You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-user@axis.apache.org by th...@abs.gov.au on 2006/11/08 01:32:15 UTC
[Axis2] Question about Rampart (AbstractCrypto)
Hello,
My name is Thomas Roberts and I am looking into developing Java Web
Services with Security components using Axis 2 and Rampart.
I noticed something strange when examining the code for the class
AbstractCrypto.
The code can be found here:
http://svn.apache.org/repos/asf/webservices/wss4j/trunk/src/org/apache/ws/security/components/crypto/AbstractCrypto.java
In the constructor "public AbstractCrypto(Properties properties,
ClassLoader loader)" there is some code:
String location =
this.properties.getProperty("org.apache.ws.security.crypto.merlin.file");
InputStream is = null;
java.net.URL url = Loader.getResource(loader, location);
if(url != null) {
is = url.openStream();
} else {
is = new java.io.FileInputStream(location);
}
My querstion is why is the AbstractCrypto class looking up a property entry
for it's sub class 'Merlin'?
Our project is hoping to use Certificates with Axis2, but provide them from
another source. To include this property entry and presumably also the Java
Key Store is redundant.
Thomas.
------------------------------------------------------------------------------------------------
Free publications and statistics available on www.abs.gov.au
---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org
Re: [Axis2] Question about Rampart (AbstractCrypto)
Posted by Davanum Srinivas <da...@gmail.com>.
Martin, Thomas,
Yes, we can change the behavior (not lookup/load the file in
AbstractCrypto). Patches are welcome.
thanks,
dims
On 11/7/06, Martin Gainty <mg...@hotmail.com> wrote:
> 2 providers for keystore specific implementations one of which is merlin ..the other BC
> http://ws.apache.org/wss4j/apidocs/org/apache/ws/security/components/crypto/package-summary.html
> dims could provide info on defaulting with merlin over BC
> M-
>
> This e-mail communication and any attachments may contain confidential and privileged information for the use of the
> designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received
> this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its
> contents
> ----- Original Message -----
> From: <th...@abs.gov.au>
> To: <ax...@ws.apache.org>
> Sent: Tuesday, November 07, 2006 7:32 PM
> Subject: [Axis2] Question about Rampart (AbstractCrypto)
>
>
> > Hello,
> >
> > My name is Thomas Roberts and I am looking into developing Java Web
> > Services with Security components using Axis 2 and Rampart.
> >
> > I noticed something strange when examining the code for the class
> > AbstractCrypto.
> >
> > The code can be found here:
> > http://svn.apache.org/repos/asf/webservices/wss4j/trunk/src/org/apache/ws/security/components/crypto/AbstractCrypto.java
> >
> >
> > In the constructor "public AbstractCrypto(Properties properties,
> > ClassLoader loader)" there is some code:
> >
> > String location =
> > this.properties.getProperty("org.apache.ws.security.crypto.merlin.file");
> >
> > InputStream is = null;
> > java.net.URL url = Loader.getResource(loader, location);
> > if(url != null) {
> > is = url.openStream();
> > } else {
> > is = new java.io.FileInputStream(location);
> > }
> >
> > My querstion is why is the AbstractCrypto class looking up a property entry
> > for it's sub class 'Merlin'?
> >
> > Our project is hoping to use Certificates with Axis2, but provide them from
> > another source. To include this property entry and presumably also the Java
> > Key Store is redundant.
> >
> > Thomas.
> >
> >
> >
> > ------------------------------------------------------------------------------------------------
> > Free publications and statistics available on www.abs.gov.au
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
> > For additional commands, e-mail: axis-user-help@ws.apache.org
> >
> >
--
Davanum Srinivas : http://www.wso2.net (Oxygen for Web Service Developers)
---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org
Re: [Axis2] Question about Rampart (AbstractCrypto)
Posted by Martin Gainty <mg...@hotmail.com>.
2 providers for keystore specific implementations one of which is merlin ..the other BC
http://ws.apache.org/wss4j/apidocs/org/apache/ws/security/components/crypto/package-summary.html
dims could provide info on defaulting with merlin over BC
M-
This e-mail communication and any attachments may contain confidential and privileged information for the use of the
designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received
this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its
contents
----- Original Message -----
From: <th...@abs.gov.au>
To: <ax...@ws.apache.org>
Sent: Tuesday, November 07, 2006 7:32 PM
Subject: [Axis2] Question about Rampart (AbstractCrypto)
> Hello,
>
> My name is Thomas Roberts and I am looking into developing Java Web
> Services with Security components using Axis 2 and Rampart.
>
> I noticed something strange when examining the code for the class
> AbstractCrypto.
>
> The code can be found here:
> http://svn.apache.org/repos/asf/webservices/wss4j/trunk/src/org/apache/ws/security/components/crypto/AbstractCrypto.java
>
>
> In the constructor "public AbstractCrypto(Properties properties,
> ClassLoader loader)" there is some code:
>
> String location =
> this.properties.getProperty("org.apache.ws.security.crypto.merlin.file");
>
> InputStream is = null;
> java.net.URL url = Loader.getResource(loader, location);
> if(url != null) {
> is = url.openStream();
> } else {
> is = new java.io.FileInputStream(location);
> }
>
> My querstion is why is the AbstractCrypto class looking up a property entry
> for it's sub class 'Merlin'?
>
> Our project is hoping to use Certificates with Axis2, but provide them from
> another source. To include this property entry and presumably also the Java
> Key Store is redundant.
>
> Thomas.
>
>
>
> ------------------------------------------------------------------------------------------------
> Free publications and statistics available on www.abs.gov.au
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
> For additional commands, e-mail: axis-user-help@ws.apache.org
>
>