You are viewing a plain text version of this content. The canonical link for it is here.
Posted to axis-cvs@ws.apache.org by ch...@apache.org on 2006/06/20 06:20:39 UTC
svn commit: r415492 -
/webservices/axis2/site/modules/rampart/1_0/security-module.html
Author: chatra
Date: Mon Jun 19 21:20:35 2006
New Revision: 415492
URL: http://svn.apache.org/viewvc?rev=415492&view=rev
Log:
changed sing to sign. Thanks thilina for notifying
Modified:
webservices/axis2/site/modules/rampart/1_0/security-module.html
Modified: webservices/axis2/site/modules/rampart/1_0/security-module.html
URL: http://svn.apache.org/viewvc/webservices/axis2/site/modules/rampart/1_0/security-module.html?rev=415492&r1=415491&r2=415492&view=diff
==============================================================================
--- webservices/axis2/site/modules/rampart/1_0/security-module.html (original)
+++ webservices/axis2/site/modules/rampart/1_0/security-module.html Mon Jun 19 21:20:35 2006
@@ -2,7 +2,7 @@
@import url("../../../style/maven-base.css");
@import url("../../../style/maven-theme.css");</style><link rel="stylesheet" href="../../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis 2.0" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
- Last published: 05 May 2006
+ Last published: 20 June 2006
| Doc for 1.0</div><div class="xright"></div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis_2_0"><h5>Axis 2.0</h5><ul><li class="none"><a href="../../../index.html">Home</a></li><li class="expanded"><a href="../../../">Downloads</a><ul><li class="none"><a href="../../../download.cgi">Releases</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li><li class="none"><a href="../../../modules/index.html">Modules</a></li><li class="none"><a href="../../../tools/index.html">Tools</a></li></ul></li><li class="expanded"><a href="../../../">Documentation</a><ul><li class="none"><a href="../../../1_0/index.html">Version 1.0</a></li><li class="none"><a href="../../../0_95/index.html">Version 0.95</a></li><li class="none"><a href="../../../0_94/index.html">Version 0.94</a></li><li class="none"><a href=
"../../../0_93/index.html">Version 0.93</a></li></ul></li><li class="expanded"><a href="../../../overview.html">Get Involved</a><ul><li class="none"><a href="../../../svn.html">Checkout the Source</a></li><li class="none"><a href="../../../siteHowTo.html">Build the Site</a></li><li class="none"><a href="../../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../../refLib.html">Reference Library</a></li><li class="none"><a href="../../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../../faq.html">FAQ</a></li></ul></li><li class="none"><a href="../../../thanks.html">Acknowledgements</a></li><li class="none"><a href="http://www.apache.org/licenses/LICENSE-2.0.html" class="externalLink" title="External Link">License</a></li><li class="expanded"><a href="../../../">Project Information</a><ul><li class="none"><a href="../../../team-list.html">Project Team</a></li><li class="none"><a href="../../../issue-tracking.html">Issue Track
ing</a></li></ul></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Securing_SOAP_Messages_with_WSS4J"></a><h2>Securing SOAP Messages with WSS4J</h2><p><em>-For Axis2 Version 1.0</em></p><p>Axis2 comes with a module based on WSS4J [1] to provide WS-Security
features, called "rampart". This document explains how to engage and
configure rampart module.</p><div class="subsection"><a name="Content"></a><h3>Content</h3><ul>
@@ -35,41 +35,41 @@
contain more than one 'action' elements. The schema of this 'action' element
is available <a href="sec-conf/out-action.xsd">here</a>.
-</p><p>An outflow configuration to add a timestamp, sing and encrypt the message
+</p><p>An outflow configuration to add a timestamp, sign and encrypt the message
once, is shown in<a href="#ex1"> Example 1</a> and <a href="#ex1"> Example
2</a> shows how to sign the message twice by chaining the outflow handler
(using two 'action' elements)</p><p>Following is a description of the elements that can go in an 'action'
element of the OutflowSecurity parameter</p><br></br><table class="bodyTable"><tbody>
- <tr class="a"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
- <tr class="b"><td>items</td><td>Security actions for the inflow</td><td>Add a Timestamp, Sign the SOAP body and Encrypt the SOAP body <br></br>
+ <tr class="b"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
+ <tr class="a"><td>items</td><td>Security actions for the inflow</td><td>Add a Timestamp, Sign the SOAP body and Encrypt the SOAP body <br></br>
<items> Timestamp Signature Encrypt</items></td></tr>
- <tr class="a"><td>user</td><td>The user's name</td><td>Set alias of the key to be used to sign<br></br>
+ <tr class="b"><td>user</td><td>The user's name</td><td>Set alias of the key to be used to sign<br></br>
<user> bob</user></td></tr>
- <tr class="b"><td>passwordCallbackClass</td><td>Callback class used to provide the password required to create the
+ <tr class="a"><td>passwordCallbackClass</td><td>Callback class used to provide the password required to create the
UsernameToken or to sign the message</td><td><passwordCallbackClass>
org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
- <tr class="a"><td>signaturePropFile</td><td>property file used to get the signature parameters such as crypto
+ <tr class="b"><td>signaturePropFile</td><td>property file used to get the signature parameters such as crypto
provider, keystore and its password</td><td>Set example.properties file as the signature property file<br></br>
<signaturePropFile>
example.properties</signaturePropFile></td></tr>
- <tr class="b"><td>signatureKeyIdentifier</td><td>Key identifier to be used in referring the key in the signature</td><td>Use the serial number of the certificate<br></br>
+ <tr class="a"><td>signatureKeyIdentifier</td><td>Key identifier to be used in referring the key in the signature</td><td>Use the serial number of the certificate<br></br>
<signatureKeyIdentifier>
IssuerSerial</signatureKeyIdentifier></td></tr>
- <tr class="a"><td>encryptionKeyIdentifier</td><td>Key identifier to be used in referring the key in encryption</td><td>Use the serial number of the certificate <br></br>
+ <tr class="b"><td>encryptionKeyIdentifier</td><td>Key identifier to be used in referring the key in encryption</td><td>Use the serial number of the certificate <br></br>
<encryptionKeyIdentifier>IssuerSerial</encryptionKeyIdentifier></td></tr>
- <tr class="b"><td>encryptionUser</td><td>The user's name for encryption.</td><td><br></br>
+ <tr class="a"><td>encryptionUser</td><td>The user's name for encryption.</td><td><br></br>
<encryptionUser>alice</encryptionUser></td></tr>
- <tr class="a"><td>encryptionSymAlgorithm</td><td>Symmetric algorithm to be used for encryption</td><td>Use AES-128<br></br>
+ <tr class="b"><td>encryptionSymAlgorithm</td><td>Symmetric algorithm to be used for encryption</td><td>Use AES-128<br></br>
<encryptionSymAlgorithm>
http://www.w3.org/2001/04/xmlenc#aes128-cbc</encryptionSymAlgorithm></td></tr>
- <tr class="b"><td>encryptionKeyTransportAlgorithm</td><td>Key encryption algorithm</td><td>Use RSA-OAEP<br></br>
+ <tr class="a"><td>encryptionKeyTransportAlgorithm</td><td>Key encryption algorithm</td><td>Use RSA-OAEP<br></br>
<parameter name="encryptionSymAlgorithm">
http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p</parameter></td></tr>
- <tr class="a"><td>signatureParts</td><td>Sign multiple parts in the SOAP message</td><td>Sign Foo and Bar elements qualified by "http://app.ns/ns"<br></br>
+ <tr class="b"><td>signatureParts</td><td>Sign multiple parts in the SOAP message</td><td>Sign Foo and Bar elements qualified by "http://app.ns/ns"<br></br>
<signatureParts>
{Element}{http://app.ns/ns}Foo;{Element}{http://app.ns/ns}Bar
</signatureParts></td></tr>
- <tr class="b"><td>optimizeParts</td><td>MTOM Optimize the elements specified by the XPath query</td><td>Optimize the CipherValue<br></br>
+ <tr class="a"><td>optimizeParts</td><td>MTOM Optimize the elements specified by the XPath query</td><td>Optimize the CipherValue<br></br>
<optimizeParts>
//xenc:EncryptedData/xenc:CipherData/xenc:CipherValue
</optimizeParts></td></tr>
@@ -77,19 +77,19 @@
'action' element is used to encapsulate the configuration elements here as
well. The schema of the 'action' element is available here. <a href="#ex3">Example 3</a> shows the configuration to decrypt, verify
signature and validate timestamp.</p><table class="bodyTable"><tbody>
- <tr class="a"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
- <tr class="b"><td>items</td><td>Security actions for the inflow</td><td>first the incoming message should be decrypted and then the
+ <tr class="b"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
+ <tr class="a"><td>items</td><td>Security actions for the inflow</td><td>first the incoming message should be decrypted and then the
signatures should be verified and should be checked for the
availability of the Timestamp <br></br>
<items> Timestamp Signature Encrypt</items></td></tr>
- <tr class="a"><td>passwordCallbackClass</td><td>Callback class used to obtain password for decryption and
+ <tr class="b"><td>passwordCallbackClass</td><td>Callback class used to obtain password for decryption and
UsernameToken verification</td><td><br></br>
<passwordCallbackClass>
org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
- <tr class="b"><td>signaturePropFile</td><td>Property file used for signature verification</td><td><br></br>
+ <tr class="a"><td>signaturePropFile</td><td>Property file used for signature verification</td><td><br></br>
<signaturePropFile>
sig.properties</signaturePropFile></td></tr>
- <tr class="a"><td>decryptionPropFile</td><td>Property file used for decryption</td><td><br></br>
+ <tr class="b"><td>decryptionPropFile</td><td>Property file used for decryption</td><td><br></br>
<decryptionPropFile>
dec.properties</decryptionPropFile></td></tr>
</tbody></table><br></br><p>Please note that the '.properties' files used in properties such as
@@ -107,7 +107,7 @@
the org.apache.ws.security.components.crypto.Crypto interface to provide the
crypto information required by WSS4J. The other properties defined are the
configuration properties used by the implementation class
-(org.apache.ws.security.components.crypto.Merlin). <a name="ref"></a><a name="references"></a></p></div><div class="subsection"><a name="References"></a><h3>References</h3><p>1. <a href="http://ws.apache.org/wss4j" class="externalLink" title="External Link">Apache WSS4J -Home</a></p><p><a name="examples"></a></p></div><div class="subsection"><a name="Examples"></a><h3>Examples</h3><p id="ex1">Example 1: An outflow configuration to add a timestamp, sing and
+(org.apache.ws.security.components.crypto.Merlin). <a name="ref"></a><a name="references"></a></p></div><div class="subsection"><a name="References"></a><h3>References</h3><p>1. <a href="http://ws.apache.org/wss4j" class="externalLink" title="External Link">Apache WSS4J -Home</a></p><p><a name="examples"></a></p></div><div class="subsection"><a name="Examples"></a><h3>Examples</h3><p id="ex1">Example 1: An outflow configuration to add a timestamp, sign and
encrypt the message once</p><p><img alt="" src="sec-conf/out-sample.png"></img></p><p id="ex2">Example 2: An outflow configuration to sign the message twice and
add a timestamp</p><p><img alt="" src="sec-conf/out-sample2.png"></img></p><p id="ex3">Example 3: An inflow configuration to decrypt, verify signature
and validate timestamp</p><p><img alt="" src="sec-conf/in-sample.png"></img></p></div></div></div></div><div class="clear"><hr></hr></div><div id="footer"><div class="xright">© 2004-2006, Apache Software Foundation</div><div class="clear"><hr></hr></div></div></body></html>
---------------------------------------------------------------------
To unsubscribe, e-mail: axis-cvs-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-cvs-help@ws.apache.org