We use a custom process to access digital certs and private keys and do not
use key stores.  To manage this process, I've implemented my own version of
Crypto and gotten it to work for my three use cases (signatures, encryption
and sign/encrypt).  My question concerns the method     

public String getAliasForX509Cert(Certificate cert) throws
WSSecurityException;

This basically requires me to iterate through every cert in our database to
find a match and then return an alias.  Having thousands of certs to search
through makes this a deal breaker.  Is it possible to have the section of
code that calls this API function to pass in the headers received with the
SOAP envelope?  All of our customers are required to send header information
that we use to look up the certs.  If this can't be patched into the code
base, could someone point me to the set of classes I would need to change to
implement it myself?

Thanks,
Dan

-- 
View this message in context: 
http://www.nabble.com/org.apache.ws.security.components.crypto.Crypto-API-question-tf3602581.html#a10064063
Sent from the WSS4J mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to