[optimad]

Hi there,

I have been implementing Xfire WS-Security for Web services. I managed to get username token, excryption and signatures to work just fine and I can combine username token and encryption OR digital signatures and encryption but I can not combine all three unless I want my username token user to be the same as that of my digital signature user.

The reason is that that constant for defining the username is the same for both the username token and the digital signature (WSHandlerConstants.USER) whereas the encryption username has a separate constant (WSHandlerConstants.ENCRYPTION_USER).

Is there a way I can combine all three?

I used the instructions on:

http://xfire.codehaus.org/WS-Security

To get the configuration and basically I want to do this:

config.setProperty(WSHandlerConstants.ACTION, WSHandlerConstants.USERNAME_TOKEN + ” ” + WSHandlerConstants.ENCRYPT + ” ” + WSHandlerConstants.SIGNATURE);

config.setProperty(WSHandlerConstants.USER, “userTestAlias”);
config.setProperty(WSHandlerConstants.ENCRYPTION_USER, “encryptTestAlias”);
config.setProperty(WSHandlerConstants.{SIGNATURE}_USER, “sigTestAlias”);

But at the moment the signature and the username token both use the USER constant.

Any and all help is welcome.

Thanks

[Riyad Kalla]

Moving to OT > Soft Dev

I don’t have any ideas off the top of my head, but if you make headway on this, please keep us posted. Our users are interested in WS-Security.

[Author]

Posts