You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ws.apache.org by co...@apache.org on 2014/01/09 11:30:07 UTC
svn commit: r1556777 [13/23] - in /webservices/website/wss4j: ./ apidocs/
apidocs/org/apache/ws/security/ apidocs/org/apache/ws/security/action/
apidocs/org/apache/ws/security/action/class-use/
apidocs/org/apache/ws/security/cache/ apidocs/org/apache/w...
Modified: webservices/website/wss4j/issue-tracking.html
URL: http://svn.apache.org/viewvc/webservices/website/wss4j/issue-tracking.html?rev=1556777&r1=1556776&r2=1556777&view=diff
==============================================================================
--- webservices/website/wss4j/issue-tracking.html (original)
+++ webservices/website/wss4j/issue-tracking.html Thu Jan 9 10:29:54 2014
@@ -1,145 +1,152 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Nov 13, 2013 -->
-<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
- <title>Apache WSS4J - Issue Tracking</title>
- <style type="text/css" media="all">
- @import url("./css/maven-base.css");
- @import url("./css/maven-theme.css");
- @import url("./css/site.css");
- </style>
- <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
- <meta name="Date-Revision-yyyymmdd" content="20131113" />
- <meta http-equiv="Content-Language" content="en" />
-
- </head>
- <body class="composite">
- <div id="banner">
- <a href="./" id="bannerLeft">
- Apache WSS4J
- </a>
- <a href="http://www.apache.org" id="bannerRight">
- <img src="http://activemq.apache.org/images/asf-logo.png" alt="$alt" />
- </a>
- <div class="clear">
- <hr/>
- </div>
- </div>
- <div id="breadcrumbs">
-
-
- <div class="xleft">
- <span id="publishDate">Last Published: 2013-11-13</span>
- | <span id="projectVersion">Version: 1.6.13</span>
- </div>
- <div class="xright">
-
- </div>
- <div class="clear">
- <hr/>
- </div>
- </div>
- <div id="leftColumn">
- <div id="navcolumn">
-
-
- <h5>Apache WSS4J</h5>
- <ul>
- <li class="none">
- <a href="index.html" title="Home">Home</a>
- </li>
- <li class="none">
- <a href="download.html" title="Download">Download</a>
- </li>
- <li class="none">
- <a href="using.html" title="Using WSS4J">Using WSS4J</a>
- </li>
- <li class="none">
- <a href="config.html" title="WSS4J Configuration">WSS4J Configuration</a>
- </li>
- <li class="none">
- <a href="topics.html" title="Special Topics">Special Topics</a>
- </li>
- <li class="none">
- <a href="best_practice.html" title="Security Best Practices">Security Best Practices</a>
- </li>
- <li class="none">
- <a href="wss4j16.html" title="WSS4J 1.6 Release Notes">WSS4J 1.6 Release Notes</a>
- </li>
- </ul>
- <h5>Project Documentation</h5>
- <ul>
- <li class="expanded">
- <a href="project-info.html" title="Project Information">Project Information</a>
- <ul>
- <li class="none">
- <a href="index.html" title="About">About</a>
- </li>
- <li class="none">
- <a href="team-list.html" title="Project Team">Project Team</a>
- </li>
- <li class="none">
- <a href="plugins.html" title="Project Plugins">Project Plugins</a>
- </li>
- <li class="none">
- <a href="integration.html" title="Continuous Integration">Continuous Integration</a>
- </li>
- <li class="none">
- <strong>Issue Tracking</strong>
- </li>
- <li class="none">
- <a href="source-repository.html" title="Source Repository">Source Repository</a>
- </li>
- <li class="none">
- <a href="license.html" title="Project License">Project License</a>
- </li>
- <li class="none">
- <a href="plugin-management.html" title="Plugin Management">Plugin Management</a>
- </li>
- <li class="none">
- <a href="distribution-management.html" title="Distribution Management">Distribution Management</a>
- </li>
- <li class="none">
- <a href="project-summary.html" title="Project Summary">Project Summary</a>
- </li>
- <li class="none">
- <a href="mail-lists.html" title="Mailing Lists">Mailing Lists</a>
- </li>
- <li class="none">
- <a href="dependencies.html" title="Dependencies">Dependencies</a>
- </li>
- </ul>
- </li>
- <li class="collapsed">
- <a href="project-reports.html" title="Project Reports">Project Reports</a>
- </li>
- </ul>
- <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
- <img class="poweredBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
- </a>
-
-
- </div>
- </div>
- <div id="bodyColumn">
- <div id="contentBox">
- <div class="section"><h2>Overview<a name="Overview"></a></h2><a name="Overview"></a><p>This project uses <a class="externalLink" href="http://www.atlassian.com/software/jira">JIRA</a> a J2EE-based, issue tracking and project management application.</p></div><div class="section"><h2>Issue Tracking<a name="Issue_Tracking"></a></h2><a name="Issue_Tracking"></a><p>Issues, bugs, and feature requests should be submitted to the following issue tracking system for this project.</p><div class="source"><pre><a class="externalLink" href="http://issues.apache.org/jira/browse/WSS">http://issues.apache.org/jira/browse/WSS</a></pre></div></div>
- </div>
- </div>
- <div class="clear">
- <hr/>
- </div>
- <div id="footer">
- <div class="xright">
- Copyright © 2004-2013
- <a href="http://www.apache.org/">The Apache Software Foundation</a>.
- All Rights Reserved.
-
- </div>
- <div class="clear">
- <hr/>
- </div>
- </div>
- </body>
-</html>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<!-- Generated by Apache Maven Doxia Site Renderer 1.4 at 2014-01-03 -->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ <head>
+ <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+ <title>Apache WSS4J - Issue Tracking</title>
+ <style type="text/css" media="all">
+ @import url("./css/maven-base.css");
+ @import url("./css/maven-theme.css");
+ @import url("./css/site.css");
+ </style>
+ <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
+ <meta name="Date-Revision-yyyymmdd" content="20140103" />
+ <meta http-equiv="Content-Language" content="en" />
+
+ </head>
+ <body class="composite">
+ <div id="banner">
+ <a href="./" id="bannerLeft">
+ Apache WSS4J
+ </a>
+ <a href="http://www.apache.org" id="bannerRight">
+ <img src="http://activemq.apache.org/images/asf-logo.png" alt="$alt" />
+ </a>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ <div id="breadcrumbs">
+
+
+ <div class="xleft">
+ <span id="publishDate">Last Published: 2014-01-03</span>
+ | <span id="projectVersion">Version: 1.6.14</span>
+ </div>
+ <div class="xright">
+
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ <div id="leftColumn">
+ <div id="navcolumn">
+
+
+ <h5>Apache WSS4J</h5>
+ <ul>
+ <li class="none">
+ <a href="index.html" title="Home">Home</a>
+ </li>
+ <li class="none">
+ <a href="download.html" title="Download">Download</a>
+ </li>
+ <li class="none">
+ <a href="using.html" title="Using WSS4J">Using WSS4J</a>
+ </li>
+ <li class="none">
+ <a href="config.html" title="WSS4J Configuration">WSS4J Configuration</a>
+ </li>
+ <li class="none">
+ <a href="topics.html" title="Special Topics">Special Topics</a>
+ </li>
+ <li class="none">
+ <a href="best_practice.html" title="Security Best Practices">Security Best Practices</a>
+ </li>
+ <li class="none">
+ <a href="wss4j16.html" title="WSS4J 1.6 Release Notes">WSS4J 1.6 Release Notes</a>
+ </li>
+ </ul>
+ <h5>Project Documentation</h5>
+ <ul>
+ <li class="expanded">
+ <a href="project-info.html" title="Project Information">Project Information</a>
+ <ul>
+ <li class="none">
+ <a href="dependencies.html" title="Dependencies">Dependencies</a>
+ </li>
+ <li class="none">
+ <strong>Issue Tracking</strong>
+ </li>
+ <li class="none">
+ <a href="license.html" title="Project License">Project License</a>
+ </li>
+ <li class="none">
+ <a href="mail-lists.html" title="Mailing Lists">Mailing Lists</a>
+ </li>
+ <li class="none">
+ <a href="source-repository.html" title="Source Repository">Source Repository</a>
+ </li>
+ <li class="none">
+ <a href="index.html" title="About">About</a>
+ </li>
+ <li class="none">
+ <a href="project-summary.html" title="Project Summary">Project Summary</a>
+ </li>
+ <li class="none">
+ <a href="team-list.html" title="Project Team">Project Team</a>
+ </li>
+ <li class="none">
+ <a href="integration.html" title="Continuous Integration">Continuous Integration</a>
+ </li>
+ <li class="none">
+ <a href="plugin-management.html" title="Plugin Management">Plugin Management</a>
+ </li>
+ <li class="none">
+ <a href="plugins.html" title="Project Plugins">Project Plugins</a>
+ </li>
+ <li class="none">
+ <a href="distribution-management.html" title="Distribution Management">Distribution Management</a>
+ </li>
+ </ul>
+ </li>
+ <li class="collapsed">
+ <a href="project-reports.html" title="Project Reports">Project Reports</a>
+ </li>
+ </ul>
+ <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
+ <img class="poweredBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
+ </a>
+
+
+ </div>
+ </div>
+ <div id="bodyColumn">
+ <div id="contentBox">
+ <div class="section">
+<h2>Overview<a name="Overview"></a></h2><a name="Overview"></a>
+<p>This project uses <a class="externalLink" href="http://www.atlassian.com/software/jira">JIRA</a> a J2EE-based, issue tracking and project management application.</p></div>
+<div class="section">
+<h2>Issue Tracking<a name="Issue_Tracking"></a></h2><a name="Issue_Tracking"></a>
+<p>Issues, bugs, and feature requests should be submitted to the following issue tracking system for this project.</p>
+<div class="source">
+<pre><a class="externalLink" href="http://issues.apache.org/jira/browse/WSS">http://issues.apache.org/jira/browse/WSS</a></pre></div></div>
+ </div>
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ <div id="footer">
+ <div class="xright">
+ Copyright © 2004-2014
+ <a href="http://www.apache.org/">The Apache Software Foundation</a>.
+ All Rights Reserved.
+
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ </body>
+</html>
Modified: webservices/website/wss4j/license.html
URL: http://svn.apache.org/viewvc/webservices/website/wss4j/license.html?rev=1556777&r1=1556776&r2=1556777&view=diff
==============================================================================
--- webservices/website/wss4j/license.html (original)
+++ webservices/website/wss4j/license.html Thu Jan 9 10:29:54 2014
@@ -1,130 +1,138 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Nov 13, 2013 -->
-<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
- <title>Apache WSS4J - Project License</title>
- <style type="text/css" media="all">
- @import url("./css/maven-base.css");
- @import url("./css/maven-theme.css");
- @import url("./css/site.css");
- </style>
- <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
- <meta name="Date-Revision-yyyymmdd" content="20131113" />
- <meta http-equiv="Content-Language" content="en" />
-
- </head>
- <body class="composite">
- <div id="banner">
- <a href="./" id="bannerLeft">
- Apache WSS4J
- </a>
- <a href="http://www.apache.org" id="bannerRight">
- <img src="http://activemq.apache.org/images/asf-logo.png" alt="$alt" />
- </a>
- <div class="clear">
- <hr/>
- </div>
- </div>
- <div id="breadcrumbs">
-
-
- <div class="xleft">
- <span id="publishDate">Last Published: 2013-11-13</span>
- | <span id="projectVersion">Version: 1.6.13</span>
- </div>
- <div class="xright">
-
- </div>
- <div class="clear">
- <hr/>
- </div>
- </div>
- <div id="leftColumn">
- <div id="navcolumn">
-
-
- <h5>Apache WSS4J</h5>
- <ul>
- <li class="none">
- <a href="index.html" title="Home">Home</a>
- </li>
- <li class="none">
- <a href="download.html" title="Download">Download</a>
- </li>
- <li class="none">
- <a href="using.html" title="Using WSS4J">Using WSS4J</a>
- </li>
- <li class="none">
- <a href="config.html" title="WSS4J Configuration">WSS4J Configuration</a>
- </li>
- <li class="none">
- <a href="topics.html" title="Special Topics">Special Topics</a>
- </li>
- <li class="none">
- <a href="best_practice.html" title="Security Best Practices">Security Best Practices</a>
- </li>
- <li class="none">
- <a href="wss4j16.html" title="WSS4J 1.6 Release Notes">WSS4J 1.6 Release Notes</a>
- </li>
- </ul>
- <h5>Project Documentation</h5>
- <ul>
- <li class="expanded">
- <a href="project-info.html" title="Project Information">Project Information</a>
- <ul>
- <li class="none">
- <a href="index.html" title="About">About</a>
- </li>
- <li class="none">
- <a href="team-list.html" title="Project Team">Project Team</a>
- </li>
- <li class="none">
- <a href="plugins.html" title="Project Plugins">Project Plugins</a>
- </li>
- <li class="none">
- <a href="integration.html" title="Continuous Integration">Continuous Integration</a>
- </li>
- <li class="none">
- <a href="issue-tracking.html" title="Issue Tracking">Issue Tracking</a>
- </li>
- <li class="none">
- <a href="source-repository.html" title="Source Repository">Source Repository</a>
- </li>
- <li class="none">
- <strong>Project License</strong>
- </li>
- <li class="none">
- <a href="plugin-management.html" title="Plugin Management">Plugin Management</a>
- </li>
- <li class="none">
- <a href="distribution-management.html" title="Distribution Management">Distribution Management</a>
- </li>
- <li class="none">
- <a href="project-summary.html" title="Project Summary">Project Summary</a>
- </li>
- <li class="none">
- <a href="mail-lists.html" title="Mailing Lists">Mailing Lists</a>
- </li>
- <li class="none">
- <a href="dependencies.html" title="Dependencies">Dependencies</a>
- </li>
- </ul>
- </li>
- <li class="collapsed">
- <a href="project-reports.html" title="Project Reports">Project Reports</a>
- </li>
- </ul>
- <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
- <img class="poweredBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
- </a>
-
-
- </div>
- </div>
- <div id="bodyColumn">
- <div id="contentBox">
- <div class="section"><h2>Overview<a name="Overview"></a></h2><a name="Overview"></a><p>Typically the licenses listed for the project are that of the project itself, and not of dependencies.</p></div><div class="section"><h2>Project License<a name="Project_License"></a></h2><a name="Project_License"></a><div class="section"><h3>The Apache Software License, Version 2.0<a name="The_Apache_Software_License_Version_2.0"></a></h3><a name="The_Apache_Software_License_Version_2.0"></a><div class="source"><pre>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<!-- Generated by Apache Maven Doxia Site Renderer 1.4 at 2014-01-03 -->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ <head>
+ <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+ <title>Apache WSS4J - Project License</title>
+ <style type="text/css" media="all">
+ @import url("./css/maven-base.css");
+ @import url("./css/maven-theme.css");
+ @import url("./css/site.css");
+ </style>
+ <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
+ <meta name="Date-Revision-yyyymmdd" content="20140103" />
+ <meta http-equiv="Content-Language" content="en" />
+
+ </head>
+ <body class="composite">
+ <div id="banner">
+ <a href="./" id="bannerLeft">
+ Apache WSS4J
+ </a>
+ <a href="http://www.apache.org" id="bannerRight">
+ <img src="http://activemq.apache.org/images/asf-logo.png" alt="$alt" />
+ </a>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ <div id="breadcrumbs">
+
+
+ <div class="xleft">
+ <span id="publishDate">Last Published: 2014-01-03</span>
+ | <span id="projectVersion">Version: 1.6.14</span>
+ </div>
+ <div class="xright">
+
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ <div id="leftColumn">
+ <div id="navcolumn">
+
+
+ <h5>Apache WSS4J</h5>
+ <ul>
+ <li class="none">
+ <a href="index.html" title="Home">Home</a>
+ </li>
+ <li class="none">
+ <a href="download.html" title="Download">Download</a>
+ </li>
+ <li class="none">
+ <a href="using.html" title="Using WSS4J">Using WSS4J</a>
+ </li>
+ <li class="none">
+ <a href="config.html" title="WSS4J Configuration">WSS4J Configuration</a>
+ </li>
+ <li class="none">
+ <a href="topics.html" title="Special Topics">Special Topics</a>
+ </li>
+ <li class="none">
+ <a href="best_practice.html" title="Security Best Practices">Security Best Practices</a>
+ </li>
+ <li class="none">
+ <a href="wss4j16.html" title="WSS4J 1.6 Release Notes">WSS4J 1.6 Release Notes</a>
+ </li>
+ </ul>
+ <h5>Project Documentation</h5>
+ <ul>
+ <li class="expanded">
+ <a href="project-info.html" title="Project Information">Project Information</a>
+ <ul>
+ <li class="none">
+ <a href="dependencies.html" title="Dependencies">Dependencies</a>
+ </li>
+ <li class="none">
+ <a href="issue-tracking.html" title="Issue Tracking">Issue Tracking</a>
+ </li>
+ <li class="none">
+ <strong>Project License</strong>
+ </li>
+ <li class="none">
+ <a href="mail-lists.html" title="Mailing Lists">Mailing Lists</a>
+ </li>
+ <li class="none">
+ <a href="source-repository.html" title="Source Repository">Source Repository</a>
+ </li>
+ <li class="none">
+ <a href="index.html" title="About">About</a>
+ </li>
+ <li class="none">
+ <a href="project-summary.html" title="Project Summary">Project Summary</a>
+ </li>
+ <li class="none">
+ <a href="team-list.html" title="Project Team">Project Team</a>
+ </li>
+ <li class="none">
+ <a href="integration.html" title="Continuous Integration">Continuous Integration</a>
+ </li>
+ <li class="none">
+ <a href="plugin-management.html" title="Plugin Management">Plugin Management</a>
+ </li>
+ <li class="none">
+ <a href="plugins.html" title="Project Plugins">Project Plugins</a>
+ </li>
+ <li class="none">
+ <a href="distribution-management.html" title="Distribution Management">Distribution Management</a>
+ </li>
+ </ul>
+ </li>
+ <li class="collapsed">
+ <a href="project-reports.html" title="Project Reports">Project Reports</a>
+ </li>
+ </ul>
+ <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
+ <img class="poweredBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
+ </a>
+
+
+ </div>
+ </div>
+ <div id="bodyColumn">
+ <div id="contentBox">
+ <div class="section">
+<h2>Overview<a name="Overview"></a></h2><a name="Overview"></a>
+<p>Typically the licenses listed for the project are that of the project itself, and not of dependencies.</p></div>
+<div class="section">
+<h2>Project License<a name="Project_License"></a></h2><a name="Project_License"></a>
+<div class="section">
+<h3>The Apache Software License, Version 2.0<a name="The_Apache_Software_License_Version_2.0"></a></h3><a name="The_Apache_Software_License_Version_2.0"></a>
+<div class="source">
+<pre>
Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/
@@ -326,22 +334,22 @@
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-</pre></div></div></div>
- </div>
- </div>
- <div class="clear">
- <hr/>
- </div>
- <div id="footer">
- <div class="xright">
- Copyright © 2004-2013
- <a href="http://www.apache.org/">The Apache Software Foundation</a>.
- All Rights Reserved.
-
- </div>
- <div class="clear">
- <hr/>
- </div>
- </div>
- </body>
-</html>
+</pre></div></div></div>
+ </div>
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ <div id="footer">
+ <div class="xright">
+ Copyright © 2004-2014
+ <a href="http://www.apache.org/">The Apache Software Foundation</a>.
+ All Rights Reserved.
+
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ </body>
+</html>
Modified: webservices/website/wss4j/mail-lists.html
URL: http://svn.apache.org/viewvc/webservices/website/wss4j/mail-lists.html?rev=1556777&r1=1556776&r2=1556777&view=diff
==============================================================================
--- webservices/website/wss4j/mail-lists.html (original)
+++ webservices/website/wss4j/mail-lists.html Thu Jan 9 10:29:54 2014
@@ -1,145 +1,166 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Nov 13, 2013 -->
-<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
- <title>Apache WSS4J - Project Mailing Lists</title>
- <style type="text/css" media="all">
- @import url("./css/maven-base.css");
- @import url("./css/maven-theme.css");
- @import url("./css/site.css");
- </style>
- <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
- <meta name="Date-Revision-yyyymmdd" content="20131113" />
- <meta http-equiv="Content-Language" content="en" />
-
- </head>
- <body class="composite">
- <div id="banner">
- <a href="./" id="bannerLeft">
- Apache WSS4J
- </a>
- <a href="http://www.apache.org" id="bannerRight">
- <img src="http://activemq.apache.org/images/asf-logo.png" alt="$alt" />
- </a>
- <div class="clear">
- <hr/>
- </div>
- </div>
- <div id="breadcrumbs">
-
-
- <div class="xleft">
- <span id="publishDate">Last Published: 2013-11-13</span>
- | <span id="projectVersion">Version: 1.6.13</span>
- </div>
- <div class="xright">
-
- </div>
- <div class="clear">
- <hr/>
- </div>
- </div>
- <div id="leftColumn">
- <div id="navcolumn">
-
-
- <h5>Apache WSS4J</h5>
- <ul>
- <li class="none">
- <a href="index.html" title="Home">Home</a>
- </li>
- <li class="none">
- <a href="download.html" title="Download">Download</a>
- </li>
- <li class="none">
- <a href="using.html" title="Using WSS4J">Using WSS4J</a>
- </li>
- <li class="none">
- <a href="config.html" title="WSS4J Configuration">WSS4J Configuration</a>
- </li>
- <li class="none">
- <a href="topics.html" title="Special Topics">Special Topics</a>
- </li>
- <li class="none">
- <a href="best_practice.html" title="Security Best Practices">Security Best Practices</a>
- </li>
- <li class="none">
- <a href="wss4j16.html" title="WSS4J 1.6 Release Notes">WSS4J 1.6 Release Notes</a>
- </li>
- </ul>
- <h5>Project Documentation</h5>
- <ul>
- <li class="expanded">
- <a href="project-info.html" title="Project Information">Project Information</a>
- <ul>
- <li class="none">
- <a href="index.html" title="About">About</a>
- </li>
- <li class="none">
- <a href="team-list.html" title="Project Team">Project Team</a>
- </li>
- <li class="none">
- <a href="plugins.html" title="Project Plugins">Project Plugins</a>
- </li>
- <li class="none">
- <a href="integration.html" title="Continuous Integration">Continuous Integration</a>
- </li>
- <li class="none">
- <a href="issue-tracking.html" title="Issue Tracking">Issue Tracking</a>
- </li>
- <li class="none">
- <a href="source-repository.html" title="Source Repository">Source Repository</a>
- </li>
- <li class="none">
- <a href="license.html" title="Project License">Project License</a>
- </li>
- <li class="none">
- <a href="plugin-management.html" title="Plugin Management">Plugin Management</a>
- </li>
- <li class="none">
- <a href="distribution-management.html" title="Distribution Management">Distribution Management</a>
- </li>
- <li class="none">
- <a href="project-summary.html" title="Project Summary">Project Summary</a>
- </li>
- <li class="none">
- <strong>Mailing Lists</strong>
- </li>
- <li class="none">
- <a href="dependencies.html" title="Dependencies">Dependencies</a>
- </li>
- </ul>
- </li>
- <li class="collapsed">
- <a href="project-reports.html" title="Project Reports">Project Reports</a>
- </li>
- </ul>
- <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
- <img class="poweredBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
- </a>
-
-
- </div>
- </div>
- <div id="bodyColumn">
- <div id="contentBox">
- <div class="section"><h2>Project Mailing Lists<a name="Project_Mailing_Lists"></a></h2><a name="Project_Mailing_Lists"></a><p>These are the mailing lists that have been established for this project. For each list, there is a subscribe, unsubscribe, and an archive link.</p><table border="0" class="bodyTable"><tr class="a"><th>Name</th><th>Subscribe</th><th>Unsubscribe</th><th>Post</th><th>Archive</th></tr><tr class="b"><td>Apache Web Services Developer List</td><td><a class="externalLink" href="mailto:dev-subscribe@ws.apache.org">Subscribe</a></td><td><a class="externalLink" href="mailto:dev-unsubscribe@ws.apache.org">Unsubscribe</a></td><td><a class="externalLink" href="mailto:dev@ws.apache.org">Post</a></td><td><a class="externalLink" href="http://mail-archives.apache.org/mod_mbox/ws-dev/">mail-archives.apache.org</a></td></tr><tr class="a"><td>Apache Web Services Users List</td><td><a class="externalLink" href="mailto:users-subscribe@ws.apache.org">Subscribe</a></td><td><a
class="externalLink" href="mailto:users-unsubscribe@ws.apache.org">Unsubscribe</a></td><td><a class="externalLink" href="mailto:users@ws.apache.org">Post</a></td><td><a class="externalLink" href="http://mail-archives.apache.org/mod_mbox/ws-users/">mail-archives.apache.org</a></td></tr></table></div>
- </div>
- </div>
- <div class="clear">
- <hr/>
- </div>
- <div id="footer">
- <div class="xright">
- Copyright © 2004-2013
- <a href="http://www.apache.org/">The Apache Software Foundation</a>.
- All Rights Reserved.
-
- </div>
- <div class="clear">
- <hr/>
- </div>
- </div>
- </body>
-</html>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<!-- Generated by Apache Maven Doxia Site Renderer 1.4 at 2014-01-03 -->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ <head>
+ <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+ <title>Apache WSS4J - Project Mailing Lists</title>
+ <style type="text/css" media="all">
+ @import url("./css/maven-base.css");
+ @import url("./css/maven-theme.css");
+ @import url("./css/site.css");
+ </style>
+ <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
+ <meta name="Date-Revision-yyyymmdd" content="20140103" />
+ <meta http-equiv="Content-Language" content="en" />
+
+ </head>
+ <body class="composite">
+ <div id="banner">
+ <a href="./" id="bannerLeft">
+ Apache WSS4J
+ </a>
+ <a href="http://www.apache.org" id="bannerRight">
+ <img src="http://activemq.apache.org/images/asf-logo.png" alt="$alt" />
+ </a>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ <div id="breadcrumbs">
+
+
+ <div class="xleft">
+ <span id="publishDate">Last Published: 2014-01-03</span>
+ | <span id="projectVersion">Version: 1.6.14</span>
+ </div>
+ <div class="xright">
+
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ <div id="leftColumn">
+ <div id="navcolumn">
+
+
+ <h5>Apache WSS4J</h5>
+ <ul>
+ <li class="none">
+ <a href="index.html" title="Home">Home</a>
+ </li>
+ <li class="none">
+ <a href="download.html" title="Download">Download</a>
+ </li>
+ <li class="none">
+ <a href="using.html" title="Using WSS4J">Using WSS4J</a>
+ </li>
+ <li class="none">
+ <a href="config.html" title="WSS4J Configuration">WSS4J Configuration</a>
+ </li>
+ <li class="none">
+ <a href="topics.html" title="Special Topics">Special Topics</a>
+ </li>
+ <li class="none">
+ <a href="best_practice.html" title="Security Best Practices">Security Best Practices</a>
+ </li>
+ <li class="none">
+ <a href="wss4j16.html" title="WSS4J 1.6 Release Notes">WSS4J 1.6 Release Notes</a>
+ </li>
+ </ul>
+ <h5>Project Documentation</h5>
+ <ul>
+ <li class="expanded">
+ <a href="project-info.html" title="Project Information">Project Information</a>
+ <ul>
+ <li class="none">
+ <a href="dependencies.html" title="Dependencies">Dependencies</a>
+ </li>
+ <li class="none">
+ <a href="issue-tracking.html" title="Issue Tracking">Issue Tracking</a>
+ </li>
+ <li class="none">
+ <a href="license.html" title="Project License">Project License</a>
+ </li>
+ <li class="none">
+ <strong>Mailing Lists</strong>
+ </li>
+ <li class="none">
+ <a href="source-repository.html" title="Source Repository">Source Repository</a>
+ </li>
+ <li class="none">
+ <a href="index.html" title="About">About</a>
+ </li>
+ <li class="none">
+ <a href="project-summary.html" title="Project Summary">Project Summary</a>
+ </li>
+ <li class="none">
+ <a href="team-list.html" title="Project Team">Project Team</a>
+ </li>
+ <li class="none">
+ <a href="integration.html" title="Continuous Integration">Continuous Integration</a>
+ </li>
+ <li class="none">
+ <a href="plugin-management.html" title="Plugin Management">Plugin Management</a>
+ </li>
+ <li class="none">
+ <a href="plugins.html" title="Project Plugins">Project Plugins</a>
+ </li>
+ <li class="none">
+ <a href="distribution-management.html" title="Distribution Management">Distribution Management</a>
+ </li>
+ </ul>
+ </li>
+ <li class="collapsed">
+ <a href="project-reports.html" title="Project Reports">Project Reports</a>
+ </li>
+ </ul>
+ <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
+ <img class="poweredBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
+ </a>
+
+
+ </div>
+ </div>
+ <div id="bodyColumn">
+ <div id="contentBox">
+ <div class="section">
+<h2>Project Mailing Lists<a name="Project_Mailing_Lists"></a></h2><a name="Project_Mailing_Lists"></a>
+<p>These are the mailing lists that have been established for this project. For each list, there is a subscribe, unsubscribe, and an archive link.</p>
+<table border="0" class="bodyTable">
+<tr class="a">
+<th>Name</th>
+<th>Subscribe</th>
+<th>Unsubscribe</th>
+<th>Post</th>
+<th>Archive</th></tr>
+<tr class="b">
+<td>Apache Web Services Developer List</td>
+<td><a class="externalLink" href="mailto:dev-subscribe@ws.apache.org">Subscribe</a></td>
+<td><a class="externalLink" href="mailto:dev-unsubscribe@ws.apache.org">Unsubscribe</a></td>
+<td><a class="externalLink" href="mailto:dev@ws.apache.org">Post</a></td>
+<td><a class="externalLink" href="http://mail-archives.apache.org/mod_mbox/ws-dev/">mail-archives.apache.org</a></td></tr>
+<tr class="a">
+<td>Apache Web Services Users List</td>
+<td><a class="externalLink" href="mailto:users-subscribe@ws.apache.org">Subscribe</a></td>
+<td><a class="externalLink" href="mailto:users-unsubscribe@ws.apache.org">Unsubscribe</a></td>
+<td><a class="externalLink" href="mailto:users@ws.apache.org">Post</a></td>
+<td><a class="externalLink" href="http://mail-archives.apache.org/mod_mbox/ws-users/">mail-archives.apache.org</a></td></tr></table></div>
+ </div>
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ <div id="footer">
+ <div class="xright">
+ Copyright © 2004-2014
+ <a href="http://www.apache.org/">The Apache Software Foundation</a>.
+ All Rights Reserved.
+
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ </body>
+</html>
Modified: webservices/website/wss4j/package.html
URL: http://svn.apache.org/viewvc/webservices/website/wss4j/package.html?rev=1556777&r1=1556776&r2=1556777&view=diff
==============================================================================
--- webservices/website/wss4j/package.html (original)
+++ webservices/website/wss4j/package.html Thu Jan 9 10:29:54 2014
@@ -1,104 +1,110 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<!-- Generated by Apache Maven Doxia Site Renderer 1.3 at Nov 13, 2013 -->
-<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
- <title>Apache WSS4J - </title>
- <style type="text/css" media="all">
- @import url("./css/maven-base.css");
- @import url("./css/maven-theme.css");
- @import url("./css/site.css");
- </style>
- <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
- <meta name="Date-Revision-yyyymmdd" content="20131113" />
- <meta http-equiv="Content-Language" content="en" />
-
- </head>
- <body class="composite">
- <div id="banner">
- <a href="./" id="bannerLeft">
- Apache WSS4J
- </a>
- <a href="http://www.apache.org" id="bannerRight">
- <img src="http://activemq.apache.org/images/asf-logo.png" alt="$alt" />
- </a>
- <div class="clear">
- <hr/>
- </div>
- </div>
- <div id="breadcrumbs">
-
-
- <div class="xleft">
- <span id="publishDate">Last Published: 2013-11-13</span>
- | <span id="projectVersion">Version: 1.6.13</span>
- </div>
- <div class="xright">
-
- </div>
- <div class="clear">
- <hr/>
- </div>
- </div>
- <div id="leftColumn">
- <div id="navcolumn">
-
-
- <h5>Apache WSS4J</h5>
- <ul>
- <li class="none">
- <a href="index.html" title="Home">Home</a>
- </li>
- <li class="none">
- <a href="download.html" title="Download">Download</a>
- </li>
- <li class="none">
- <a href="using.html" title="Using WSS4J">Using WSS4J</a>
- </li>
- <li class="none">
- <a href="config.html" title="WSS4J Configuration">WSS4J Configuration</a>
- </li>
- <li class="none">
- <a href="topics.html" title="Special Topics">Special Topics</a>
- </li>
- <li class="none">
- <a href="best_practice.html" title="Security Best Practices">Security Best Practices</a>
- </li>
- <li class="none">
- <a href="wss4j16.html" title="WSS4J 1.6 Release Notes">WSS4J 1.6 Release Notes</a>
- </li>
- </ul>
- <h5>Project Documentation</h5>
- <ul>
- <li class="collapsed">
- <a href="project-info.html" title="Project Information">Project Information</a>
- </li>
- <li class="collapsed">
- <a href="project-reports.html" title="Project Reports">Project Reports</a>
- </li>
- </ul>
- <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
- <img class="poweredBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
- </a>
-
-
- </div>
- </div>
- <div id="bodyColumn">
- <div id="contentBox">
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<!-- Generated by Apache Maven Doxia Site Renderer 1.4 at 2014-01-03 -->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ <head>
+ <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+ <title>Apache WSS4J - </title>
+ <style type="text/css" media="all">
+ @import url("./css/maven-base.css");
+ @import url("./css/maven-theme.css");
+ @import url("./css/site.css");
+ </style>
+ <link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
+ <meta name="Date-Revision-yyyymmdd" content="20140103" />
+ <meta http-equiv="Content-Language" content="en" />
+ </head>
+ <body class="composite">
+ <div id="banner">
+ <a href="./" id="bannerLeft">
+ Apache WSS4J
+ </a>
+ <a href="http://www.apache.org" id="bannerRight">
+ <img src="http://activemq.apache.org/images/asf-logo.png" alt="$alt" />
+ </a>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ <div id="breadcrumbs">
+
+
+ <div class="xleft">
+ <span id="publishDate">Last Published: 2014-01-03</span>
+ | <span id="projectVersion">Version: 1.6.14</span>
+ </div>
+ <div class="xright">
+
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ <div id="leftColumn">
+ <div id="navcolumn">
+
+
+ <h5>Apache WSS4J</h5>
+ <ul>
+ <li class="none">
+ <a href="index.html" title="Home">Home</a>
+ </li>
+ <li class="none">
+ <a href="download.html" title="Download">Download</a>
+ </li>
+ <li class="none">
+ <a href="using.html" title="Using WSS4J">Using WSS4J</a>
+ </li>
+ <li class="none">
+ <a href="config.html" title="WSS4J Configuration">WSS4J Configuration</a>
+ </li>
+ <li class="none">
+ <a href="topics.html" title="Special Topics">Special Topics</a>
+ </li>
+ <li class="none">
+ <a href="best_practice.html" title="Security Best Practices">Security Best Practices</a>
+ </li>
+ <li class="none">
+ <a href="wss4j16.html" title="WSS4J 1.6 Release Notes">WSS4J 1.6 Release Notes</a>
+ </li>
+ </ul>
+ <h5>Project Documentation</h5>
+ <ul>
+ <li class="collapsed">
+ <a href="project-info.html" title="Project Information">Project Information</a>
+ </li>
+ <li class="collapsed">
+ <a href="project-reports.html" title="Project Reports">Project Reports</a>
+ </li>
+ </ul>
+ <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
+ <img class="poweredBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
+ </a>
+
+
+ </div>
+ </div>
+ <div id="bodyColumn">
+ <div id="contentBox">
+
+
+<div class="section">
+<h2>Axis1 Deployment Tutorial<a name="Axis1_Deployment_Tutorial"></a></h2>
-<div class="section"><h2>Axis1 Deployment Tutorial<a name="Axis1_Deployment_Tutorial"></a></h2>
<p>
WSS4J 1.5.x Axis handlers process SOAP requests according to the OASIS Web Service
Security (WSS) specifications.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
The WSS4J Axis handlers <tt>WSDoAllSender</tt> and <tt>WSDoAllReceiver
</tt> control the creation and consumption of secure SOAP requests.
The handlers work behind the scenes and are usually transparent to Web Service
(WS) applications. The Axis deployment descriptor files (*.wsdd) may contain all
necessary information to control the security processing.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
A WS application may also set properties to control the handlers
and provide default values. If the deployment descriptor sets the same
property (parameter) then the deployment descriptor overwrites the application
@@ -106,41 +112,60 @@ defined property. Thus, deployment sett
to fulfill site specific requirements.
</p></div>
-<div class="section"><h2>Prerequisites<a name="Prerequisites"></a></h2><p>
+
+<div class="section">
+<h2>Prerequisites<a name="Prerequisites"></a></h2>
+<p>
The WS Security Axis handlers use the WSS4J classes (Web Service Security
for Java) to process the SOAP messages. WSS4J in turn uses the Apache XML Security
project to handle XML Security according to XML Signature and XML Encryption.
-</p><ul>
- <li><a class="externalLink" href="http://ws.apache.org/wss4j/index.html">WSS4J</a></li>
- <li><a class="externalLink" href="http://xml.apache.org/security/index.html">XML Security</a></li>
+</p>
+<ul>
+
+<li><a class="externalLink" href="http://ws.apache.org/wss4j/index.html">WSS4J</a></li>
+
+<li><a class="externalLink" href="http://xml.apache.org/security/index.html">XML Security</a></li>
</ul>
The WSS4J Axis handlers require Axis V1.2 because of some problems in previous
Axis versions. WSS4J CVS contains the latest Axis libraries.
-</div><div class="section"><h2>Related Documentation<a name="Related_Documentation"></a></h2><p>
+</div>
+<div class="section">
+<h2>Related Documentation<a name="Related_Documentation"></a></h2>
+<p>
The OASIS WSS specifications define a number of features and it is possible
to combine them in several ways. The WSS4J Axis handlers already support
a large number of WSS features and their combinations.
<a class="externalLink" href="http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss">
Here</a> are the WSS specifications.
-</p></div><div class="section"><h2>The basics - a simple example that uses<a name="The_basics_-_a_simple_example_that_uses"></a></h2><p>
+</p></div>
+<div class="section">
+<h2>The basics - a simple example that uses<a name="The_basics_-_a_simple_example_that_uses"></a></h2>
+<p>
This chapter gives an overview and some examples how to deploy
the WSS4J Axis handlers and how the parameters and their values control the
handlers. For a better understanding of this chapter the reader shall
have a knowledge of the OASIS WSS specifications.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
The {@link org.apache.ws.security.handler.WSHandlerConstants},
{@link org.apache.ws.axis.security.WSDoAllSender}, and
{@link org.apache.ws.axis.security.WSDoAllReceiver}
provide additional and detailed documentation.
-</p><div class="section"><h3>Axis deployment descriptor to insert a<a name="Axis_deployment_descriptor_to_insert_a"></a></h3><p>
+</p>
+<div class="section">
+<h3>Axis deployment descriptor to insert a<a name="Axis_deployment_descriptor_to_insert_a"></a></h3>
+<p>
The following snippet shows a general layout how to deploy a WS Axis handler
on the client (application) side.
-</p><div class="source"><pre>
+</p>
+<div class="source">
+<pre>
<!-- define the service, use the WSDoAllSender security handler in request flow -->
<service name="Ping1">
<requestFlow>
@@ -159,27 +184,36 @@ This is the standard way to deploy an Ax
descriptor and provides the parameters and their value to the handler. Each
service can have its own request and response flow definition, which provides
a very flexible set-up of the security parameters.
-<p></p><p>
+
+<p></p>
+<p>
The above setup inserts the most simple security structure into a SOAP request:
the simple <tt>UsernameToken</tt>. This token includes a username and the
according password. Both fields are sent in cleartext, thus it provides no
real security.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
The parameters and their meanings are:
-</p><ul>
+</p>
+<ul>
+
<li><tt>action</tt> defines the security action. The value <tt>
UsernameToken</tt> directs the handler to insert this token into
the SOAP request.
</li>
+
<li><tt>user</tt> specifies the username to include in the token.
</li>
+
<li><tt>passwordType</tt> is a pecific parameter for the <tt>
UsernameToken</tt> action and defines the encoding of the passowrd.
<tt>PasswordText</tt> specifies to send the password in
plain text, <tt>PasswordDigest</tt> specifies to send the
password in digest mode (refer to WSS UsernameToken Profile)
</li>
+
<li><tt>passwordCallbackClass</tt> contains the name of a class that
implements a method to get the user's password. Please refer to the
detailed documentation in
@@ -188,7 +222,9 @@ The parameters and their meanings are:
</ul>
The WSS4J Axis security handler interprets the parameter values and controls
the WSS4J modules to generate the following SOAP request:
-<div class="source"><pre>
+
+<div class="source">
+<pre>
<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
@@ -213,7 +249,10 @@ the WSS4J modules to generate the follow
</pre></div>
This is a pretty print of the real SOAP message.
-</div><div class="section"><h3>The password callback class<a name="The_password_callback_class"></a></h3><p>
+</div>
+<div class="section">
+<h3>The password callback class<a name="The_password_callback_class"></a></h3>
+<p>
The deployment descriptor contains the user name that the handler inserts into
the <tt>UsernameToken</tt> but not the password. In general it is not a
@@ -228,9 +267,13 @@ instantiates it, and calls the <tt>handl
needs a password. Refer also to the
{@link org.apache.ws.security.handler.WSHandlerConstants#PW_CALLBACK_CLASS
parameter} documentation.
- </p><p></p><p>
+ </p>
+<p></p>
+<p>
The following code snippet shows a simple password callback class:
- </p><div class="source"><pre>
+ </p>
+<div class="source">
+<pre>
package org.apache.ws.axis.oasis;
import java.io.IOException;
@@ -279,7 +322,9 @@ public class PWCallback implements Callb
</pre></div>
The Java {@link javax.security.auth.callback.CallbackHandler callback} handler
documentation provides a detailed description of the interface and exceptions.
-<p></p><p>
+
+<p></p>
+<p>
The WSS4J library uses a specific class to get the required password or key
informations. The <tt>WSSPasswordCallback</tt> class implements the
{@link javax.security.auth.callback.Callback} interface according to the
@@ -288,20 +333,29 @@ as a Java <tt>String </tt> or it carries
as a Java <tt>byte[]</tt> array. Refer to
{@link org.apache.ws.security.WSPasswordCallback} that contains a
detailed description of the usage codes.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
The WSS4J Axis handler or the WSS4J modules set the usage code before
they call <tt>handle</tt> method.
-</p></div><div class="section"><h3>Application sets parameters to insert in<a name="Application_sets_parameters_to_insert_in"></a></h3><p>
+</p></div>
+<div class="section">
+<h3>Application sets parameters to insert in<a name="Application_sets_parameters_to_insert_in"></a></h3>
+<p>
Sometimes it is not feasable or not possible to determine parameters
and their values during deployment. In this case the application can
set paramters during runtime. The WSS4J Axis handlers use the Axis
<tt>setProperty</tt> method to support this feature.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
The following code snippet shows an example how to use the dynamic setting
of parameters and their values:
-</p><div class="source"><pre>
+</p>
+<div class="source">
+<pre>
...
Service service = new Service();
Call call = (Call) service.createCall();
@@ -313,7 +367,9 @@ of parameters and their values:
Use this way if your application dynamically creates a <tt>call</tt>
object. If your application uses stubs generated by Axis' <tt>WSDL2Java
</tt> tool, the application uses the following functions:
-<div class="source"><pre>
+
+<div class="source">
+<pre>
...
PingServiceLocator service = new PingServiceLocator();
...
@@ -324,15 +380,22 @@ object. If your application uses stubs g
</pre></div>
Please note that <tt>_setProperty</tt> is a Axis specific call.
-</div><div class="section"><h3>The password callback object reference<a name="The_password_callback_object_reference"></a></h3><p>
+</div>
+<div class="section">
+<h3>The password callback object reference<a name="The_password_callback_object_reference"></a></h3>
+<p>
In addition to the <a href="#pwCallBackClass">password callback class</a>
an application may set a password callback object using the <tt>
setProperty()</tt> methods. Only applications (and Axis handlers that
preceed the WSS4J Axis handlers in a handler chain) can use this feature.
- </p><p></p><p>
+ </p>
+<p></p>
+<p>
For example:
- </p><div class="source"><pre>
+ </p>
+<div class="source">
+<pre>
public class Scenario1 implements CallbackHandler {
public static void main(String args[]) {
@@ -352,12 +415,17 @@ public class Scenario1 implements Callba
}
</pre></div>
-</div><div class="section"><h3>Deployment of the WSS4J Axis handler<a name="Deployment_of_the_WSS4J_Axis__handler"></a></h3><p>
+</div>
+<div class="section">
+<h3>Deployment of the WSS4J Axis handler<a name="Deployment_of_the_WSS4J_Axis__handler"></a></h3>
+<p>
Similar to the deployment descriptor of the sending handler <tt>WSDoAllSender
</tt> a deployment descriptor for the receiving handler exists. For the above
example the deployment descriptor look like:
-</p><div class="source"><pre>
+</p>
+<div class="source">
+<pre>
<requestFlow>
<handler type="java:org.apache.ws.axis.security.WSDoAllReceiver">
<parameter name="passwordCallbackClass"
@@ -369,28 +437,41 @@ example the deployment descriptor look l
The receiving WSS4J Axis handler checks if the SOAP request matches the defined
actions.
-</div></div><div class="section"><h2>Combining security actions<a name="Combining_security_actions"></a></h2><p>
+</div></div>
+<div class="section">
+<h2>Combining security actions<a name="Combining_security_actions"></a></h2>
+<p>
Often it is necessary to combine or concatenate several security actions, for
example to encrypt parts of a message and sign some other parts. The WSS4J
Axis handlers provide easy and simple methods to combine or concatenate
security actions.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
This chapter describes simple combinations of actions.
-</p><div class="section"><h3>Combine and<a name="Combine__and"></a></h3><p>
+</p>
+<div class="section">
+<h3>Combine and<a name="Combine__and"></a></h3>
+<p>
The WS Interoperability specifications define this use case:
-</p><ul>
- <li>Insert a <tt>UsernameToken</tt>, use <tt>PasswordText</tt>
+</p>
+<ul>
+
+<li>Insert a <tt>UsernameToken</tt>, use <tt>PasswordText</tt>
to set the password. In addition add a timestamp and a nonce into
the <tt>UsernameToken</tt></li>
- <li>Encrypt the <tt>UsernameToken</tt> to protect the information.
+
+<li>Encrypt the <tt>UsernameToken</tt> to protect the information.
</li>
</ul>
The Axis deplyment descriptor for this use case:
-<div class="source"><pre>
+
+<div class="source">
+<pre>
<requestFlow>
<handler type="java:org.apache.ws.axis.security.WSDoAllSender" >
<parameter name="action" value="UsernameToken Encrypt"/>
@@ -411,25 +492,31 @@ The Axis deplyment descriptor for this u
This descriptor contains some new parameters to control the <tt>UsernameToken
</tt> element and its encryption. The new parameters and their meaning are:
+
<ul>
- <li><tt>addUTElement</tt> - controls if the handler shall insert elements
+
+<li><tt>addUTElement</tt> - controls if the handler shall insert elements
into the <tt>UsernameToken</tt>. The value is a blank separated list of
element names to include. Only <tt>Nonce</tt> and <tt>Created</tt> are
supported.</li>
- <li><tt>encryptionPropFile</tt> - the name of a crypto property file. This
+
+<li><tt>encryptionPropFile</tt> - the name of a crypto property file. This
file contains parameters and property that control the encryption. Please refer
to the
{@link org.apache.ws.security.handler.WSHandlerConstants#ENC_PROP_FILE
detailed} description of the cyrpto property file.</li>
- <li><tt>encryptionKeyIdentifier</tt> - specifies the format in which the
+
+<li><tt>encryptionKeyIdentifier</tt> - specifies the format in which the
handler inserts the encryption key into the SOAP request. Please refer
to the
{@link org.apache.ws.security.handler.WSHandlerConstants#ENC_KEY_ID
detailed} description.</li>
- <li><tt>encryptionUser</tt> - the name or identifier of the user who owns
+
+<li><tt>encryptionUser</tt> - the name or identifier of the user who owns
the public key to encrypt the data. Usually this is the name or alias name
of the owner's certificate in a keystore.</li>
- <li><tt>encryptionParts</tt> - controls which part or parts the handler
+
+<li><tt>encryptionParts</tt> - controls which part or parts the handler
of the SOAP shall encrypt. If this parameter is not defined, WSS4J encrypts
the whole SOAP Body in <tt>Content</tt> mode. The value of the
parameter in this example specifies to encrypt the element <tt>
@@ -442,7 +529,9 @@ This descriptor contains some new parame
</li>
</ul>
The matching receiver deployment descriptor:
-<div class="source"><pre>
+
+<div class="source">
+<pre>
<requestFlow>
<handler type="java:org.apache.ws.axis.security.WSDoAllReceiver">
<parameter name="passwordCallbackClass"
@@ -458,15 +547,22 @@ parameter defines the crypto property fi
sender side. The WSS4J Axis receiver checks if the SOAP request contains
the required security data.
-</div><div class="section"><h3>Combine Signature and Encryption<a name="Combine_Signature_and_Encryption"></a></h3><p>
+</div>
+<div class="section">
+<h3>Combine Signature and Encryption<a name="Combine_Signature_and_Encryption"></a></h3>
+<p>
This is a very common usage of Web Service security. The WSS4J Axis handler
provides flexible parameter settings that support several ways to use
the Signature/Encryption combination.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
A WSS4J Axis deployment descriptor for a simple Singature/Encryption of
SOAP requests:
-</p><div class="source"><pre>
+</p>
+<div class="source">
+<pre>
<requestFlow>
<handler type="java:org.apache.ws.axis.security.WSDoAllSender" >
<parameter name="user" value="16c73ab6-b892-458f-abf5-2f875f74882e"/>
@@ -487,24 +583,34 @@ to get the user's private key (the keyst
property file) that WSS4J uses to generate the signature. The encryption
method uses the user's public key to encrypt the dynamically generated
session key.
-<p></p><p>
+
+<p></p>
+<p>
The <tt>action</tt> parameter defines <tt>Signature Encryption</tt>.
Thus the handler first signs, then the encrypts the data.
Because the deployment descriptor does not contain specific encryption or
signature part parameters, WSS4J defaults to the data of the SOAP Body element.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
Also all other parameters use their default setting, such as the format of the
key identifiers, encryption modifiers, and so on. Please refer to the
{@link org.apache.ws.security.handler.WSHandlerConstants detailed}
documentation of the parameters.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
If the WSS4J Axis handler shall perform encryption only, then the
deployment descriptor must contain the encryption specific parameters. Only
if sign <b>and</b> encryption is required the encryption method falls back to
the signature parameters if the encryption specific parameters are not set.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
The matching receiver deployment descriptor is also very simple:
-</p><div class="source"><pre>
+</p>
+<div class="source">
+<pre>
<requestFlow>
<handler type="java:org.apache.ws.axis.security.WSDoAllReceiver">
<parameter name="passwordCallbackClass"
@@ -517,7 +623,10 @@ The matching receiver deployment descrip
To reverse the actions, just reverse the action specifiers. The WSS4J
handler encrypts the SOAP Body first, then signs the encrypted data.
-</div></div><div class="section"><h2>Signing and encrypting multiple XML elements<a name="Signing_and_encrypting_multiple_XML_elements"></a></h2><p>
+</div></div>
+<div class="section">
+<h2>Signing and encrypting multiple XML elements<a name="Signing_and_encrypting_multiple_XML_elements"></a></h2>
+<p>
Sometimes it is necessary to sign and/or encrypt several parts of a SOAP
message. The deployment parameters <tt>signatureParts</tt> and
@@ -525,23 +634,33 @@ message. The deployment parameters <tt>s
to encrypt. Please refer to the
{@link org.apache.ws.security.handler.WSHandlerConstants#ENCRYPTION_PARTS
detailed} description of these parameters.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
WSS4J signs or encrypts all declared parts using the same keys, that is
the signature or encryption data structures directly reference the
specified parts as described in the WSS specifications. The receiver
automatically detects these references and verfies and decrypts the
data parts. No special settings in the depolyment descriptor is necessary.
-</p></div><div class="section"><h2>Chaining of WSS4J Axis handlers<a name="Chaining_of_WSS4J_Axis_handlers"></a></h2><p>
+</p></div>
+<div class="section">
+<h2>Chaining of WSS4J Axis handlers<a name="Chaining_of_WSS4J_Axis_handlers"></a></h2>
+<p>
This is a very powerful feature that supports even more flexible signature and
encryption processing such as signatures with multiple keys (overlapping
signatures), multiple encryption algorithms, or different SOAP actor (role)
defintions of the security headers.
-</p><div class="section"><h3>Deployment at the client<a name="Deployment_at_the_client"></a></h3><p>
+</p>
+<div class="section">
+<h3>Deployment at the client<a name="Deployment_at_the_client"></a></h3>
+<p>
A deployment descriptor to chain handlers:
-</p><div class="source"><pre>
+</p>
+<div class="source">
+<pre>
<requestFlow>
<handler type="java:org.apache.ws.axis.security.WSDoAllSender" >
<parameter name="action" value="Signature NoSerialization"/>
@@ -567,13 +686,17 @@ surpresses the very last step of the han
serialization of the processed SOAP request in a XML string (document) that
Axis sends to the reveiver. Only the last handler must perform this
serialization.
-<p></p><p>
+
+<p></p>
+<p>
Every handler specification can have its own set of parameters that define
the individual values for this handler instance. Thus the deployment
descriptor can define different crypto property files, different usernames,
and so on. In the example the first handler signs the <tt>ticket</tt>
element and the second handler the SOAP Body (default).
-</p><p></p><p>
+</p>
+<p></p>
+<p>
Parameters set by the application with <tt>setProperty</tt> are valid for
<b>all</b> handler instances in the handler
chain (<tt>setProperty</tt> is defined on the SOAP request (call) level).
@@ -587,21 +710,30 @@ property, the handler sets the property'
Handlers that follow in the chain cannot use this username anymore and
must have a user (or encryption user) parameter in their deployment part.
-</p></div><div class="section"><h3>Deployment at the server<a name="Deployment_at_the_server"></a></h3><p>
+</p></div>
+<div class="section">
+<h3>Deployment at the server<a name="Deployment_at_the_server"></a></h3>
+<p>
Note: Handler chaining at the receiver side is not yet fully tested.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
Handlers at the receiver can only determine different security headers if their
SOAP actors are different. The WSS4J handler processes each security structure
inside one security header. Because the security structures contain most
information to verify or decrypt the SOAP request this constraint is
not too much of an issue.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
Only the password call back class and the <tt>Crypto</tt> implementation
(as defined in the crypto property file) must be able to handle all possible
certificates, users, passwords, and keys that a security header may contain.
The following deployment descriptor of a receiver shows this.
-</p><div class="source"><pre>
+</p>
+<div class="source">
+<pre>
<requestFlow>
<handler type="java:org.apache.ws.axis.security.WSDoAllReceiver">
<parameter name="passwordCallbackClass"
@@ -621,17 +753,24 @@ instructs the WSS4J handler to accept an
contained in one security header. Because the signatures use different
certificates the <tt>Crypto</tt> implementation must be able to handle
these certificates.
-<p></p><p>
+
+<p></p>
+<p>
Similar requirements are true for the password callback implementation if the
sender uses handler chaining and uses different encryption parameters in the
same security header.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
If it is necessary to have different parameters for the distinct signature or
decryption data then these should be put in different security headers. The
easiest way to do this is to define different <tt>actor</tt> parameters
for each handler in a WSS4J handler chain.
-</p></div></div><div class="section"><h2>Reporting Security results to services/applications<a name="Reporting_Security_results_to_servicesapplications"></a></h2><p>
+</p></div></div>
+<div class="section">
+<h2>Reporting Security results to services/applications<a name="Reporting_Security_results_to_servicesapplications"></a></h2>
+<p>
The WSS4J <tt>WSSecurityEngine</tt> processes the security elements inside
a security header. If something goes wrong, for example a signature
verfication fails, then the engine throws a fault. If the security engine
@@ -641,7 +780,9 @@ structure holds information about the pe
identifier in case the security engine performed signature or username token
processing. Please refer to the
{@link org.apache.ws.security.WSSecurityEngineResult result} structure.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
The <tt>WSDoAllReceiver</tt> WSS4J handler takes this structure and
checks if all required actions were performed. If this check fails, the
WSS4J handler aborts the SOAP request and throws an Axis SOAP fault.
@@ -654,10 +795,14 @@ this vector in a specific
of the current message context. If WSS4J handlers are
chained, then every handler in the chain adds its result to the vector. The
vector contains the results in handler-chain order.
-</p><p></p><p>
+</p>
+<p></p>
+<p>
This code snippet shows how a Axis service can access the security result
data:
-</p><div class="source"><pre>
+</p>
+<div class="source">
+<pre>
public void ping(javax.xml.rpc.holders.StringHolder text,
org.apache.ws.axis.oasis.ping.TicketType ticket)
throws java.rmi.RemoteException {
@@ -697,7 +842,12 @@ or a {@link java.security.Principal X509
princpals contain the names plus other information of the verified username
token or signature certificate.
-</div><div class="section"><h2>Some hints<a name="Some_hints"></a></h2><div class="section"><h3>Client<a name="Client"></a></h3><p>
+</div>
+<div class="section">
+<h2>Some hints<a name="Some_hints"></a></h2>
+<div class="section">
+<h3>Client<a name="Client"></a></h3>
+<p>
At the client side, the WSS4J Axis handler, as all other parts of Axis, run
in the context of the calling application. Depending on the application,
the callback classes may perform complex operations, even do some user
@@ -705,7 +855,10 @@ interaction, to get the password or to a
certificates or keys. There are no timeouts defined at the client side
before the SOAP request is put on the wire.
-</p></div><div class="section"><h3>Server<a name="Server"></a></h3><p>
+</p></div>
+<div class="section">
+<h3>Server<a name="Server"></a></h3>
+<p>
On the server side the WSS4J handler run in the same context as the other part
of the server, usually some servlet container, such as Tomcat. Also the server
must be able to handle many requests in a short time. Thus the password
@@ -714,7 +867,10 @@ as fast as possible. In general, no user
server side to gather passwords. Also at this point of the SOAP request
processing there are active timeouts, even if they are fairly long.
-</p></div><div class="section"><h3>Bi-directional SOAP Security<a name="Bi-directional_SOAP_Security"></a></h3><p>
+</p></div>
+<div class="section">
+<h3>Bi-directional SOAP Security<a name="Bi-directional_SOAP_Security"></a></h3>
+<p>
WSS4J fully supports bi-directional SOAP security. To enable bi-directional
support just put <tt>WSDoAllSender</tt> on the
<tt>responseFlow</tt> at the server and <tt>WSDoAllReceiver</tt>
@@ -725,7 +881,10 @@ runs in the application (client) context
constraints on the client side after Axis received the response
and handed it over to the WSS4J handler.
-</p></div><div class="section"><h3>Handler chaining<a name="Handler_chaining"></a></h3><p>
+</p></div>
+<div class="section">
+<h3>Handler chaining<a name="Handler_chaining"></a></h3>
+<p>
Usually WSS4J handlers are chained without any other handler between them in
the chain. It is, however, possible to do so. In this case the intermediate
handler <b>must not</b> modify the SOAP Envelope that is contained in the
@@ -738,22 +897,22 @@ such as setting a new username, password
@since WSS4J 1.0</p></div>
</div>
-
- </div>
- </div>
- <div class="clear">
- <hr/>
- </div>
- <div id="footer">
- <div class="xright">
- Copyright © 2004-2013
- <a href="http://www.apache.org/">The Apache Software Foundation</a>.
- All Rights Reserved.
-
- </div>
- <div class="clear">
- <hr/>
- </div>
- </div>
- </body>
-</html>
+
+ </div>
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ <div id="footer">
+ <div class="xright">
+ Copyright © 2004-2014
+ <a href="http://www.apache.org/">The Apache Software Foundation</a>.
+ All Rights Reserved.
+
+ </div>
+ <div class="clear">
+ <hr/>
+ </div>
+ </div>
+ </body>
+</html>