How to specify the key to validate the signature on a response?

[Peter Thomas <pe...@gmail.com>]

Hi,

I can't seem to find a way to specify the key to use when verifying the
signatures attached to a response.

I'm using Apache Axis2-1.2 and Apache Rampart 1.2

Basically, my setup is as folows:

I connect to a web-service over SSL using my client certificate to sign my
message.This uses a WS Policy file with the RampartConfig additions to
specify my client certificate, keystore, etc.

This works as expected and I get a response back from the web-service, which
is signed using a second, service, certificate. Unfortunately this fails
with:  "The signature verification failed". I'm assuming this is because I
am not specifying the service certificate anywhere (neither is it specified
in the response from the service).

I can't seem to find anywhere to specify the certificate details to validate
the response?

Any help would be greatly appreciated!

Pete

Re: How to specify the key to validate the signature on a response?

[Dimuthu <mu...@apache.org>]

Hi Pete,

Please look at samples/policy/sample02 in Rampart. Look at the
policy.xml loaded by the client.

In sample02, response message is signed by the service's private key.
Therefore it can be verified using the certificate of the service. In
the policy.xml, it is indicated by the following parameter.

<ramp:encryptionUser>service</ramp:encryptionUser>

Actually encryptionUser's certificate is used for validating the
signature of the response message.

Cheers,
Dimuthu


On Wed, 2007-07-11 at 13:27 +0100, Peter Thomas wrote:
> second, service, certificate. Unfortunately this fails with:  "The
> signature verification failed". I'm assuming this is because I am not
> specifying the service certificate anywhere (neither is it specified
> in the response from the service). 
> 
> I can't seem to find anywhere to specify the certificate details to
> validate the response? 
> 
> Any help would be greatly appreciated!
> 
> Pete
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org