For the 2.0 release, we should "officially" support the 1.1 version of the UsernameToken, Message Protection and X.509 specifications.
I've already done a good bit of this for the 1.5.4 release, here's the current status of things in a nutshell: - X.509 1.1: Currently supported. - Message Protection 1.1: Signature confirmation is possible atm, but a small amount of work is required to tidy it up, test etc. Our support for encrypted SOAP headers looks partial and is untested. - UsernameToken 1.1: Key derivation is partially supported, we don't have any code for properly processing/caching nonces etc. On top of this work, there's properly supporting and testing 1.1 functionality through the WSHandler architecture. Colm. -----Original Message----- From: Fred Dushin [mailto:[EMAIL PROTECTED] Sent: 15 April 2008 15:36 To: Dittmann, Werner (NSN - DE/Muenich) Cc: wss4j-dev Subject: 2.0 ideas [was: AW: WSS-54] On Apr 15, 2008, at 6:35 AM, Dittmann, Werner (NSN - DE/Muenich) wrote: > For the planned V2.0 : > shall we start some e-mail thread (or using the wiki?) > to gather some ideas and proposals what to address in V2.0? Definitely a good idea -- email is fine by me, but if folks prefer the wiki, that's fine by me, as well (as long as it supports RSS feeds :) To seed the discussion, some things to consider in the near term might be: * mavenize the build/test/deploy/release cycle * checkstyle/pmd the source tree * Split the build into a few components -- core, handler, and axis come to mind * Port to 1.5 (using 1.5 language features -- this might be a problem for some users) * OSGI bundling Perhaps more controversial, and longer term: * Consider enhancements to the APIs * Support JAX-B generated types from WS-Security schema * Study feasibility of signature/encr without need for DOM (stax?) * Use WS-SecurityPolicy as a configuration API? I'm sure there are lots more things we could do, but I'd like to start out with a relatively small and achievable set. -Fred --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] ---------------------------- IONA Technologies PLC (registered in Ireland) Registered Number: 171387 Registered Address: The IONA Building, Shelbourne Road, Dublin 4, Ireland --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
