[
https://issues.apache.org/jira/browse/WSS-81?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh resolved WSS-81.
------------------------------------
Resolution: Won't Fix
Marking this as won't-fix, as it's a problem with WebLogic. I can't think of a
compelling use-case for supporting multiple key references on the client side.
> Compatibility between WSS4J and WebLogic 9 for Encryption
> ---------------------------------------------------------
>
> Key: WSS-81
> URL: https://issues.apache.org/jira/browse/WSS-81
> Project: WSS4J
> Issue Type: Bug
> Affects Versions: 1.5.6
> Environment: Web service serveur: Web Logic 9
> Web service client : axis+wss4j+bouncy castle on linux
> Reporter: angélique
> Assignee: Werner Dittmann
> Priority: Critical
> Fix For: 1.6
>
>
> Hello,
> There is a problem of compatibility between Web Logic 9 and WSS4J.
> One one hand, when a weblogic server is configured to do encryption only, the
> SOAP message generated contain a xml node like this:
> <wsse:BinarySecurityToken wsu:Id="bst_JFDmu9E2O5K4Opex"
> xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
>
> ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"
>
> EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> </wsse:BinarySecurityToken>
> On the other hand, it's only possible with WSS4J to add the token for
> signature. When using encryption alone, configuring the client to send a SOAP
> message with this BinarySecurityToken is not possible.
> Wath can I do to make a SOAP request whith an Encrypted body AND a
> BinarySecurityToken in the <head> part ?
> Regards,
> Angélique
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]