Digital Signatures and Axis 1.2 RC2/RC3

["Faucher, Christian" <Ch...@axa-canada.com>]

Hi all,
 
We've been investigating a way to certify that the client calling our
server is really the expected client.  We came across digital signatures
(SOAP-DSIG).
 
Is this a supported feature by Axis?  Or do I need to install WSSE as
well?  Is it supported as well by .NET in a compatible way?
 
In our case, the server-side processing could be an Handler intercepting
the SOAP request, looking for SOAPSEC, get the signature and valid it.
But we would like to avoid as much as possible WSSE4J (time constraints,
nothing personal...).
 
Christian Faucher
Concepteur/Designer
AXA Canada Tech
2020, rue University, Bureau 600
Montréal (Québec) H3A 2A5
T: (514) 282-6817, x2943
F:  (514) 282-6017
Email: christian.faucher@axa-canada.com
  _____  

"Ce message est confidentiel, à l'usage exclusif du destinataire
ci-dessus et son contenu ne représente en aucun cas un engagement de la
part de AXA, sauf en cas de stipulation expresse et par écrit de la part
de AXA. Toute publication, utilisation ou diffusion, même partielle,
doit être autorisée préalablement. Si vous n'êtes pas destinataire de ce
message, merci d'en avertir immédiatement l'expéditeur."

"This e-mail message is confidential, for the exclusive use of the
addressee and its contents shall not constitute a commitment by AXA,
except as otherwise specifically provided in writing by AXA. Any
unauthorized disclosure, use or dissemination, either whole or partial,
is prohibited. If you are not the intended recipient of the message,
please notify the sender immediately."

Re: Digital Signatures and Axis 1.2 RC2/RC3

[Davanum Srinivas <da...@gmail.com>]

SOAP-DSIG (http://www.w3.org/TR/2001/NOTE-SOAP-dsig-20010206/) is
completely outdated. OASIS WS-Security is the latest. Axis does not
support it either though there are some samples in axis itself.

When do you need a milestone/release candidate of WSS4J. let me know.
It will have to be after Axis 1.2 is final of course (predicted to be
released next weekend 9th/10th if there are no show stoppers)

thanks,
dims


On Thu, 3 Mar 2005 17:46:26 -0500, Faucher, Christian
<Ch...@axa-canada.com> wrote:
>  
>  
> Hi all, 
>   
> We've been investigating a way to certify that the client calling our server
> is really the expected client.  We came across digital signatures
> (SOAP-DSIG). 
>   
> Is this a supported feature by Axis?  Or do I need to install WSSE as well? 
> Is it supported as well by .NET in a compatible way? 
>   
> In our case, the server-side processing could be an Handler intercepting the
> SOAP request, looking for SOAPSEC, get the signature and valid it.  But we
> would like to avoid as much as possible WSSE4J (time constraints, nothing
> personal...). 
>   
> Christian Faucher 
>  
> Concepteur/Designer 
> AXA Canada Tech 
> 2020, rue University, Bureau 600 
> Montréal (Québec) H3A 2A5 
> T: (514) 282-6817, x2943 
> F:  (514) 282-6017 
> Email: christian.faucher@axa-canada.com 
>   
>  ________________________________
>  
> "Ce message est confidentiel, à l'usage exclusif du destinataire ci-dessus
> et son contenu ne représente en aucun cas un engagement de la part de AXA,
> sauf en cas de stipulation expresse et par écrit de la part de AXA. Toute
> publication, utilisation ou diffusion, même partielle, doit être autorisée
> préalablement. Si vous n'êtes pas destinataire de ce message, merci d'en
> avertir immédiatement l'expéditeur."
> 
> "This e-mail message is confidential, for the exclusive use of the addressee
> and its contents shall not constitute a commitment by AXA, except as
> otherwise specifically provided in writing by AXA. Any unauthorized
> disclosure, use or dissemination, either whole or partial, is prohibited. If
> you are not the intended recipient of the message, please notify the sender
> immediately." 


-- 
Davanum Srinivas - http://webservices.apache.org/~dims/