You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Vinay Penmatsa (Created) (JIRA)" <ji...@apache.org> on 2011/12/06 19:55:41 UTC

[jira] [Created] (CXF-3960) InitiatorSignatureToken Support in WS-Policy definition

InitiatorSignatureToken Support in WS-Policy definition
-------------------------------------------------------

                 Key: CXF-3960
                 URL: https://issues.apache.org/jira/browse/CXF-3960
             Project: CXF
          Issue Type: Improvement
          Components: WS-* Components
    Affects Versions: 2.4.5
         Environment: CXF supported environment
            Reporter: Vinay Penmatsa
             Fix For: 2.4.5


This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
Here's an example of supported policy definition:

<sp:AsymmetricBinding>
  <wsp:Policy>
    <sp:InitiatorSignatureToken>
      <wsp:Policy>
	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
	  <wsp:Policy>
	    <sp:RequireThumbprintReference/>
	    <sp:WssX509V3Token10/>
	  </wsp:Policy>	
	</sp:X509Token>
	</wsp:Policy>
    </sp:InitiatorSignatureToken>
    <sp:RecipientToken>
      <wsp:Policy>
	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
	  <wsp:Policy>
	    <sp:RequireThumbprintReference/>
	    <sp:WssX509V3Token10/>
	  </wsp:Policy>								
	</sp:X509Token>
      </wsp:Policy>
    </sp:RecipientToken>
    <sp:AlgorithmSuite>
      <wsp:Policy>
	<sp:TripleDesRsa15/>			
	</wsp:Policy>
    </sp:AlgorithmSuite>
    <sp:Layout>
      <wsp:Policy>
	<sp:Lax />
      </wsp:Policy>
    </sp:Layout>		
    <sp:IncludeTimestamp/>			
    <sp:OnlySignEntireHeadersAndBody />						
  </wsp:Policy>					
</sp:AsymmetricBinding>



--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinay Penmatsa updated CXF-3960:
--------------------------------

    Attachment: patch.txt
    
> InitiatorSignatureToken Support in WS-Policy definition
> -------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.5
>         Environment: CXF supported environment
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinay Penmatsa updated CXF-3960:
--------------------------------

    Attachment: patch.txt
    
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Colm O hEigeartaigh (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh updated CXF-3960:
-------------------------------------

    Fix Version/s: 2.5.1
    
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>            Assignee: Colm O hEigeartaigh
>              Labels: newbie, patch, security
>             Fix For: 2.4.5, 2.5.1
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Resolved] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Colm O hEigeartaigh (Resolved) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh resolved CXF-3960.
--------------------------------------

    Resolution: Fixed
    
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>            Assignee: Colm O hEigeartaigh
>              Labels: newbie, patch, security
>             Fix For: 2.4.5, 2.5.1
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Colm O hEigeartaigh (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13165238#comment-13165238 ] 

Colm O hEigeartaigh commented on CXF-3960:
------------------------------------------


Author: coheigea
Date: Thu Dec  8 14:53:02 2011
New Revision: 1211923

URL: http://svn.apache.org/viewvc?rev=1211923&view=rev
Log:
[WSS-3960] - Patch for InitiatorSignatureToken Support in WS-Policy definition
 - Patch applied (with some minor modifications), thanks.
 - I added a systest.

[WSS-3960] - Patch for InitiatorSignatureToken Support in WS-Policy definition
 - Patch applied (with some minor modifications), thanks.
 - I added a systest.
                
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>            Assignee: Colm O hEigeartaigh
>              Labels: newbie, patch, security
>             Fix For: 2.4.5, 2.5.1
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinay Penmatsa updated CXF-3960:
--------------------------------

    Attachment:     (was: patch.txt)
    
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinay Penmatsa updated CXF-3960:
--------------------------------

    Attachment:     (was: patch.txt)
    
> InitiatorSignatureToken Support in WS-Policy definition
> -------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.5
>         Environment: CXF supported environment
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinay Penmatsa updated CXF-3960:
--------------------------------

    Attachment: patch.txt
    
> InitiatorSignatureToken Support in WS-Policy definition
> -------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.5
>         Environment: CXF supported environment
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinay Penmatsa updated CXF-3960:
--------------------------------

    Description: 
This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
Here's an example of supported policy definition:
{code:xml} 
<sp:AsymmetricBinding>
  <wsp:Policy>
    <sp:InitiatorSignatureToken>
      <wsp:Policy>
	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
	  <wsp:Policy>
	    <sp:RequireThumbprintReference/>
	    <sp:WssX509V3Token10/>
	  </wsp:Policy>	
	</sp:X509Token>
	</wsp:Policy>
    </sp:InitiatorSignatureToken>
    <sp:RecipientToken>
      <wsp:Policy>
	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
	  <wsp:Policy>
	    <sp:RequireThumbprintReference/>
	    <sp:WssX509V3Token10/>
	  </wsp:Policy>								
	</sp:X509Token>
      </wsp:Policy>
    </sp:RecipientToken>
    <sp:AlgorithmSuite>
      <wsp:Policy>
	<sp:TripleDesRsa15/>			
	</wsp:Policy>
    </sp:AlgorithmSuite>
    <sp:Layout>
      <wsp:Policy>
	<sp:Lax />
      </wsp:Policy>
    </sp:Layout>		
    <sp:IncludeTimestamp/>			
    <sp:OnlySignEntireHeadersAndBody />						
  </wsp:Policy>					
</sp:AsymmetricBinding>
{code}


  was:
This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
Here's an example of supported policy definition:

<sp:AsymmetricBinding>
  <wsp:Policy>
    <sp:InitiatorSignatureToken>
      <wsp:Policy>
	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
	  <wsp:Policy>
	    <sp:RequireThumbprintReference/>
	    <sp:WssX509V3Token10/>
	  </wsp:Policy>	
	</sp:X509Token>
	</wsp:Policy>
    </sp:InitiatorSignatureToken>
    <sp:RecipientToken>
      <wsp:Policy>
	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
	  <wsp:Policy>
	    <sp:RequireThumbprintReference/>
	    <sp:WssX509V3Token10/>
	  </wsp:Policy>								
	</sp:X509Token>
      </wsp:Policy>
    </sp:RecipientToken>
    <sp:AlgorithmSuite>
      <wsp:Policy>
	<sp:TripleDesRsa15/>			
	</wsp:Policy>
    </sp:AlgorithmSuite>
    <sp:Layout>
      <wsp:Policy>
	<sp:Lax />
      </wsp:Policy>
    </sp:Layout>		
    <sp:IncludeTimestamp/>			
    <sp:OnlySignEntireHeadersAndBody />						
  </wsp:Policy>					
</sp:AsymmetricBinding>



    
> InitiatorSignatureToken Support in WS-Policy definition
> -------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.5
>         Environment: CXF supported environment
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Issue Comment Edited] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Colm O hEigeartaigh (Issue Comment Edited) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13165238#comment-13165238 ] 

Colm O hEigeartaigh edited comment on CXF-3960 at 12/8/11 3:16 PM:
-------------------------------------------------------------------

Author: coheigea
Date: Thu Dec  8 14:53:02 2011
New Revision: 1211923

URL: http://svn.apache.org/viewvc?rev=1211923&view=rev
Log:
[WSS-3960] - Patch for InitiatorSignatureToken Support in WS-Policy definition
 - Patch applied (with some minor modifications), thanks.
 - I added a systest.

-----

Author: coheigea
Date: Thu Dec  8 13:29:05 2011
New Revision: 1211875

URL: http://svn.apache.org/viewvc?rev=1211875&view=rev
Log:
[WSS-3960] - Patch for InitiatorSignatureToken Support in WS-Policy definition
 - Patch applied (with some minor modifications), thanks.
 - I added a systest.
                
      was (Author: coheigea):
    
Author: coheigea
Date: Thu Dec  8 14:53:02 2011
New Revision: 1211923

URL: http://svn.apache.org/viewvc?rev=1211923&view=rev
Log:
[WSS-3960] - Patch for InitiatorSignatureToken Support in WS-Policy definition
 - Patch applied (with some minor modifications), thanks.
 - I added a systest.

[WSS-3960] - Patch for InitiatorSignatureToken Support in WS-Policy definition
 - Patch applied (with some minor modifications), thanks.
 - I added a systest.
                  
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>            Assignee: Colm O hEigeartaigh
>              Labels: newbie, patch, security
>             Fix For: 2.4.5, 2.5.1
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (CXF-3960) InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13164476#comment-13164476 ] 

Vinay Penmatsa commented on CXF-3960:
-------------------------------------

Updated patch.txt file
                
> InitiatorSignatureToken Support in WS-Policy definition
> -------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.5
>         Environment: CXF supported environment
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinay Penmatsa updated CXF-3960:
--------------------------------

    Attachment: patch.txt
    
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinay Penmatsa updated CXF-3960:
--------------------------------

          Environment: CXF supported environments  (was: CXF supported environment)
    Affects Version/s:     (was: 2.4.5)
                       2.4.4
              Summary: Patch for InitiatorSignatureToken Support in WS-Policy definition  (was: InitiatorSignatureToken Support in WS-Policy definition)
    
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Assigned] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Colm O hEigeartaigh (Assigned) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh reassigned CXF-3960:
----------------------------------------

    Assignee: Colm O hEigeartaigh
    
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>            Assignee: Colm O hEigeartaigh
>              Labels: newbie, patch, security
>             Fix For: 2.4.5, 2.5.1
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CXF-3960) Patch for InitiatorSignatureToken Support in WS-Policy definition

Posted by "Vinay Penmatsa (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-3960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vinay Penmatsa updated CXF-3960:
--------------------------------

    Attachment:     (was: patch.txt)
    
> Patch for InitiatorSignatureToken Support in WS-Policy definition
> -----------------------------------------------------------------
>
>                 Key: CXF-3960
>                 URL: https://issues.apache.org/jira/browse/CXF-3960
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.4.4
>         Environment: CXF supported environments
>            Reporter: Vinay Penmatsa
>              Labels: newbie, patch, security
>             Fix For: 2.4.5
>
>         Attachments: patch.txt
>
>
> This patch adds support for InitiatorSignatureToken assertion. Support for IntiatorEncryptionToken and corresponding recipient tokens will be added subsequently.
> Here's an example of supported policy definition:
> {code:xml} 
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorSignatureToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">			
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>	
> 	</sp:X509Token>
> 	</wsp:Policy>
>     </sp:InitiatorSignatureToken>
>     <sp:RecipientToken>
>       <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">	
> 	  <wsp:Policy>
> 	    <sp:RequireThumbprintReference/>
> 	    <sp:WssX509V3Token10/>
> 	  </wsp:Policy>								
> 	</sp:X509Token>
>       </wsp:Policy>
>     </sp:RecipientToken>
>     <sp:AlgorithmSuite>
>       <wsp:Policy>
> 	<sp:TripleDesRsa15/>			
> 	</wsp:Policy>
>     </sp:AlgorithmSuite>
>     <sp:Layout>
>       <wsp:Policy>
> 	<sp:Lax />
>       </wsp:Policy>
>     </sp:Layout>		
>     <sp:IncludeTimestamp/>			
>     <sp:OnlySignEntireHeadersAndBody />						
>   </wsp:Policy>					
> </sp:AsymmetricBinding>
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira