UsernameTokenSignedAction support for PasswordDigest option
-----------------------------------------------------------

                 Key: WSS-83
                 URL: https://issues.apache.org/jira/browse/WSS-83
             Project: WSS4J
          Issue Type: Improvement
            Reporter: alberto coletti
            Assignee: Davanum Srinivas


At now UsernameTokenSignedAction has not support for digested password, this is 
beacause of the password type is hardcoded inside the class code.
This kind of action is used for .NET web services interoperability, so it 
doesn't suffice to make the passwordoption configurable.
Microsft WSE ( I tested it with version 2.0) use  the original password (the 
one returned from the passwordcallback) to create the secretkey while wss4j use 
the digegested password, so you need to make the original password avaiable to 
the method getsecretkey of the Usernametoken class.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to