[ 
https://issues.apache.org/jira/browse/WSS-81?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Werner Dittmann closed WSS-81.
------------------------------

    Resolution: Fixed
      Assignee: Werner Dittmann  (was: Davanum Srinivas)

Added some documentation to describe the real behaviour. Refer to
SVN WSS4J revision 548233.

> Compatibility between WSS4J and WebLogic 9 for Encryption
> ---------------------------------------------------------
>
>                 Key: WSS-81
>                 URL: https://issues.apache.org/jira/browse/WSS-81
>             Project: WSS4J
>          Issue Type: Bug
>         Environment: Web service serveur: Web Logic 9
> Web service client : axis+wss4j+bouncy castle on linux
>            Reporter: angélique
>            Assignee: Werner Dittmann
>            Priority: Blocker
>
> Hello,
> There is a problem of compatibility between Web Logic 9 and WSS4J.
> One one hand, when a weblogic server is configured to do encryption only, the 
> SOAP message generated contain a xml node like this:
> <wsse:BinarySecurityToken wsu:Id="bst_JFDmu9E2O5K4Opex" 
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
>  
> ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3";
>  
> EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";>
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> </wsse:BinarySecurityToken>
> On the other hand, it's only possible with WSS4J to add the token for 
> signature. When using encryption alone, configuring the client to send a SOAP 
> message with this BinarySecurityToken is not possible.
> Wath can I do to make a SOAP request whith an Encrypted body AND a 
> BinarySecurityToken in the <head> part ?
> Regards,
>        Angélique

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to