You are viewing a plain text version of this content. The canonical link for it is here.

Posted to rampart-dev@ws.apache.org by ma...@gmail.com on 2009/03/02 23:48:35 UTC

Rampart WS-Policy IncludeToken

I have a question on Policy file that is in Sample2. Can anyone please let  
me know the difference between

<sp:X509Token  
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">

<sp:X509Token  
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
and why it is different for InitiatorToken and RecipientToken ?

Any information is greatly appreciated.

Thanks in advance,
PM


<sp:InitiatorToken>
<wsp:Policy>
<sp:X509Token  
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
<wsp:Policy>
<sp:RequireThumbprintReference/>
<sp:WssX509V3Token10/>
</wsp:Policy>
</sp:X509Token>
</wsp:Policy>
</sp:InitiatorToken>
<sp:RecipientToken>
<wsp:Policy>
<sp:X509Token  
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:RequireThumbprintReference/>
<sp:WssX509V3Token10/>
</wsp:Policy>
</sp:X509Token>
</wsp:Policy>
</sp:RecipientToken>

Re: Rampart WS-Policy IncludeToken

Posted by ma...@gmail.com.

Can anyone shed some light on the run time behavior of the following two  
assertions

<sp:X509Token  
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<sp:X509Token  
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">

this is from sample2 of the rampart distro
Following is the whole policy tag

<wsp:Policy>
<sp:InitiatorToken>
<wsp:Policy>
<sp:X509Token  
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
<wsp:Policy>
<sp:RequireThumbprintReference/>
<sp:WssX509V3Token10/>
</wsp:Policy>
</sp:X509Token>
</wsp:Policy>
</sp:InitiatorToken>
<sp:RecipientToken>
<wsp:Policy>
<sp:X509Token  
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:RequireThumbprintReference/>
<sp:WssX509V3Token10/>
</wsp:Policy>
</sp:X509Token>
</wsp:Policy>
</sp:RecipientToken>
<sp:AlgorithmSuite>
<wsp:Policy>
<sp:TripleDesRsa15/>
</wsp:Policy>
</sp:AlgorithmSuite>
<sp:Layout>
<wsp:Policy>
<sp:Strict/>
</wsp:Policy>
</sp:Layout>
<sp:IncludeTimestamp/>
<sp:OnlySignEntireHeadersAndBody/>
</wsp:Policy>

Thanks,
PM
On Mar 2, 2009 5:48pm, madirap@gmail.com wrote:
> I have a question on Policy file that is in Sample2. Can anyone please  
> let me know the difference between

> http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">

> http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
> and why it is different for InitiatorToken and RecipientToken ?

> Any information is greatly appreciated.

> Thanks in advance,
> PM




> http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">

> RequireThumbprintReference/>







> http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">

> RequireThumbprintReference/>