You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ws.apache.org by co...@apache.org on 2010/11/30 12:10:41 UTC
svn commit: r1040461 [19/28] - in /webservices/wss4j/site: ./ apidocs/
apidocs/org/apache/ws/axis/security/
apidocs/org/apache/ws/axis/security/class-use/
apidocs/org/apache/ws/axis/security/handler/
apidocs/org/apache/ws/axis/security/handler/class-us...
Modified: webservices/wss4j/site/xref/org/apache/ws/security/handler/WSHandlerConstants.html
URL: http://svn.apache.org/viewvc/webservices/wss4j/site/xref/org/apache/ws/security/handler/WSHandlerConstants.html?rev=1040461&r1=1040460&r2=1040461&view=diff
==============================================================================
--- webservices/wss4j/site/xref/org/apache/ws/security/handler/WSHandlerConstants.html (original)
+++ webservices/wss4j/site/xref/org/apache/ws/security/handler/WSHandlerConstants.html Tue Nov 30 11:10:26 2010
@@ -606,255 +606,274 @@
<a name="596" href="#596">596</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SIGNATURE_PARTS = <span class="jxr_string">"signatureParts"</span>;
<a name="597" href="#597">597</a>
<a name="598" href="#598">598</a> <em class="jxr_javadoccomment">/**</em>
-<a name="599" href="#599">599</a> <em class="jxr_javadoccomment"> * This parameter sets the length of the secret (derived) key to use for the</em>
-<a name="600" href="#600">600</a> <em class="jxr_javadoccomment"> * WSE UT_SIGN functionality.</em>
-<a name="601" href="#601">601</a> <em class="jxr_javadoccomment"> * </em>
-<a name="602" href="#602">602</a> <em class="jxr_javadoccomment"> * The default value is 16 bytes.</em>
-<a name="603" href="#603">603</a> <em class="jxr_javadoccomment"> */</em>
-<a name="604" href="#604">604</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String WSE_SECRET_KEY_LENGTH = <span class="jxr_string">"wseSecretKeyLength"</span>;
-<a name="605" href="#605">605</a>
-<a name="606" href="#606">606</a> <em class="jxr_javadoccomment">/**</em>
-<a name="607" href="#607">607</a> <em class="jxr_javadoccomment"> * This parameter sets whether to use UsernameToken Key Derivation, as defined </em>
-<a name="608" href="#608">608</a> <em class="jxr_javadoccomment"> * in the UsernameTokenProfile 1.1 specification. The default is false for</em>
-<a name="609" href="#609">609</a> <em class="jxr_javadoccomment"> * backwards compatibility reasons, and defaults to WSE key derivation.</em>
+<a name="599" href="#599">599</a> <em class="jxr_javadoccomment"> * This parameter sets whether to use a single certificate or a whole certificate</em>
+<a name="600" href="#600">600</a> <em class="jxr_javadoccomment"> * chain when constructing a BinarySecurityToken used for direct reference in</em>
+<a name="601" href="#601">601</a> <em class="jxr_javadoccomment"> * signature. The default is true, meaning that only a single certificate is used.</em>
+<a name="602" href="#602">602</a> <em class="jxr_javadoccomment"> */</em>
+<a name="603" href="#603">603</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String USE_SINGLE_CERTIFICATE = <span class="jxr_string">"useSingleCertificate"</span>;
+<a name="604" href="#604">604</a>
+<a name="605" href="#605">605</a> <em class="jxr_javadoccomment">/**</em>
+<a name="606" href="#606">606</a> <em class="jxr_javadoccomment"> * This parameter sets the length of the secret (derived) key to use for the</em>
+<a name="607" href="#607">607</a> <em class="jxr_javadoccomment"> * WSE UT_SIGN functionality.</em>
+<a name="608" href="#608">608</a> <em class="jxr_javadoccomment"> * </em>
+<a name="609" href="#609">609</a> <em class="jxr_javadoccomment"> * The default value is 16 bytes.</em>
<a name="610" href="#610">610</a> <em class="jxr_javadoccomment"> */</em>
-<a name="611" href="#611">611</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String USE_DERIVED_KEY = <span class="jxr_string">"useDerivedKey"</span>;
+<a name="611" href="#611">611</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String WSE_SECRET_KEY_LENGTH = <span class="jxr_string">"wseSecretKeyLength"</span>;
<a name="612" href="#612">612</a>
<a name="613" href="#613">613</a> <em class="jxr_javadoccomment">/**</em>
-<a name="614" href="#614">614</a> <em class="jxr_javadoccomment"> * This parameter sets whether to use the Username Token derived key for a MAC</em>
-<a name="615" href="#615">615</a> <em class="jxr_javadoccomment"> * or not. The default is true.</em>
-<a name="616" href="#616">616</a> <em class="jxr_javadoccomment"> */</em>
-<a name="617" href="#617">617</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String USE_DERIVED_KEY_FOR_MAC = <span class="jxr_string">"useDerivedKeyForMAC"</span>;
-<a name="618" href="#618">618</a>
-<a name="619" href="#619">619</a> <em class="jxr_javadoccomment">/**</em>
-<a name="620" href="#620">620</a> <em class="jxr_javadoccomment"> * This parameter sets the number of iterations to use when deriving a key</em>
-<a name="621" href="#621">621</a> <em class="jxr_javadoccomment"> * from a Username Token. The default is 1000. </em>
-<a name="622" href="#622">622</a> <em class="jxr_javadoccomment"> */</em>
-<a name="623" href="#623">623</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String DERIVED_KEY_ITERATIONS = <span class="jxr_string">"derivedKeyIterations"</span>;
-<a name="624" href="#624">624</a>
-<a name="625" href="#625">625</a> <em class="jxr_javadoccomment">/**</em>
-<a name="626" href="#626">626</a> <em class="jxr_javadoccomment"> * The name of the crypto property file to use for SOAP Encryption.</em>
-<a name="627" href="#627">627</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="628" href="#628">628</a> <em class="jxr_javadoccomment"> * Refer to documentation of {@link #SIG_PROP_FILE}.</em>
-<a name="629" href="#629">629</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="630" href="#630">630</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
-<a name="631" href="#631">631</a> <em class="jxr_javadoccomment"> * <pre></em>
-<a name="632" href="#632">632</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_PROP_FILE, "myCrypto.properties");</em>
-<a name="633" href="#633">633</a> <em class="jxr_javadoccomment"> * </pre></em>
-<a name="634" href="#634">634</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
-<a name="635" href="#635">635</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
+<a name="614" href="#614">614</a> <em class="jxr_javadoccomment"> * This parameter sets whether to use UsernameToken Key Derivation, as defined </em>
+<a name="615" href="#615">615</a> <em class="jxr_javadoccomment"> * in the UsernameTokenProfile 1.1 specification. The default is false for</em>
+<a name="616" href="#616">616</a> <em class="jxr_javadoccomment"> * backwards compatibility reasons, and defaults to WSE key derivation.</em>
+<a name="617" href="#617">617</a> <em class="jxr_javadoccomment"> */</em>
+<a name="618" href="#618">618</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String USE_DERIVED_KEY = <span class="jxr_string">"useDerivedKey"</span>;
+<a name="619" href="#619">619</a>
+<a name="620" href="#620">620</a> <em class="jxr_javadoccomment">/**</em>
+<a name="621" href="#621">621</a> <em class="jxr_javadoccomment"> * This parameter sets whether to use the Username Token derived key for a MAC</em>
+<a name="622" href="#622">622</a> <em class="jxr_javadoccomment"> * or not. The default is true.</em>
+<a name="623" href="#623">623</a> <em class="jxr_javadoccomment"> */</em>
+<a name="624" href="#624">624</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String USE_DERIVED_KEY_FOR_MAC = <span class="jxr_string">"useDerivedKeyForMAC"</span>;
+<a name="625" href="#625">625</a>
+<a name="626" href="#626">626</a> <em class="jxr_javadoccomment">/**</em>
+<a name="627" href="#627">627</a> <em class="jxr_javadoccomment"> * This parameter sets the number of iterations to use when deriving a key</em>
+<a name="628" href="#628">628</a> <em class="jxr_javadoccomment"> * from a Username Token. The default is 1000. </em>
+<a name="629" href="#629">629</a> <em class="jxr_javadoccomment"> */</em>
+<a name="630" href="#630">630</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String DERIVED_KEY_ITERATIONS = <span class="jxr_string">"derivedKeyIterations"</span>;
+<a name="631" href="#631">631</a>
+<a name="632" href="#632">632</a> <em class="jxr_javadoccomment">/**</em>
+<a name="633" href="#633">633</a> <em class="jxr_javadoccomment"> * The name of the crypto property file to use for SOAP Encryption.</em>
+<a name="634" href="#634">634</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="635" href="#635">635</a> <em class="jxr_javadoccomment"> * Refer to documentation of {@link #SIG_PROP_FILE}.</em>
<a name="636" href="#636">636</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="637" href="#637">637</a> <em class="jxr_javadoccomment"> * If this parameter is not used, but the signature crypto property</em>
-<a name="638" href="#638">638</a> <em class="jxr_javadoccomment"> * file is defined (combined Encryption/Signature action), then the</em>
-<a name="639" href="#639">639</a> <em class="jxr_javadoccomment"> * encryption function uses signature property file. Otherwise the</em>
-<a name="640" href="#640">640</a> <em class="jxr_javadoccomment"> * handler throws an <code>AxisFault</code>.</em>
-<a name="641" href="#641">641</a> <em class="jxr_javadoccomment"> */</em>
-<a name="642" href="#642">642</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_PROP_FILE = <span class="jxr_string">"encryptionPropFile"</span>;
-<a name="643" href="#643">643</a>
-<a name="644" href="#644">644</a> <em class="jxr_javadoccomment">/**</em>
-<a name="645" href="#645">645</a> <em class="jxr_javadoccomment"> * The key that hold the refernce of the </em>
-<a name="646" href="#646">646</a> <em class="jxr_javadoccomment"> * <code>java.util.Properties</code> object holding complete info about </em>
-<a name="647" href="#647">647</a> <em class="jxr_javadoccomment"> * encryption Crypto implementation. This should contain all information </em>
-<a name="648" href="#648">648</a> <em class="jxr_javadoccomment"> * that would contain in an equivalent .properties file which includes the </em>
-<a name="649" href="#649">649</a> <em class="jxr_javadoccomment"> * Crypto implementation class name.</em>
-<a name="650" href="#650">650</a> <em class="jxr_javadoccomment"> * </em>
-<a name="651" href="#651">651</a> <em class="jxr_javadoccomment"> * Refer to documentation of {@link #DEC_PROP_FILE}.</em>
-<a name="652" href="#652">652</a> <em class="jxr_javadoccomment"> */</em>
-<a name="653" href="#653">653</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">static</strong> String ENC_PROP_REF_ID = <span class="jxr_string">"encryptionPropRefId"</span>;
-<a name="654" href="#654">654</a>
-<a name="655" href="#655">655</a>
-<a name="656" href="#656">656</a> <em class="jxr_javadoccomment">/**</em>
-<a name="657" href="#657">657</a> <em class="jxr_javadoccomment"> * Defines which key identifier type to use. The WS-Security specifications</em>
-<a name="658" href="#658">658</a> <em class="jxr_javadoccomment"> * recommends to use the identifier type <code>IssuerSerial</code>. For</em>
-<a name="659" href="#659">659</a> <em class="jxr_javadoccomment"> * possible encryption key identifier types refer to</em>
-<a name="660" href="#660">660</a> <em class="jxr_javadoccomment"> * {@link #keyIdentifier}. For encryption <code>IssuerSerial</code>,</em>
-<a name="661" href="#661">661</a> <em class="jxr_javadoccomment"> * <code>X509KeyIdentifier</code>, <code>DirectReference</code>, </em>
-<a name="662" href="#662">662</a> <em class="jxr_javadoccomment"> * <code>Thumbprint</code>, <code>SKIKeyIdentifier</code>, and</em>
-<a name="663" href="#663">663</a> <em class="jxr_javadoccomment"> * <code>EmbeddedKeyName</code> are valid only.</em>
-<a name="664" href="#664">664</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="665" href="#665">665</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
-<a name="666" href="#666">666</a> <em class="jxr_javadoccomment"> * <pre></em>
-<a name="667" href="#667">667</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_KEY_ID, "X509KeyIdentifier");</em>
-<a name="668" href="#668">668</a> <em class="jxr_javadoccomment"> * </pre></em>
-<a name="669" href="#669">669</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
-<a name="670" href="#670">670</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
-<a name="671" href="#671">671</a> <em class="jxr_javadoccomment"> */</em>
-<a name="672" href="#672">672</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_KEY_ID = <span class="jxr_string">"encryptionKeyIdentifier"</span>;
-<a name="673" href="#673">673</a>
-<a name="674" href="#674">674</a> <em class="jxr_javadoccomment">/**</em>
-<a name="675" href="#675">675</a> <em class="jxr_javadoccomment"> * Defines which symmetric encryption algorithm to use. WSS4J supports the</em>
-<a name="676" href="#676">676</a> <em class="jxr_javadoccomment"> * following alorithms: {@link WSConstants#TRIPLE_DES},</em>
-<a name="677" href="#677">677</a> <em class="jxr_javadoccomment"> * {@link WSConstants#AES_128}, {@link WSConstants#AES_256},</em>
-<a name="678" href="#678">678</a> <em class="jxr_javadoccomment"> * and {@link WSConstants#AES_192}. Except for AES 192 all of these</em>
-<a name="679" href="#679">679</a> <em class="jxr_javadoccomment"> * algorithms are required by the XML Encryption specification.</em>
-<a name="680" href="#680">680</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="681" href="#681">681</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
-<a name="682" href="#682">682</a> <em class="jxr_javadoccomment"> * <pre></em>
-<a name="683" href="#683">683</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_SYM_ALGO, WSConstants.AES_256);</em>
-<a name="684" href="#684">684</a> <em class="jxr_javadoccomment"> * </pre></em>
-<a name="685" href="#685">685</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
-<a name="686" href="#686">686</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
-<a name="687" href="#687">687</a> <em class="jxr_javadoccomment"> */</em>
-<a name="688" href="#688">688</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_SYM_ALGO = <span class="jxr_string">"encryptionSymAlgorithm"</span>;
-<a name="689" href="#689">689</a>
-<a name="690" href="#690">690</a> <em class="jxr_javadoccomment">/**</em>
-<a name="691" href="#691">691</a> <em class="jxr_javadoccomment"> * Defines which algorithm to use to encrypt the generated symmetric key.</em>
-<a name="692" href="#692">692</a> <em class="jxr_javadoccomment"> * Currently WSS4J supports {@link WSConstants#KEYTRANSPORT_RSA15} only.</em>
-<a name="693" href="#693">693</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="694" href="#694">694</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
-<a name="695" href="#695">695</a> <em class="jxr_javadoccomment"> * <pre></em>
-<a name="696" href="#696">696</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_KEY_TRANSPORT, "RSA15");</em>
-<a name="697" href="#697">697</a> <em class="jxr_javadoccomment"> * </pre></em>
-<a name="698" href="#698">698</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
-<a name="699" href="#699">699</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
-<a name="700" href="#700">700</a> <em class="jxr_javadoccomment"> */</em>
-<a name="701" href="#701">701</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_KEY_TRANSPORT =
-<a name="702" href="#702">702</a> <span class="jxr_string">"encryptionKeyTransportAlgorithm"</span>;
-<a name="703" href="#703">703</a>
-<a name="704" href="#704">704</a> <em class="jxr_javadoccomment">/**</em>
-<a name="705" href="#705">705</a> <em class="jxr_javadoccomment"> * Defines whether to encrypt the symmetric encryption key or not. If true</em>
-<a name="706" href="#706">706</a> <em class="jxr_javadoccomment"> * (the default), the symmetric key used for encryption is encrypted in turn,</em>
-<a name="707" href="#707">707</a> <em class="jxr_javadoccomment"> * and inserted into the security header in an "EncryptedKey" structure. If</em>
-<a name="708" href="#708">708</a> <em class="jxr_javadoccomment"> * set to false, no EncryptedKey structure is constructed.</em>
-<a name="709" href="#709">709</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="710" href="#710">710</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
-<a name="711" href="#711">711</a> <em class="jxr_javadoccomment"> * <pre></em>
-<a name="712" href="#712">712</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_SYM_ENC_KEY, "false");</em>
-<a name="713" href="#713">713</a> <em class="jxr_javadoccomment"> * </pre></em>
-<a name="714" href="#714">714</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
-<a name="715" href="#715">715</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
-<a name="716" href="#716">716</a> <em class="jxr_javadoccomment"> */</em>
-<a name="717" href="#717">717</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_SYM_ENC_KEY = <span class="jxr_string">"encryptSymmetricEncryptionKey"</span>;
-<a name="718" href="#718">718</a>
-<a name="719" href="#719">719</a> <em class="jxr_javadoccomment">/**</em>
-<a name="720" href="#720">720</a> <em class="jxr_javadoccomment"> * Parameter to define which parts of the request shall be encrypted.</em>
-<a name="721" href="#721">721</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="722" href="#722">722</a> <em class="jxr_javadoccomment"> * The value of this parameter is a list of semi-colon separated</em>
-<a name="723" href="#723">723</a> <em class="jxr_javadoccomment"> * element names that identify the elements to encrypt. An encryption mode</em>
-<a name="724" href="#724">724</a> <em class="jxr_javadoccomment"> * specifier and a namespace identification, each inside a pair of curly</em>
-<a name="725" href="#725">725</a> <em class="jxr_javadoccomment"> * brackets, may preceed each element name.</em>
-<a name="726" href="#726">726</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="727" href="#727">727</a> <em class="jxr_javadoccomment"> * The encryption mode specifier is either <code>{Content}</code> or</em>
-<a name="728" href="#728">728</a> <em class="jxr_javadoccomment"> * <code>{Element}</code>. Please refer to the W3C XML Encryption</em>
-<a name="729" href="#729">729</a> <em class="jxr_javadoccomment"> * specification about the differences between Element and Content</em>
-<a name="730" href="#730">730</a> <em class="jxr_javadoccomment"> * encryption. The encryption mode defaults to <code>Content</code></em>
-<a name="731" href="#731">731</a> <em class="jxr_javadoccomment"> * if it is omitted. Example of a list:</em>
-<a name="732" href="#732">732</a> <em class="jxr_javadoccomment"> * <pre></em>
-<a name="733" href="#733">733</a> <em class="jxr_javadoccomment"> * &lt;parameter name="encryptionParts"</em>
-<a name="734" href="#734">734</a> <em class="jxr_javadoccomment"> * value="{Content}{<a href="http://example.org/paymentv2" target="alexandria_uri">http://example.org/paymentv2</a>}CreditCard;</em>
-<a name="735" href="#735">735</a> <em class="jxr_javadoccomment"> * {Element}{}UserName" /></em>
-<a name="736" href="#736">736</a> <em class="jxr_javadoccomment"> * </pre></em>
-<a name="737" href="#737">737</a> <em class="jxr_javadoccomment"> * The the first entry of the list identifies the element</em>
-<a name="738" href="#738">738</a> <em class="jxr_javadoccomment"> * <code>CreditCard</code> in the namespace</em>
-<a name="739" href="#739">739</a> <em class="jxr_javadoccomment"> * <code><a href="http://example.org/paymentv2</code>," target="alexandria_uri">http://example.org/paymentv2</code>,</a> and will encrypt its content.</em>
-<a name="740" href="#740">740</a> <em class="jxr_javadoccomment"> * Be aware that the element name, the namespace identifier, and the</em>
-<a name="741" href="#741">741</a> <em class="jxr_javadoccomment"> * encryption modifier are case sensitive.</em>
-<a name="742" href="#742">742</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="743" href="#743">743</a> <em class="jxr_javadoccomment"> * The encryption modifier and the namespace identifier can be ommited.</em>
-<a name="744" href="#744">744</a> <em class="jxr_javadoccomment"> * In this case the encryption mode defaults to <code>Content</code> and</em>
-<a name="745" href="#745">745</a> <em class="jxr_javadoccomment"> * the namespace is set to the SOAP namespace.</em>
-<a name="746" href="#746">746</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="747" href="#747">747</a> <em class="jxr_javadoccomment"> * An empty encryption mode defaults to <code>Content</code>, an empty</em>
-<a name="748" href="#748">748</a> <em class="jxr_javadoccomment"> * namespace identifier defaults to the SOAP namespace.</em>
-<a name="749" href="#749">749</a> <em class="jxr_javadoccomment"> * The second line of the example defines <code>Element</code> as</em>
-<a name="750" href="#750">750</a> <em class="jxr_javadoccomment"> * encryption mode for an <code>UserName</code> element in the SOAP</em>
-<a name="751" href="#751">751</a> <em class="jxr_javadoccomment"> * namespace.</em>
-<a name="752" href="#752">752</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="753" href="#753">753</a> <em class="jxr_javadoccomment"> * To specify an element without a namespace use the string</em>
-<a name="754" href="#754">754</a> <em class="jxr_javadoccomment"> * <code>Null</code> as the namespace name (this is a case sensitive</em>
-<a name="755" href="#755">755</a> <em class="jxr_javadoccomment"> * string)</em>
-<a name="756" href="#756">756</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="757" href="#757">757</a> <em class="jxr_javadoccomment"> * If no list is specified, the handler encrypts the SOAP Body in</em>
-<a name="758" href="#758">758</a> <em class="jxr_javadoccomment"> * <code>Content</code> mode by default.</em>
-<a name="759" href="#759">759</a> <em class="jxr_javadoccomment"> */</em>
-<a name="760" href="#760">760</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENCRYPTION_PARTS = <span class="jxr_string">"encryptionParts"</span>;
-<a name="761" href="#761">761</a>
-<a name="762" href="#762">762</a> <em class="jxr_javadoccomment">/**</em>
-<a name="763" href="#763">763</a> <em class="jxr_javadoccomment"> * The name of the SAML Issuer factory property file.</em>
-<a name="764" href="#764">764</a> <em class="jxr_javadoccomment"> * The classloader loads this file. Therefore it must be accessible</em>
-<a name="765" href="#765">765</a> <em class="jxr_javadoccomment"> * via the classpath.</em>
+<a name="637" href="#637">637</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
+<a name="638" href="#638">638</a> <em class="jxr_javadoccomment"> * <pre></em>
+<a name="639" href="#639">639</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_PROP_FILE, "myCrypto.properties");</em>
+<a name="640" href="#640">640</a> <em class="jxr_javadoccomment"> * </pre></em>
+<a name="641" href="#641">641</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
+<a name="642" href="#642">642</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
+<a name="643" href="#643">643</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="644" href="#644">644</a> <em class="jxr_javadoccomment"> * If this parameter is not used, but the signature crypto property</em>
+<a name="645" href="#645">645</a> <em class="jxr_javadoccomment"> * file is defined (combined Encryption/Signature action), then the</em>
+<a name="646" href="#646">646</a> <em class="jxr_javadoccomment"> * encryption function uses signature property file. Otherwise the</em>
+<a name="647" href="#647">647</a> <em class="jxr_javadoccomment"> * handler throws an <code>AxisFault</code>.</em>
+<a name="648" href="#648">648</a> <em class="jxr_javadoccomment"> */</em>
+<a name="649" href="#649">649</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_PROP_FILE = <span class="jxr_string">"encryptionPropFile"</span>;
+<a name="650" href="#650">650</a>
+<a name="651" href="#651">651</a> <em class="jxr_javadoccomment">/**</em>
+<a name="652" href="#652">652</a> <em class="jxr_javadoccomment"> * The key that hold the refernce of the </em>
+<a name="653" href="#653">653</a> <em class="jxr_javadoccomment"> * <code>java.util.Properties</code> object holding complete info about </em>
+<a name="654" href="#654">654</a> <em class="jxr_javadoccomment"> * encryption Crypto implementation. This should contain all information </em>
+<a name="655" href="#655">655</a> <em class="jxr_javadoccomment"> * that would contain in an equivalent .properties file which includes the </em>
+<a name="656" href="#656">656</a> <em class="jxr_javadoccomment"> * Crypto implementation class name.</em>
+<a name="657" href="#657">657</a> <em class="jxr_javadoccomment"> * </em>
+<a name="658" href="#658">658</a> <em class="jxr_javadoccomment"> * Refer to documentation of {@link #DEC_PROP_FILE}.</em>
+<a name="659" href="#659">659</a> <em class="jxr_javadoccomment"> */</em>
+<a name="660" href="#660">660</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">final</strong> <strong class="jxr_keyword">static</strong> String ENC_PROP_REF_ID = <span class="jxr_string">"encryptionPropRefId"</span>;
+<a name="661" href="#661">661</a>
+<a name="662" href="#662">662</a>
+<a name="663" href="#663">663</a> <em class="jxr_javadoccomment">/**</em>
+<a name="664" href="#664">664</a> <em class="jxr_javadoccomment"> * Defines which key identifier type to use. The WS-Security specifications</em>
+<a name="665" href="#665">665</a> <em class="jxr_javadoccomment"> * recommends to use the identifier type <code>IssuerSerial</code>. For</em>
+<a name="666" href="#666">666</a> <em class="jxr_javadoccomment"> * possible encryption key identifier types refer to</em>
+<a name="667" href="#667">667</a> <em class="jxr_javadoccomment"> * {@link #keyIdentifier}. For encryption <code>IssuerSerial</code>,</em>
+<a name="668" href="#668">668</a> <em class="jxr_javadoccomment"> * <code>X509KeyIdentifier</code>, <code>DirectReference</code>, </em>
+<a name="669" href="#669">669</a> <em class="jxr_javadoccomment"> * <code>Thumbprint</code>, <code>SKIKeyIdentifier</code>, and</em>
+<a name="670" href="#670">670</a> <em class="jxr_javadoccomment"> * <code>EmbeddedKeyName</code> are valid only.</em>
+<a name="671" href="#671">671</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="672" href="#672">672</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
+<a name="673" href="#673">673</a> <em class="jxr_javadoccomment"> * <pre></em>
+<a name="674" href="#674">674</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_KEY_ID, "X509KeyIdentifier");</em>
+<a name="675" href="#675">675</a> <em class="jxr_javadoccomment"> * </pre></em>
+<a name="676" href="#676">676</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
+<a name="677" href="#677">677</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
+<a name="678" href="#678">678</a> <em class="jxr_javadoccomment"> */</em>
+<a name="679" href="#679">679</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_KEY_ID = <span class="jxr_string">"encryptionKeyIdentifier"</span>;
+<a name="680" href="#680">680</a>
+<a name="681" href="#681">681</a> <em class="jxr_javadoccomment">/**</em>
+<a name="682" href="#682">682</a> <em class="jxr_javadoccomment"> * Defines which symmetric encryption algorithm to use. WSS4J supports the</em>
+<a name="683" href="#683">683</a> <em class="jxr_javadoccomment"> * following alorithms: {@link WSConstants#TRIPLE_DES},</em>
+<a name="684" href="#684">684</a> <em class="jxr_javadoccomment"> * {@link WSConstants#AES_128}, {@link WSConstants#AES_256},</em>
+<a name="685" href="#685">685</a> <em class="jxr_javadoccomment"> * and {@link WSConstants#AES_192}. Except for AES 192 all of these</em>
+<a name="686" href="#686">686</a> <em class="jxr_javadoccomment"> * algorithms are required by the XML Encryption specification.</em>
+<a name="687" href="#687">687</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="688" href="#688">688</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
+<a name="689" href="#689">689</a> <em class="jxr_javadoccomment"> * <pre></em>
+<a name="690" href="#690">690</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_SYM_ALGO, WSConstants.AES_256);</em>
+<a name="691" href="#691">691</a> <em class="jxr_javadoccomment"> * </pre></em>
+<a name="692" href="#692">692</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
+<a name="693" href="#693">693</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
+<a name="694" href="#694">694</a> <em class="jxr_javadoccomment"> */</em>
+<a name="695" href="#695">695</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_SYM_ALGO = <span class="jxr_string">"encryptionSymAlgorithm"</span>;
+<a name="696" href="#696">696</a>
+<a name="697" href="#697">697</a> <em class="jxr_javadoccomment">/**</em>
+<a name="698" href="#698">698</a> <em class="jxr_javadoccomment"> * Defines which algorithm to use to encrypt the generated symmetric key.</em>
+<a name="699" href="#699">699</a> <em class="jxr_javadoccomment"> * Currently WSS4J supports {@link WSConstants#KEYTRANSPORT_RSA15} only.</em>
+<a name="700" href="#700">700</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="701" href="#701">701</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
+<a name="702" href="#702">702</a> <em class="jxr_javadoccomment"> * <pre></em>
+<a name="703" href="#703">703</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_KEY_TRANSPORT, "RSA15");</em>
+<a name="704" href="#704">704</a> <em class="jxr_javadoccomment"> * </pre></em>
+<a name="705" href="#705">705</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
+<a name="706" href="#706">706</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
+<a name="707" href="#707">707</a> <em class="jxr_javadoccomment"> */</em>
+<a name="708" href="#708">708</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_KEY_TRANSPORT =
+<a name="709" href="#709">709</a> <span class="jxr_string">"encryptionKeyTransportAlgorithm"</span>;
+<a name="710" href="#710">710</a>
+<a name="711" href="#711">711</a> <em class="jxr_javadoccomment">/**</em>
+<a name="712" href="#712">712</a> <em class="jxr_javadoccomment"> * Defines whether to encrypt the symmetric encryption key or not. If true</em>
+<a name="713" href="#713">713</a> <em class="jxr_javadoccomment"> * (the default), the symmetric key used for encryption is encrypted in turn,</em>
+<a name="714" href="#714">714</a> <em class="jxr_javadoccomment"> * and inserted into the security header in an "EncryptedKey" structure. If</em>
+<a name="715" href="#715">715</a> <em class="jxr_javadoccomment"> * set to false, no EncryptedKey structure is constructed.</em>
+<a name="716" href="#716">716</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="717" href="#717">717</a> <em class="jxr_javadoccomment"> * The application may set this parameter using the following method:</em>
+<a name="718" href="#718">718</a> <em class="jxr_javadoccomment"> * <pre></em>
+<a name="719" href="#719">719</a> <em class="jxr_javadoccomment"> * call.setProperty(WSHandlerConstants.ENC_SYM_ENC_KEY, "false");</em>
+<a name="720" href="#720">720</a> <em class="jxr_javadoccomment"> * </pre></em>
+<a name="721" href="#721">721</a> <em class="jxr_javadoccomment"> * However, the parameter in the WSDD deployment file overwrites the</em>
+<a name="722" href="#722">722</a> <em class="jxr_javadoccomment"> * property setting (deployment setting overwrites application setting).</em>
+<a name="723" href="#723">723</a> <em class="jxr_javadoccomment"> */</em>
+<a name="724" href="#724">724</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENC_SYM_ENC_KEY = <span class="jxr_string">"encryptSymmetricEncryptionKey"</span>;
+<a name="725" href="#725">725</a>
+<a name="726" href="#726">726</a> <em class="jxr_javadoccomment">/**</em>
+<a name="727" href="#727">727</a> <em class="jxr_javadoccomment"> * Parameter to define which parts of the request shall be encrypted.</em>
+<a name="728" href="#728">728</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="729" href="#729">729</a> <em class="jxr_javadoccomment"> * The value of this parameter is a list of semi-colon separated</em>
+<a name="730" href="#730">730</a> <em class="jxr_javadoccomment"> * element names that identify the elements to encrypt. An encryption mode</em>
+<a name="731" href="#731">731</a> <em class="jxr_javadoccomment"> * specifier and a namespace identification, each inside a pair of curly</em>
+<a name="732" href="#732">732</a> <em class="jxr_javadoccomment"> * brackets, may preceed each element name.</em>
+<a name="733" href="#733">733</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="734" href="#734">734</a> <em class="jxr_javadoccomment"> * The encryption mode specifier is either <code>{Content}</code> or</em>
+<a name="735" href="#735">735</a> <em class="jxr_javadoccomment"> * <code>{Element}</code>. Please refer to the W3C XML Encryption</em>
+<a name="736" href="#736">736</a> <em class="jxr_javadoccomment"> * specification about the differences between Element and Content</em>
+<a name="737" href="#737">737</a> <em class="jxr_javadoccomment"> * encryption. The encryption mode defaults to <code>Content</code></em>
+<a name="738" href="#738">738</a> <em class="jxr_javadoccomment"> * if it is omitted. Example of a list:</em>
+<a name="739" href="#739">739</a> <em class="jxr_javadoccomment"> * <pre></em>
+<a name="740" href="#740">740</a> <em class="jxr_javadoccomment"> * &lt;parameter name="encryptionParts"</em>
+<a name="741" href="#741">741</a> <em class="jxr_javadoccomment"> * value="{Content}{<a href="http://example.org/paymentv2" target="alexandria_uri">http://example.org/paymentv2</a>}CreditCard;</em>
+<a name="742" href="#742">742</a> <em class="jxr_javadoccomment"> * {Element}{}UserName" /></em>
+<a name="743" href="#743">743</a> <em class="jxr_javadoccomment"> * </pre></em>
+<a name="744" href="#744">744</a> <em class="jxr_javadoccomment"> * The the first entry of the list identifies the element</em>
+<a name="745" href="#745">745</a> <em class="jxr_javadoccomment"> * <code>CreditCard</code> in the namespace</em>
+<a name="746" href="#746">746</a> <em class="jxr_javadoccomment"> * <code><a href="http://example.org/paymentv2</code>," target="alexandria_uri">http://example.org/paymentv2</code>,</a> and will encrypt its content.</em>
+<a name="747" href="#747">747</a> <em class="jxr_javadoccomment"> * Be aware that the element name, the namespace identifier, and the</em>
+<a name="748" href="#748">748</a> <em class="jxr_javadoccomment"> * encryption modifier are case sensitive.</em>
+<a name="749" href="#749">749</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="750" href="#750">750</a> <em class="jxr_javadoccomment"> * The encryption modifier and the namespace identifier can be ommited.</em>
+<a name="751" href="#751">751</a> <em class="jxr_javadoccomment"> * In this case the encryption mode defaults to <code>Content</code> and</em>
+<a name="752" href="#752">752</a> <em class="jxr_javadoccomment"> * the namespace is set to the SOAP namespace.</em>
+<a name="753" href="#753">753</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="754" href="#754">754</a> <em class="jxr_javadoccomment"> * An empty encryption mode defaults to <code>Content</code>, an empty</em>
+<a name="755" href="#755">755</a> <em class="jxr_javadoccomment"> * namespace identifier defaults to the SOAP namespace.</em>
+<a name="756" href="#756">756</a> <em class="jxr_javadoccomment"> * The second line of the example defines <code>Element</code> as</em>
+<a name="757" href="#757">757</a> <em class="jxr_javadoccomment"> * encryption mode for an <code>UserName</code> element in the SOAP</em>
+<a name="758" href="#758">758</a> <em class="jxr_javadoccomment"> * namespace.</em>
+<a name="759" href="#759">759</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="760" href="#760">760</a> <em class="jxr_javadoccomment"> * To specify an element without a namespace use the string</em>
+<a name="761" href="#761">761</a> <em class="jxr_javadoccomment"> * <code>Null</code> as the namespace name (this is a case sensitive</em>
+<a name="762" href="#762">762</a> <em class="jxr_javadoccomment"> * string)</em>
+<a name="763" href="#763">763</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="764" href="#764">764</a> <em class="jxr_javadoccomment"> * If no list is specified, the handler encrypts the SOAP Body in</em>
+<a name="765" href="#765">765</a> <em class="jxr_javadoccomment"> * <code>Content</code> mode by default.</em>
<a name="766" href="#766">766</a> <em class="jxr_javadoccomment"> */</em>
-<a name="767" href="#767">767</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SAML_PROP_FILE = <span class="jxr_string">"samlPropFile"</span>;
+<a name="767" href="#767">767</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENCRYPTION_PARTS = <span class="jxr_string">"encryptionParts"</span>;
<a name="768" href="#768">768</a>
<a name="769" href="#769">769</a> <em class="jxr_javadoccomment">/**</em>
-<a name="770" href="#770">770</a> <em class="jxr_javadoccomment"> * Time-To-Live is the time difference between creation and expiry time in</em>
-<a name="771" href="#771">771</a> <em class="jxr_javadoccomment"> * the WSS Timestamp.</em>
-<a name="772" href="#772">772</a> <em class="jxr_javadoccomment"> * The time-to-live in seconds. After this time the SOAP request is</em>
-<a name="773" href="#773">773</a> <em class="jxr_javadoccomment"> * invalid (at least the security data shall be treated this way).</em>
-<a name="774" href="#774">774</a> <em class="jxr_javadoccomment"> * <p/></em>
-<a name="775" href="#775">775</a> <em class="jxr_javadoccomment"> * If this parameter is not defined, contains a value less or equal</em>
-<a name="776" href="#776">776</a> <em class="jxr_javadoccomment"> * zero, or an illegal format the handlers use a default TTL of</em>
-<a name="777" href="#777">777</a> <em class="jxr_javadoccomment"> * 300 seconds (5 minutes).</em>
-<a name="778" href="#778">778</a> <em class="jxr_javadoccomment"> */</em>
-<a name="779" href="#779">779</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String TTL_TIMESTAMP = <span class="jxr_string">"timeToLive"</span>;
-<a name="780" href="#780">780</a>
-<a name="781" href="#781">781</a> <em class="jxr_javadoccomment">/**</em>
-<a name="782" href="#782">782</a> <em class="jxr_javadoccomment"> * Whether to enable signatureConfirmation or not</em>
-<a name="783" href="#783">783</a> <em class="jxr_javadoccomment"> * By default signatureConfirmation is enabled</em>
-<a name="784" href="#784">784</a> <em class="jxr_javadoccomment"> */</em>
-<a name="785" href="#785">785</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENABLE_SIGNATURE_CONFIRMATION = <span class="jxr_string">"enableSignatureConfirmation"</span>;
-<a name="786" href="#786">786</a>
-<a name="787" href="#787">787</a> <em class="jxr_javadoccomment">/**</em>
-<a name="788" href="#788">788</a> <em class="jxr_javadoccomment"> * Should timestamps have precision in milliseconds</em>
-<a name="789" href="#789">789</a> <em class="jxr_javadoccomment"> */</em>
-<a name="790" href="#790">790</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String TIMESTAMP_PRECISION = <span class="jxr_string">"precisionInMilliseconds"</span>;
-<a name="791" href="#791">791</a>
-<a name="792" href="#792">792</a> <em class="jxr_javadoccomment">/**</em>
-<a name="793" href="#793">793</a> <em class="jxr_javadoccomment"> * Set the value of this parameter to true to enable strict timestamp</em>
-<a name="794" href="#794">794</a> <em class="jxr_javadoccomment"> * handling.</em>
-<a name="795" href="#795">795</a> <em class="jxr_javadoccomment"> * </em>
-<a name="796" href="#796">796</a> <em class="jxr_javadoccomment"> * Strict Timestamp handling: throw an exception if a Timestamp contains</em>
-<a name="797" href="#797">797</a> <em class="jxr_javadoccomment"> * an <code>Expires</code> element and the semantics of the request are</em>
-<a name="798" href="#798">798</a> <em class="jxr_javadoccomment"> * expired, i.e. the current time at the receiver is past the expires time. </em>
-<a name="799" href="#799">799</a> <em class="jxr_javadoccomment"> */</em>
-<a name="800" href="#800">800</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String TIMESTAMP_STRICT = <span class="jxr_string">"timestampStrict"</span>;
-<a name="801" href="#801">801</a>
-<a name="802" href="#802">802</a> <em class="jxr_javadoccomment">/**</em>
-<a name="803" href="#803">803</a> <em class="jxr_javadoccomment"> * Define the parameter values to set the key identifier types. These are:</em>
-<a name="804" href="#804">804</a> <em class="jxr_javadoccomment"> * <ul></em>
-<a name="805" href="#805">805</a> <em class="jxr_javadoccomment"> * <li><code>DirectReference</code> for {@link WSConstants#BST_DIRECT_REFERENCE}</em>
-<a name="806" href="#806">806</a> <em class="jxr_javadoccomment"> * </li></em>
-<a name="807" href="#807">807</a> <em class="jxr_javadoccomment"> * <li><code>IssuerSerial</code> for {@link WSConstants#ISSUER_SERIAL}</em>
-<a name="808" href="#808">808</a> <em class="jxr_javadoccomment"> * </li></em>
-<a name="809" href="#809">809</a> <em class="jxr_javadoccomment"> * <li><code>X509KeyIdentifier</code> for {@link WSConstants#X509_KEY_IDENTIFIER}</em>
-<a name="810" href="#810">810</a> <em class="jxr_javadoccomment"> * </li></em>
-<a name="811" href="#811">811</a> <em class="jxr_javadoccomment"> * <li><code>SKIKeyIdentifier</code> for {@link WSConstants#SKI_KEY_IDENTIFIER}</em>
-<a name="812" href="#812">812</a> <em class="jxr_javadoccomment"> * </li></em>
-<a name="813" href="#813">813</a> <em class="jxr_javadoccomment"> * <li><code>EmbeddedKeyName</code> for {@link WSConstants#EMBEDDED_KEYNAME}</em>
-<a name="814" href="#814">814</a> <em class="jxr_javadoccomment"> * </li></em>
-<a name="815" href="#815">815</a> <em class="jxr_javadoccomment"> * <li><code>Thumbprint</code> for {@link WSConstants#THUMBPRINT}</em>
-<a name="816" href="#816">816</a> <em class="jxr_javadoccomment"> * </li></em>
-<a name="817" href="#817">817</a> <em class="jxr_javadoccomment"> * <li><code>EncryptedKeySHA1</code> for {@link WSConstants#ENCRYPTED_KEY_SHA1_IDENTIFIER}</em>
-<a name="818" href="#818">818</a> <em class="jxr_javadoccomment"> * </li></em>
-<a name="819" href="#819">819</a> <em class="jxr_javadoccomment"> * </ul</em>
-<a name="820" href="#820">820</a> <em class="jxr_javadoccomment"> * See {@link #SIG_KEY_ID} {@link #ENC_KEY_ID}.</em>
-<a name="821" href="#821">821</a> <em class="jxr_javadoccomment"> */</em>
-<a name="822" href="#822">822</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> Map keyIdentifier = <strong class="jxr_keyword">new</strong> Hashtable();
-<a name="823" href="#823">823</a>
-<a name="824" href="#824">824</a> <strong class="jxr_keyword">static</strong> {
-<a name="825" href="#825">825</a> keyIdentifier.put(<span class="jxr_string">"DirectReference"</span>,
-<a name="826" href="#826">826</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.BST_DIRECT_REFERENCE));
-<a name="827" href="#827">827</a> keyIdentifier.put(<span class="jxr_string">"IssuerSerial"</span>,
-<a name="828" href="#828">828</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.ISSUER_SERIAL));
-<a name="829" href="#829">829</a> keyIdentifier.put(<span class="jxr_string">"X509KeyIdentifier"</span>,
-<a name="830" href="#830">830</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.X509_KEY_IDENTIFIER));
-<a name="831" href="#831">831</a> keyIdentifier.put(<span class="jxr_string">"SKIKeyIdentifier"</span>,
-<a name="832" href="#832">832</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.SKI_KEY_IDENTIFIER));
-<a name="833" href="#833">833</a> keyIdentifier.put(<span class="jxr_string">"EmbeddedKeyName"</span>,
-<a name="834" href="#834">834</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.EMBEDDED_KEYNAME));
-<a name="835" href="#835">835</a> keyIdentifier.put(<span class="jxr_string">"Thumbprint"</span>,
-<a name="836" href="#836">836</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.THUMBPRINT_IDENTIFIER));
-<a name="837" href="#837">837</a> keyIdentifier.put(<span class="jxr_string">"EncryptedKeySHA1"</span>,
-<a name="838" href="#838">838</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.ENCRYPTED_KEY_SHA1_IDENTIFIER));
-<a name="839" href="#839">839</a> }
-<a name="840" href="#840">840</a> <em class="jxr_comment">/*</em>
-<a name="841" href="#841">841</a> <em class="jxr_comment"> * internally used property names to store values inside the message context</em>
-<a name="842" href="#842">842</a> <em class="jxr_comment"> * that must have the same livetime as a message (request/response model).</em>
-<a name="843" href="#843">843</a> <em class="jxr_comment"> */</em>
-<a name="844" href="#844">844</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SEND_SIGV = <span class="jxr_string">"_sendSignatureValues_"</span>;
-<a name="845" href="#845">845</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SIG_CONF_DONE = <span class="jxr_string">"_sigConfDone_"</span>;
-<a name="846" href="#846">846</a> }
-<a name="847" href="#847">847</a>
+<a name="770" href="#770">770</a> <em class="jxr_javadoccomment"> * The name of the SAML Issuer factory property file.</em>
+<a name="771" href="#771">771</a> <em class="jxr_javadoccomment"> * The classloader loads this file. Therefore it must be accessible</em>
+<a name="772" href="#772">772</a> <em class="jxr_javadoccomment"> * via the classpath.</em>
+<a name="773" href="#773">773</a> <em class="jxr_javadoccomment"> */</em>
+<a name="774" href="#774">774</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SAML_PROP_FILE = <span class="jxr_string">"samlPropFile"</span>;
+<a name="775" href="#775">775</a>
+<a name="776" href="#776">776</a> <em class="jxr_javadoccomment">/**</em>
+<a name="777" href="#777">777</a> <em class="jxr_javadoccomment"> * Time-To-Live is the time difference between creation and expiry time in</em>
+<a name="778" href="#778">778</a> <em class="jxr_javadoccomment"> * the WSS Timestamp.</em>
+<a name="779" href="#779">779</a> <em class="jxr_javadoccomment"> * The time-to-live in seconds. After this time the SOAP request is</em>
+<a name="780" href="#780">780</a> <em class="jxr_javadoccomment"> * invalid (at least the security data shall be treated this way).</em>
+<a name="781" href="#781">781</a> <em class="jxr_javadoccomment"> * <p/></em>
+<a name="782" href="#782">782</a> <em class="jxr_javadoccomment"> * If this parameter is not defined, contains a value less or equal</em>
+<a name="783" href="#783">783</a> <em class="jxr_javadoccomment"> * zero, or an illegal format the handlers use a default TTL of</em>
+<a name="784" href="#784">784</a> <em class="jxr_javadoccomment"> * 300 seconds (5 minutes).</em>
+<a name="785" href="#785">785</a> <em class="jxr_javadoccomment"> */</em>
+<a name="786" href="#786">786</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String TTL_TIMESTAMP = <span class="jxr_string">"timeToLive"</span>;
+<a name="787" href="#787">787</a>
+<a name="788" href="#788">788</a> <em class="jxr_javadoccomment">/**</em>
+<a name="789" href="#789">789</a> <em class="jxr_javadoccomment"> * Whether to enable signatureConfirmation or not</em>
+<a name="790" href="#790">790</a> <em class="jxr_javadoccomment"> * By default signatureConfirmation is enabled</em>
+<a name="791" href="#791">791</a> <em class="jxr_javadoccomment"> */</em>
+<a name="792" href="#792">792</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String ENABLE_SIGNATURE_CONFIRMATION = <span class="jxr_string">"enableSignatureConfirmation"</span>;
+<a name="793" href="#793">793</a>
+<a name="794" href="#794">794</a> <em class="jxr_javadoccomment">/**</em>
+<a name="795" href="#795">795</a> <em class="jxr_javadoccomment"> * Should timestamps have precision in milliseconds</em>
+<a name="796" href="#796">796</a> <em class="jxr_javadoccomment"> */</em>
+<a name="797" href="#797">797</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String TIMESTAMP_PRECISION = <span class="jxr_string">"precisionInMilliseconds"</span>;
+<a name="798" href="#798">798</a>
+<a name="799" href="#799">799</a> <em class="jxr_javadoccomment">/**</em>
+<a name="800" href="#800">800</a> <em class="jxr_javadoccomment"> * Set the value of this parameter to true to enable strict timestamp</em>
+<a name="801" href="#801">801</a> <em class="jxr_javadoccomment"> * handling.</em>
+<a name="802" href="#802">802</a> <em class="jxr_javadoccomment"> * </em>
+<a name="803" href="#803">803</a> <em class="jxr_javadoccomment"> * Strict Timestamp handling: throw an exception if a Timestamp contains</em>
+<a name="804" href="#804">804</a> <em class="jxr_javadoccomment"> * an <code>Expires</code> element and the semantics of the request are</em>
+<a name="805" href="#805">805</a> <em class="jxr_javadoccomment"> * expired, i.e. the current time at the receiver is past the expires time. </em>
+<a name="806" href="#806">806</a> <em class="jxr_javadoccomment"> */</em>
+<a name="807" href="#807">807</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String TIMESTAMP_STRICT = <span class="jxr_string">"timestampStrict"</span>;
+<a name="808" href="#808">808</a>
+<a name="809" href="#809">809</a> <em class="jxr_javadoccomment">/**</em>
+<a name="810" href="#810">810</a> <em class="jxr_javadoccomment"> * Set the value of this parameter to true to treat passwords as binary values</em>
+<a name="811" href="#811">811</a> <em class="jxr_javadoccomment"> * for Username Tokens.</em>
+<a name="812" href="#812">812</a> <em class="jxr_javadoccomment"> * </em>
+<a name="813" href="#813">813</a> <em class="jxr_javadoccomment"> * This is needed to properly handle password equivalence for UsernameToken</em>
+<a name="814" href="#814">814</a> <em class="jxr_javadoccomment"> * passwords. Binary passwords are Base64 encoded so they can be treated as </em>
+<a name="815" href="#815">815</a> <em class="jxr_javadoccomment"> * strings in most places, but when the password digest is calculated or a key</em>
+<a name="816" href="#816">816</a> <em class="jxr_javadoccomment"> * is derived from the password, the password will be Base64 decoded before </em>
+<a name="817" href="#817">817</a> <em class="jxr_javadoccomment"> * being used. This is most useful for hashed passwords as password equivalents.</em>
+<a name="818" href="#818">818</a> <em class="jxr_javadoccomment"> */</em>
+<a name="819" href="#819">819</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String USE_ENCODED_PASSWORDS = <span class="jxr_string">"useEncodedPasswords"</span>;
+<a name="820" href="#820">820</a>
+<a name="821" href="#821">821</a> <em class="jxr_javadoccomment">/**</em>
+<a name="822" href="#822">822</a> <em class="jxr_javadoccomment"> * Define the parameter values to set the key identifier types. These are:</em>
+<a name="823" href="#823">823</a> <em class="jxr_javadoccomment"> * <ul></em>
+<a name="824" href="#824">824</a> <em class="jxr_javadoccomment"> * <li><code>DirectReference</code> for {@link WSConstants#BST_DIRECT_REFERENCE}</em>
+<a name="825" href="#825">825</a> <em class="jxr_javadoccomment"> * </li></em>
+<a name="826" href="#826">826</a> <em class="jxr_javadoccomment"> * <li><code>IssuerSerial</code> for {@link WSConstants#ISSUER_SERIAL}</em>
+<a name="827" href="#827">827</a> <em class="jxr_javadoccomment"> * </li></em>
+<a name="828" href="#828">828</a> <em class="jxr_javadoccomment"> * <li><code>X509KeyIdentifier</code> for {@link WSConstants#X509_KEY_IDENTIFIER}</em>
+<a name="829" href="#829">829</a> <em class="jxr_javadoccomment"> * </li></em>
+<a name="830" href="#830">830</a> <em class="jxr_javadoccomment"> * <li><code>SKIKeyIdentifier</code> for {@link WSConstants#SKI_KEY_IDENTIFIER}</em>
+<a name="831" href="#831">831</a> <em class="jxr_javadoccomment"> * </li></em>
+<a name="832" href="#832">832</a> <em class="jxr_javadoccomment"> * <li><code>EmbeddedKeyName</code> for {@link WSConstants#EMBEDDED_KEYNAME}</em>
+<a name="833" href="#833">833</a> <em class="jxr_javadoccomment"> * </li></em>
+<a name="834" href="#834">834</a> <em class="jxr_javadoccomment"> * <li><code>Thumbprint</code> for {@link WSConstants#THUMBPRINT}</em>
+<a name="835" href="#835">835</a> <em class="jxr_javadoccomment"> * </li></em>
+<a name="836" href="#836">836</a> <em class="jxr_javadoccomment"> * <li><code>EncryptedKeySHA1</code> for {@link WSConstants#ENCRYPTED_KEY_SHA1_IDENTIFIER}</em>
+<a name="837" href="#837">837</a> <em class="jxr_javadoccomment"> * </li></em>
+<a name="838" href="#838">838</a> <em class="jxr_javadoccomment"> * </ul</em>
+<a name="839" href="#839">839</a> <em class="jxr_javadoccomment"> * See {@link #SIG_KEY_ID} {@link #ENC_KEY_ID}.</em>
+<a name="840" href="#840">840</a> <em class="jxr_javadoccomment"> */</em>
+<a name="841" href="#841">841</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> Map keyIdentifier = <strong class="jxr_keyword">new</strong> Hashtable();
+<a name="842" href="#842">842</a>
+<a name="843" href="#843">843</a> <strong class="jxr_keyword">static</strong> {
+<a name="844" href="#844">844</a> keyIdentifier.put(<span class="jxr_string">"DirectReference"</span>,
+<a name="845" href="#845">845</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.BST_DIRECT_REFERENCE));
+<a name="846" href="#846">846</a> keyIdentifier.put(<span class="jxr_string">"IssuerSerial"</span>,
+<a name="847" href="#847">847</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.ISSUER_SERIAL));
+<a name="848" href="#848">848</a> keyIdentifier.put(<span class="jxr_string">"X509KeyIdentifier"</span>,
+<a name="849" href="#849">849</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.X509_KEY_IDENTIFIER));
+<a name="850" href="#850">850</a> keyIdentifier.put(<span class="jxr_string">"SKIKeyIdentifier"</span>,
+<a name="851" href="#851">851</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.SKI_KEY_IDENTIFIER));
+<a name="852" href="#852">852</a> keyIdentifier.put(<span class="jxr_string">"EmbeddedKeyName"</span>,
+<a name="853" href="#853">853</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.EMBEDDED_KEYNAME));
+<a name="854" href="#854">854</a> keyIdentifier.put(<span class="jxr_string">"Thumbprint"</span>,
+<a name="855" href="#855">855</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.THUMBPRINT_IDENTIFIER));
+<a name="856" href="#856">856</a> keyIdentifier.put(<span class="jxr_string">"EncryptedKeySHA1"</span>,
+<a name="857" href="#857">857</a> <strong class="jxr_keyword">new</strong> Integer(WSConstants.ENCRYPTED_KEY_SHA1_IDENTIFIER));
+<a name="858" href="#858">858</a> }
+<a name="859" href="#859">859</a> <em class="jxr_comment">/*</em>
+<a name="860" href="#860">860</a> <em class="jxr_comment"> * internally used property names to store values inside the message context</em>
+<a name="861" href="#861">861</a> <em class="jxr_comment"> * that must have the same livetime as a message (request/response model).</em>
+<a name="862" href="#862">862</a> <em class="jxr_comment"> */</em>
+<a name="863" href="#863">863</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SEND_SIGV = <span class="jxr_string">"_sendSignatureValues_"</span>;
+<a name="864" href="#864">864</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String SIG_CONF_DONE = <span class="jxr_string">"_sigConfDone_"</span>;
+<a name="865" href="#865">865</a> }
+<a name="866" href="#866">866</a>
</pre>
<hr/><div id="footer">This page was automatically generated by <a href="http://maven.apache.org/">Maven</a></div></body>
</html>
Modified: webservices/wss4j/site/xref/org/apache/ws/security/handler/package-frame.html
URL: http://svn.apache.org/viewvc/webservices/wss4j/site/xref/org/apache/ws/security/handler/package-frame.html?rev=1040461&r1=1040460&r2=1040461&view=diff
==============================================================================
--- webservices/wss4j/site/xref/org/apache/ws/security/handler/package-frame.html (original)
+++ webservices/wss4j/site/xref/org/apache/ws/security/handler/package-frame.html Tue Nov 30 11:10:26 2010
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1" />
- <title>WSS4J 1.5.9 Reference Package org.apache.ws.security.handler</title>
+ <title>WSS4J 1.5.10 Reference Package org.apache.ws.security.handler</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: webservices/wss4j/site/xref/org/apache/ws/security/handler/package-summary.html
URL: http://svn.apache.org/viewvc/webservices/wss4j/site/xref/org/apache/ws/security/handler/package-summary.html?rev=1040461&r1=1040460&r2=1040461&view=diff
==============================================================================
--- webservices/wss4j/site/xref/org/apache/ws/security/handler/package-summary.html (original)
+++ webservices/wss4j/site/xref/org/apache/ws/security/handler/package-summary.html Tue Nov 30 11:10:26 2010
@@ -3,7 +3,7 @@
<html xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1" />
- <title>WSS4J 1.5.9 Reference Package org.apache.ws.security.handler</title>
+ <title>WSS4J 1.5.10 Reference Package org.apache.ws.security.handler</title>
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
</head>
<body>
Modified: webservices/wss4j/site/xref/org/apache/ws/security/message/WSSecBase.html
URL: http://svn.apache.org/viewvc/webservices/wss4j/site/xref/org/apache/ws/security/message/WSSecBase.html?rev=1040461&r1=1040460&r2=1040461&view=diff
==============================================================================
--- webservices/wss4j/site/xref/org/apache/ws/security/message/WSSecBase.html (original)
+++ webservices/wss4j/site/xref/org/apache/ws/security/message/WSSecBase.html Tue Nov 30 11:10:26 2010
@@ -94,7 +94,7 @@
<a name="84" href="#84">84</a> }
<a name="85" href="#85">85</a>
<a name="86" href="#86">86</a> <em class="jxr_javadoccomment">/**</em>
-<a name="87" href="#87">87</a> <em class="jxr_javadoccomment"> * Gets the value of the <code>keyIdentifyerType</code>.</em>
+<a name="87" href="#87">87</a> <em class="jxr_javadoccomment"> * Gets the value of the <code>keyIdentifierType</code>.</em>
<a name="88" href="#88">88</a> <em class="jxr_javadoccomment"> * </em>
<a name="89" href="#89">89</a> <em class="jxr_javadoccomment"> * @return The <code>keyIdentifyerType</code>.</em>
<a name="90" href="#90">90</a> <em class="jxr_javadoccomment"> * @see WSConstants#ISSUER_SERIAL</em>