You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@ws.apache.org by Wally Dennis <wa...@aonhewitt.com> on 2015/01/26 16:57:30 UTC
Question about WSS4J 2.0.2
Hello,
Is there a binary package available for version 2.0.2 of WSS4J like there is for earlier versions (ie - 1.6.17)? I have been able to build the jars from the source using Maven, but am concerned about the many dependent jars and want to make sure I have a "good" package to start with. Also, is there any sample code for using the newer features that are included in the 2.x version of the library?
Thanks,
Wally Dennis
RE: Question about WSS4J 2.0.2
Posted by Wally Dennis <wa...@aonhewitt.com>.
Yes, there has not been a release of Axis2/Rampart in almost 3 years, which is a little concerning. Rampart also contains several inefficiencies that we don’t want to continue dealing with. That is another reason we are leaning towards using WSS4J directly for the security processing and eliminate any requirements (at least for that part) on either of the web services stacks.
Wally
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Tuesday, January 27, 2015 8:46 AM
To: users@ws.apache.org
Subject: Re: Question about WSS4J 2.0.2
Very interesting! Rampart is still stuck on WSS4J 1.6.x from what I can see, so you don't have access to any new feature until they upgrade.
Colm.
On Tue, Jan 27, 2015 at 1:38 PM, Wally Dennis <wa...@aonhewitt.com>> wrote:
We currently have a home-grown ESB application that is built using Apache Axis2/Rampart 1.6.2 that we are in the process of re-architecting as separate Gateway and Service Container components. Our goal is to have a Gateway application that is responsible for security processing, throttling, and routing and then behind that we will have multiple clusters of Service Containers that are customized according to the specific needs of that line of business. The Gateway will validate the request and then based on information contained in a custom header, forward it on to the appropriate Service Container which will handle actually fulfilling the request. The issue is that we want the Gateway to be as efficient as possible and even though WSS4J parses the XML to validate the signature, we want to avoid the serialization and deserialization between XML and Java beans that happens in Axis2 and CXF.
We are still evaluating CXF vs Axis2 for use in the Service Containers – we have a significant catalog of services that are already implemented using Axis2, so it is probably the preferred approach right now just so we don’t have to re-implement all of those services. I am a bit concerned, however, that CXF seems to have a much more active community at this time.
Thanks,
Wally
From: Colm O hEigeartaigh [mailto:coheigea@apache.org<ma...@apache.org>]
Sent: Tuesday, January 27, 2015 5:29 AM
To: users@ws.apache.org<ma...@ws.apache.org>
Subject: Re: Question about WSS4J 2.0.2
The official binary distribution for WSS4J 2.0.x is in maven:
http://repo.maven.apache.org/maven2/org/apache/wss4j/
We don't ship a separate standalone binary distribution as for 1.6.x. As for new features, most of them are tied into CXF. What use-cases are you interested in? Are you using WSS4J with CXF or with another product?
Colm.
On Mon, Jan 26, 2015 at 3:57 PM, Wally Dennis <wa...@aonhewitt.com>> wrote:
Hello,
Is there a binary package available for version 2.0.2 of WSS4J like there is for earlier versions (ie – 1.6.17)? I have been able to build the jars from the source using Maven, but am concerned about the many dependent jars and want to make sure I have a “good” package to start with. Also, is there any sample code for using the newer features that are included in the 2.x version of the library?
Thanks,
Wally Dennis
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Question about WSS4J 2.0.2
Posted by Colm O hEigeartaigh <co...@apache.org>.
Very interesting! Rampart is still stuck on WSS4J 1.6.x from what I can
see, so you don't have access to any new feature until they upgrade.
Colm.
On Tue, Jan 27, 2015 at 1:38 PM, Wally Dennis <wa...@aonhewitt.com>
wrote:
> We currently have a home-grown ESB application that is built using
> Apache Axis2/Rampart 1.6.2 that we are in the process of re-architecting as
> separate Gateway and Service Container components. Our goal is to have a
> Gateway application that is responsible for security processing,
> throttling, and routing and then behind that we will have multiple clusters
> of Service Containers that are customized according to the specific needs
> of that line of business. The Gateway will validate the request and then
> based on information contained in a custom header, forward it on to the
> appropriate Service Container which will handle actually fulfilling the
> request. The issue is that we want the Gateway to be as efficient as
> possible and even though WSS4J parses the XML to validate the signature, we
> want to avoid the serialization and deserialization between XML and Java
> beans that happens in Axis2 and CXF.
>
>
>
> We are still evaluating CXF vs Axis2 for use in the Service Containers –
> we have a significant catalog of services that are already implemented
> using Axis2, so it is probably the preferred approach right now just so we
> don’t have to re-implement all of those services. I am a bit concerned,
> however, that CXF seems to have a much more active community at this time.
>
>
>
> Thanks,
>
> Wally
>
>
>
> *From:* Colm O hEigeartaigh [mailto:coheigea@apache.org]
> *Sent:* Tuesday, January 27, 2015 5:29 AM
> *To:* users@ws.apache.org
> *Subject:* Re: Question about WSS4J 2.0.2
>
>
>
> The official binary distribution for WSS4J 2.0.x is in maven:
>
> http://repo.maven.apache.org/maven2/org/apache/wss4j/
>
> We don't ship a separate standalone binary distribution as for 1.6.x. As
> for new features, most of them are tied into CXF. What use-cases are you
> interested in? Are you using WSS4J with CXF or with another product?
>
> Colm.
>
>
>
> On Mon, Jan 26, 2015 at 3:57 PM, Wally Dennis <wa...@aonhewitt.com>
> wrote:
>
> Hello,
>
>
>
> Is there a binary package available for version 2.0.2 of WSS4J like there
> is for earlier versions (ie – 1.6.17)? I have been able to build the jars
> from the source using Maven, but am concerned about the many dependent jars
> and want to make sure I have a “good” package to start with. Also, is
> there any sample code for using the newer features that are included in the
> 2.x version of the library?
>
>
>
> Thanks,
>
> Wally Dennis
>
>
>
>
>
> --
>
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
RE: Question about WSS4J 2.0.2
Posted by Wally Dennis <wa...@aonhewitt.com>.
We currently have a home-grown ESB application that is built using Apache Axis2/Rampart 1.6.2 that we are in the process of re-architecting as separate Gateway and Service Container components. Our goal is to have a Gateway application that is responsible for security processing, throttling, and routing and then behind that we will have multiple clusters of Service Containers that are customized according to the specific needs of that line of business. The Gateway will validate the request and then based on information contained in a custom header, forward it on to the appropriate Service Container which will handle actually fulfilling the request. The issue is that we want the Gateway to be as efficient as possible and even though WSS4J parses the XML to validate the signature, we want to avoid the serialization and deserialization between XML and Java beans that happens in Axis2 and CXF.
We are still evaluating CXF vs Axis2 for use in the Service Containers – we have a significant catalog of services that are already implemented using Axis2, so it is probably the preferred approach right now just so we don’t have to re-implement all of those services. I am a bit concerned, however, that CXF seems to have a much more active community at this time.
Thanks,
Wally
From: Colm O hEigeartaigh [mailto:coheigea@apache.org]
Sent: Tuesday, January 27, 2015 5:29 AM
To: users@ws.apache.org
Subject: Re: Question about WSS4J 2.0.2
The official binary distribution for WSS4J 2.0.x is in maven:
http://repo.maven.apache.org/maven2/org/apache/wss4j/
We don't ship a separate standalone binary distribution as for 1.6.x. As for new features, most of them are tied into CXF. What use-cases are you interested in? Are you using WSS4J with CXF or with another product?
Colm.
On Mon, Jan 26, 2015 at 3:57 PM, Wally Dennis <wa...@aonhewitt.com>> wrote:
Hello,
Is there a binary package available for version 2.0.2 of WSS4J like there is for earlier versions (ie – 1.6.17)? I have been able to build the jars from the source using Maven, but am concerned about the many dependent jars and want to make sure I have a “good” package to start with. Also, is there any sample code for using the newer features that are included in the 2.x version of the library?
Thanks,
Wally Dennis
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Question about WSS4J 2.0.2
Posted by Colm O hEigeartaigh <co...@apache.org>.
The official binary distribution for WSS4J 2.0.x is in maven:
http://repo.maven.apache.org/maven2/org/apache/wss4j/
We don't ship a separate standalone binary distribution as for 1.6.x. As
for new features, most of them are tied into CXF. What use-cases are you
interested in? Are you using WSS4J with CXF or with another product?
Colm.
On Mon, Jan 26, 2015 at 3:57 PM, Wally Dennis <wa...@aonhewitt.com>
wrote:
> Hello,
>
>
>
> Is there a binary package available for version 2.0.2 of WSS4J like there
> is for earlier versions (ie – 1.6.17)? I have been able to build the jars
> from the source using Maven, but am concerned about the many dependent jars
> and want to make sure I have a “good” package to start with. Also, is
> there any sample code for using the newer features that are included in the
> 2.x version of the library?
>
>
>
> Thanks,
>
> Wally Dennis
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com