore.password=password
org.apache.ws.security.crypto.merlin.keystore.alias=alice
org.apache.ws.security.crypto.merlin.file=interop2.jks

Hope this helps :)



From: "José Ferreiro" <[EMAIL PROTECTED]>
To: "Ruchith Fernando" <[EMAIL PROTECTED]>, [email protected], [EMAIL PROTECTED] Subject: Re: Interop WSE 3.0 and WSS4J - Referenced security token could not be retrieved
Date: Sun, 25 Mar 2007 20:25:38 +0200

Hello,

I am trying also but having some difficulties with The keygeneration for the
.net side.

I used keytool to generate the keys.
Then I converted the keys from keytool in pfx format.
I succeeded to install those keys in windows keystore.

Fernando may you tell me how are generated the key for Alice and Bob to pfx
format?
In which format are stored the key in the javakey store, JKS format?


Freeddy,
May you show me your wssd deployment in the  java server side?

Thank you in advance to you both.



On 3/25/07, Ruchith Fernando <[EMAIL PROTECTED]> wrote:

Hi,

Can you please post the message that the java service gets from the .NET
client?

Thanks,
Ruchith

On 3/23/07, Freddy Weishaeupl <[EMAIL PROTECTED]> wrote:
> Hi,
>
> currently I'm trying to use a .NET Client to access a Java webservice.
At
> the .NET side I use the Microsoft WSE 3.0 implementation to sign and
encrypt
> the SOAP Body of the SOAP request message. At server-side WSS4J is used
for
> checking the signature and decrypting the SOAP Message.
>
> I'm using the interop certificates (Alice&Bob) of the WSS4J 1.5.1package.
>
> Unfortunately at server-side I always get the following error message:
>
-----------------------------------------------------------------------------------------------------------------
> ...
> [23.03.2007 14:53:37] [DEBUG]
> [org.apache.xml.security.algorithms.SignatureAlgorithm.<init>] Create
URI
> "http://www.w3.org/2000/09/xmldsig#hmac-sha1"; class "class
>
org.apache.xml.security.algorithms.implementations.IntegrityHmac$Integrity
> HmacSHA1"
> [23.03.2007 14:53:37] [DEBUG]
> [org.apache.xml.security.algorithms.JCEMapper.translateURItoJCEID]
Request
> for URI http://www.w3.org/2000/09/xmldsig#hmac-sha1
> [23.03.2007 14:53:37] [DEBUG]
> [org.apache.xml.security.algorithms.implementations.IntegrityHmac
.<init>]
> Created IntegrityHmacSHA1 using HmacSHA1
> [23.03.2007 14:53:37] [DEBUG]
> [org.apache.xml.security.utils.ElementProxy.<init>]
setElement("KeyInfo",
> "null")
> [23.03.2007 14:53:37] [DEBUG]
> [
org.apache.ws.security.message.token.SecurityTokenReference.getTokenElement
]
> Token reference uri: #SecurityToken-d81c5ccf-8197-433f-937b-495421e6a832
> org.apache.ws.security.WSSecurityException: Referenced security token
could
> not be retrieved. (Reference
> "#SecurityToken-d81c5ccf-8197-433f-937b-495421e6a832")
>         at
>
org.apache.ws.security.message.token.SecurityTokenReference.getTokenElement
(SecurityTokenReference.java:179)
>         at
> org.apache.ws.security.processor.SignatureProcessor.verifyXMLSignature(
SignatureProcessor.java:186)
> ...
>
-----------------------------------------------------------------------------------------------------------------------------------------
>
>
> Any ideas what's the problem here? Has anyone already tested WSE3.0 in
> combination with WSS4J?
>
> Thanks.
>
> Best Regards
> Freddy
>
> _________________________________________________________________
> Express yourself instantly with MSN Messenger! Download today it's FREE!
> http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


--
www.ruchith.org
www.wso2.org

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




--
José Ferreiro
EPFL Communication Systems engineer
ing.sys.com.dipl.EPFL

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to