Hi All.
I have two application in the same server application (tomcat). A legacy
web application that doesn't set a security provider and a web service
application. When I installed my web service application (that uses
wss4j - usernameToken) the legacy web application stops to work. I read
here that the WSSConfig class insists on inserting the Bouncycastle JCE
provider "first" (or second...) in the list of JCE providers
So, I placed the bouncycastle security provider in the
JAVA_HOME/jre/lib/ext and everything worked fine.
I have tried put the bouncycastle in the TOMCAT_HOME/common/lib and in
the same legacy web application context, but doesn't work.
I know that I could set which security provider work in the web
application code, but in my case I have a legacy web application.
My doubty is:
1) I really need install the bouncycasltle security provider
in my JVM to my lecacy application works?
2) There is a way of WSS4J works with differents securities providers?
3) Wy WSS4J places the boucycastle in the top list of JCE providers?
Thanks!!
Edson
--
Edson Tavares de Camargo - Instituto Stela
Florianópolis - SC - Brasil
(48) 3239 2572
[EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
