You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by ch...@apache.org on 2006/01/10 16:45:49 UTC
svn commit: r367656 - in /webservices/site/trunk/targets/axis2/modules: ./
addressing/ addressing/0_94/ addressing/0_94/0.94/ wss4j/ wss4j/0_94/
wss4j/0_94/0.94/ wss4j/0_94/0.94/sec-conf/
Author: chinthaka
Date: Tue Jan 10 07:45:32 2006
New Revision: 367656
URL: http://svn.apache.org/viewcvs?rev=367656&view=rev
Log:
Adding modules folder
Added:
webservices/site/trunk/targets/axis2/modules/
webservices/site/trunk/targets/axis2/modules/addressing/
webservices/site/trunk/targets/axis2/modules/addressing/0_94/
webservices/site/trunk/targets/axis2/modules/addressing/0_94/0.94/
webservices/site/trunk/targets/axis2/modules/addressing/index.html
webservices/site/trunk/targets/axis2/modules/download.cgi
webservices/site/trunk/targets/axis2/modules/index.html
webservices/site/trunk/targets/axis2/modules/wss4j/
webservices/site/trunk/targets/axis2/modules/wss4j/0_94/
webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/
webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/
webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/in-sample.png (with props)
webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/in.action.xsd
webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-action.xsd
webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-sample.png (with props)
webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-sample2.png (with props)
webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/security-module.html
webservices/site/trunk/targets/axis2/modules/wss4j/index.html
Added: webservices/site/trunk/targets/axis2/modules/addressing/index.html
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/addressing/index.html?rev=367656&view=auto
==============================================================================
--- webservices/site/trunk/targets/axis2/modules/addressing/index.html (added)
+++ webservices/site/trunk/targets/axis2/modules/addressing/index.html Tue Jan 10 07:45:32 2006
@@ -0,0 +1,6 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis 2.0 - :: Axis2 - WS-Addressing Implementation ::</title><style type="text/css" media="all">
+ @import url("../../style/maven-base.css");
+
+ @import url("../../style/maven-theme.css");</style><link rel="stylesheet" href="../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis 2.0" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
+ Last published: 10 January 2006
+ | Doc for 0.94</div><div class="xright"></div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis_2_0"><h5>Axis 2.0</h5><ul><li class="none"><a href="../../index.html">Home</a></li><li class="expanded"><a href="../../">Download Axis2</a><ul><li class="none"><a href="../../download.cgi">Releases</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li></ul></li><li class="expanded"><a href="../../">Documentation</a><ul><li class="none"><a href="../../0_93/index.html">Version 0.93</a></li><li class="none"><a href="../../0_94/index.html">Version 0.94</a></li></ul></li><li class="expanded"><a href="../../overview.html">Get Involved</a><ul><li class="none"><a href="../../svn.html">Checkout the Source</a></li><li class="none"><a href="../../siteHowTo.html">Build the Site</a></li><li class="none"><a href
="../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../refLib.html">Reference Library</a></li><li class="none"><a href="../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../faq.html">FAQ</a></li></ul></li><li class="none"><a href="../../modules/index.html">Modules</a></li><li class="none"><a href="../../thanks.html">Acknowledgements</a></li><li class="expanded"><a href="../../">Project Information</a><ul><li class="none"><a href="../../team-list.html">Project Team</a></li><li class="none"><a href="../../issue-tracking.html">Issue Tracking</a></li></ul></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Axis2_-_WS-Addressing_Implementation"></a><h2>Axis2 - WS-Addressing Implementation</h2><p>This is an implementation of W
S-Addressing submission version (2004-08) and WS-Addressing 2005-08 versions. Complete WS-Addressing Final version will be available, once the specification itself gets finalized.</p><p>Axis2 engine contains addressing support by default. So you may need not put this module, unless you specifically want to use a particular release of this module. </p><p> </p></div></div></div><div class="clear"><hr></hr></div><div id="footer"><div class="xright">© 2004-2006, Apache Software Foundation</div><div class="clear"><hr></hr></div></div></body></html>
\ No newline at end of file
Added: webservices/site/trunk/targets/axis2/modules/download.cgi
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/download.cgi?rev=367656&view=auto
==============================================================================
--- webservices/site/trunk/targets/axis2/modules/download.cgi (added)
+++ webservices/site/trunk/targets/axis2/modules/download.cgi Tue Jan 10 07:45:32 2006
@@ -0,0 +1,6 @@
+#!/bin/sh
+# Wrapper script around mirrors.cgi script
+# (we must change to that directory in order for python to pick up the
+# python includes correctly)
+cd /www/www.apache.org/dyn/mirrors
+/www/www.apache.org/dyn/mirrors/mirrors.cgi $*
\ No newline at end of file
Added: webservices/site/trunk/targets/axis2/modules/index.html
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/index.html?rev=367656&view=auto
==============================================================================
--- webservices/site/trunk/targets/axis2/modules/index.html (added)
+++ webservices/site/trunk/targets/axis2/modules/index.html Tue Jan 10 07:45:32 2006
@@ -0,0 +1,7 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis 2.0 - :: Axis2 Modules ::</title><style type="text/css" media="all">
+ @import url("../style/maven-base.css");
+
+ @import url("../style/maven-theme.css");</style><link rel="stylesheet" href="../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis 2.0" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
+ Last published: 10 January 2006
+ | Doc for 0.94</div><div class="xright"></div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis_2_0"><h5>Axis 2.0</h5><ul><li class="none"><a href="../index.html">Home</a></li><li class="expanded"><a href="../">Download Axis2</a><ul><li class="none"><a href="../download.cgi">Releases</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li></ul></li><li class="expanded"><a href="../">Documentation</a><ul><li class="none"><a href="../0_93/index.html">Version 0.93</a></li><li class="none"><a href="../0_94/index.html">Version 0.94</a></li></ul></li><li class="expanded"><a href="../overview.html">Get Involved</a><ul><li class="none"><a href="../svn.html">Checkout the Source</a></li><li class="none"><a href="../siteHowTo.html">Build the Site</a></li><li class="none"><a href="../guidelines.html">Devel
oper Guidelines</a></li><li class="none"><a href="../refLib.html">Reference Library</a></li><li class="none"><a href="../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../faq.html">FAQ</a></li></ul></li><li class="none"><a href="../modules/index.html">Modules</a></li><li class="none"><a href="../thanks.html">Acknowledgements</a></li><li class="expanded"><a href="../">Project Information</a><ul><li class="none"><a href="../team-list.html">Project Team</a></li><li class="none"><a href="../issue-tracking.html">Issue Tracking</a></li></ul></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Axis2_Modules"></a><h2>Axis2 Modules</h2><p>Axis2 architecture is flexible enough to extend its functionalities using modules. This page is maintained to keep track of the relev
ant modules that are developed on top of Axis2.</p><table class="bodyTable"><caption align="top">
+ </caption><tr class="a"><th scope="col">Name</th><th scope="col">Description</th><th scope="col">Version</th><th scope="col">Compatible Axis2 version </th><th scope="col">Downloads</th><th scope="col">Comments</th></tr><tr class="b"><td><a href="addressing/index.html">Addressing</a></td><td>This is an implementation of WS-Addressing submission version (2004-08) and WS-Addressing 2005-08 versions. Complete WS-Addressing Final version will be available, once the specification itself gets finalized.</td><td>0.94</td><td>0.94</td><td><a href="[preferred]/ws/axis2/modules/addressing/0_94/addressing.mar">mar</a></td><td> </td></tr><tr class="a"><td><a href="wss4j/index.html">WSS4J</a></td><td> </td><td>0.94</td><td>0.94</td><td><a href="[preferred]/ws/axis2/modules/wss4j/0_94/security.mar">mar</a> </td><td> </td></tr></table><p> </p></div></div></div><div class="clear"><hr></hr></div><div id="footer"><div class="xright">© 2004-2006, Apache Software Foundation</div><div cla
ss="clear"><hr></hr></div></div></body></html>
\ No newline at end of file
Added: webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/in-sample.png
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/in-sample.png?rev=367656&view=auto
==============================================================================
Binary file - no diff available.
Propchange: webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/in-sample.png
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/in.action.xsd
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/in.action.xsd?rev=367656&view=auto
==============================================================================
--- webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/in.action.xsd (added)
+++ webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/in.action.xsd Tue Jan 10 07:45:32 2006
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" elementFormDefault="qualified" attributeFormDefault="unqualified">
+ <xs:element name="action">
+ <xs:annotation>
+ <xs:documentation>Inflow security 'action' configuration</xs:documentation>
+ </xs:annotation>
+ <xs:complexType>
+ <xs:sequence>
+ <xs:element name="items" type="xs:string"/>
+ <xs:element name="passwordCallbackClass" type="xs:string" minOccurs="0"/>
+ <xs:element name="signaturePropFile" type="xs:string" minOccurs="0"/>
+ <xs:element name="decryptionPropFile" type="xs:string" minOccurs="0"/>
+ </xs:sequence>
+ </xs:complexType>
+ </xs:element>
+</xs:schema>
Added: webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-action.xsd
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-action.xsd?rev=367656&view=auto
==============================================================================
--- webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-action.xsd (added)
+++ webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-action.xsd Tue Jan 10 07:45:32 2006
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" elementFormDefault="qualified" attributeFormDefault="unqualified">
+ <xs:element name="action">
+ <xs:annotation>
+ <xs:documentation>Outflow security 'action' configuration</xs:documentation>
+ </xs:annotation>
+ <xs:complexType>
+ <xs:sequence>
+ <xs:element name="items" type="xs:string"/>
+ <xs:element name="user" type="xs:string"/>
+ <xs:element name="passwordCallbackClass" type="xs:string" minOccurs="0"/>
+ <xs:element name="signaturePropFile" type="xs:string" minOccurs="0"/>
+ <xs:element name="encryptionPropFile" type="xs:string" minOccurs="0"/>
+ <xs:element name="signatureKeyIdentifier" type="xs:string" minOccurs="0"/>
+ <xs:element name="encryptionKeyIdentifier" type="xs:string" minOccurs="0"/>
+ <xs:element name="encryptionUser" type="xs:string" minOccurs="0"/>
+ <xs:element name="signatureParts" type="xs:string" minOccurs="0"/>
+ <xs:element name="encryptionParts" type="xs:string" minOccurs="0"/>
+ <xs:element name="optimizeParts" type="xs:string" minOccurs="0"/>
+ <xs:element name="encryptionSymAlgorithm" type="xs:string" minOccurs="0"/>
+ <xs:element name="EmbeddedKeyCallbackClass" type="xs:string" minOccurs="0"/>
+ <xs:element name="encryptionKeyTransportAlgorithm" type="xs:string" minOccurs="0"/>
+ <xs:element name="EmbeddedKeyName" type="xs:string" minOccurs="0"/>
+ </xs:sequence>
+ </xs:complexType>
+ </xs:element>
+</xs:schema>
Added: webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-sample.png
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-sample.png?rev=367656&view=auto
==============================================================================
Binary file - no diff available.
Propchange: webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-sample.png
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-sample2.png
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-sample2.png?rev=367656&view=auto
==============================================================================
Binary file - no diff available.
Propchange: webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/sec-conf/out-sample2.png
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/security-module.html
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/security-module.html?rev=367656&view=auto
==============================================================================
--- webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/security-module.html (added)
+++ webservices/site/trunk/targets/axis2/modules/wss4j/0_94/0.94/security-module.html Tue Jan 10 07:45:32 2006
@@ -0,0 +1,54 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis 2.0 - The Security Module</title><style type="text/css" media="all">
+ @import url("../../../../style/maven-base.css");
+
+ @import url("../../../../style/maven-theme.css");</style><link rel="stylesheet" href="../../../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis 2.0" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
+ Last published: 10 January 2006
+ | Doc for 0.94</div><div class="xright"></div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis_2_0"><h5>Axis 2.0</h5><ul><li class="none"><a href="../../../../index.html">Home</a></li><li class="expanded"><a href="../../../../">Download Axis2</a><ul><li class="none"><a href="../../../../download.cgi">Releases</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li></ul></li><li class="expanded"><a href="../../../../">Documentation</a><ul><li class="none"><a href="../../../../0_93/index.html">Version 0.93</a></li><li class="none"><a href="../../../../0_94/index.html">Version 0.94</a></li></ul></li><li class="expanded"><a href="../../../../overview.html">Get Involved</a><ul><li class="none"><a href="../../../../svn.html">Checkout the Source</a></li><li class="none"><a href="../../../../siteHowTo
.html">Build the Site</a></li><li class="none"><a href="../../../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../../../refLib.html">Reference Library</a></li><li class="none"><a href="../../../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../../../faq.html">FAQ</a></li></ul></li><li class="none"><a href="../../../../modules/index.html">Modules</a></li><li class="none"><a href="../../../../thanks.html">Acknowledgements</a></li><li class="expanded"><a href="../../../../">Project Information</a><ul><li class="none"><a href="../../../../team-list.html">Project Team</a></li><li class="none"><a href="../../../../issue-tracking.html">Issue Tracking</a></li></ul></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Securi
ng_SOAP_Messages_with_WSS4J"></a><h2>Securing SOAP Messages with WSS4J</h2><p>Axis2 comes with a module based on WSS4J [1] to provide WS-Security features. This section explains how to engage and configure the security module. Since the security module inserts handlers in the system specific pre-dispatch phase, it must be engaged globally. But it is possible to activate the security module for the inflow or the outflow when required by the service or the clients.</p><p>The security module (security.mar) is available in the axis2.war but it is not engaged by default.</p><p>First it should be engaged by inserting the following in the axis2.xml file.</p>
+ <div class="source"><pre><pre>
+ <module ref="security"/>
+</pre></pre></div>
+ <p>The web admin interface can be used when Axis2 is deployed in a servlet container such as Apache Tomcat.</p><p>At the server it is possible to provide security on a per service basis. The configuration parameters should be set in the service.xml file of the service. The client side config parameters should be set in the axis2.xml of the client's Axis2 repository.</p><p>The security module uses two parameters:</p><ul>
+<li>OutflowSecurity</li>
+<li>InflowSecurity</li>
+</ul><p>
+
+The configuration that can go in each of these parameters are described below:
+
+</p><div class="subsection"><a name="OutflowSecurity_parameter"></a><h3>OutflowSecurity parameter</h3><p>
+
+This parameter is used to configure the outflow security handler. The outflow
+ handler can be invoked more than once in the outflow one can provide
+ configuration for each of these invocations. The 'action' element describes
+ one of these configurations. Therefore the 'OutflowSecurity' parameter can
+ contain more than one 'action' elements. The schema of this 'action' element
+ is available <a href="sec-conf/out-action.xsd">here</a>.
+</p><p>An outflow configuration to add a timestamp, sing and encrypt
+ the message once, is shown in<a href="#ex1"> Example 1</a> and <a href="#ex1">
+ Example 2</a> shows how to sign the message twice by chaining the outflow
+ handler (using two 'action' elements)</p><p>Following is a description of the elements that can go in an 'action'
+element of the OutflowSecurity parameter</p><br></br><table class="bodyTable"><tr class="b"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr><tr class="a"><td>items</td><td>Security actions for the inflow</td><td>Add a Timestamp, Sign the SOAP body and Encrypt the SOAP body <br></br><items> Timestamp Signature Encrypt</items></td></tr><tr class="b"><td>user</td><td>The user's name</td><td>Set alias of the key to be used to sign<br></br><user> bob</user></td></tr><tr class="a"><td>passwordCallbackClass</td><td>Callback class used to provide the password required to create the UsernameToken or to sign the message</td><td><passwordCallbackClass> org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr><tr class="b"><td>signaturePropFile</td><td>property file used to get the signature parameters such as crypto provider, keystore and its password</td><td>Set example.properties file as the signature pr
operty file<br></br><signaturePropFile> example.properties</signaturePropFile></td></tr><tr class="a"><td>signatureKeyIdentifier</td><td>Key identifier to be used in referring the key in the signature</td><td>Use the serial number of the certificate<br></br><signatureKeyIdentifier> IssuerSerial</signatureKeyIdentifier></td></tr><tr class="b"><td>encryptionKeyIdentifier</td><td>Key identifier to be used in referring the key in encryption</td><td>Use the serial number of the certificate <br></br><encryptionKeyIdentifier>IssuerSerial</encryptionKeyIdentifier></td></tr><tr class="a"><td>encryptionUser</td><td>The user's name for encryption.</td><td><br></br><encryptionUser>alice</encryptionUser></td></tr><tr class="b"><td>encryptionSymAlgorithm</td><td>Symmetric algorithm to be used for encryption</td><td>Use AES-128<br></br><encryptionSymAlgorithm> http://www.w3.org/2001/04/xmlenc#aes128-cbc</encryptionSymAlgorithm></t
d></tr><tr class="a"><td>encryptionKeyTransportAlgorithm</td><td>Key encryption algorithm</td><td>Use RSA-OAEP<br></br><parameter name="encryptionSymAlgorithm"> http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p</parameter></td></tr><tr class="b"><td>signatureParts</td><td>Sign multiple parts in the SOAP message</td><td>Sign Foo and Bar elements qualified by "http://app.ns/ns"<br></br><signatureParts> {Element}{http://app.ns/ns}Foo;{Element}{http://app.ns/ns}Bar </signatureParts></td></tr><tr class="a"><td>optimizeParts</td><td>MTOM Optimize the elements specified by the XPath query</td><td>Optimize the CipherValue<br></br><optimizeParts> //xenc:EncryptedData/xenc:CipherData/xenc:CipherValue </optimizeParts></td></tr></table><br></br></div><div class="subsection"><a name="InflowSecurity_parameter"></a><h3>InflowSecurity parameter</h3><p>This parameter is used to configure the inflow security handler. The 'action' element is used to
+encapsulate the configuration elements here as well. The schema of the 'action' element is available here.
+<a href="#ex3">Example 3</a> shows the configuration to decrypt, verify signature and validate timestamp.</p><table class="bodyTable"><tr class="b"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr><tr class="a"><td>items</td><td>Security actions for the inflow</td><td>first the incoming message should be decrypted and then the signatures should be verified and should be checked for the availability of the Timestamp <br></br><items> Timestamp Signature Encrypt</items></td></tr><tr class="b"><td>passwordCallbackClass</td><td>Callback class used to obtain password for decryption and UsernameToken verification</td><td><br></br><passwordCallbackClass> org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr><tr class="a"><td>signaturePropFile</td><td>Property file used for signature verification</td><td><br></br><signaturePropFile> sig.properties</signaturePropFile></td></tr><tr class="b"><td>decrypti
onPropFile</td><td>Property file used for decryption</td><td> <br></br><decryptionPropFile> dec.properties</decryptionPropFile></td></tr></table><br></br><p>Please note that the '.properties' files used in properties such as OutSignaturePropFile are the same property files that are using in the WSS4J project.
+Following shows the properties defined in a sample property file</p>
+ <div class="source"><pre>
+<pre>
+org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
+org.apache.ws.security.crypto.merlin.keystore.type=pkcs12
+org.apache.ws.security.crypto.merlin.keystore.password=security
+org.apache.ws.security.crypto.merlin.keystore.alias=16c73ab6-b892-458f-abf5-2f875f74882e
+org.apache.ws.security.crypto.merlin.alias.password=security
+org.apache.ws.security.crypto.merlin.file=keys/x509.PFX.MSFT
+</pre>
+</pre></div>
+ <p>
+
+org.apache.ws.security.crypto.provider defines the implementation of the org.apache.ws.security.components.crypto.Crypto
+interface to provide the crypto information required by WSS4J. The other properties defined are the configuration
+ properties used by the implementation class (org.apache.ws.security.components.crypto.Merlin).
+
+</p></div><div class="subsection"><a name="JDK_1_5"></a><h3>JDK 1.5</h3><p>If you are using JDK1.5 make sure you add bouncycastle as a JCE provider of the JRE</p><p>Simply add <b>security.provider.X=org.bouncycastle.jce.provider.BouncyCastleProvider</b> entry in
+<b>JDK_HOME/jre/lib/security/java.security</b> file.</p><p><b>References</b></p><p>1. <a href="http://ws.apache.org/wss4j" class="externalLink" title="External Link">Apache WSS4J</a></p><br></br><p><b>Examples</b></p><p id="ex1">Example 1: An outflow configuration to add a timestamp, sing and encrypt
+ the message once</p><p><img src="sec-conf/out-sample.png" alt=""></img>
+</p><p id="ex2">Example 2: An outflow configuration to sign the message twice and add a timestamp</p><p><img src="sec-conf/out-sample2.png" alt=""></img>
+</p><p id="ex3">Example 3: An inflow configuration to decrypt, verify signature and validate timestamp</p><p><img src="sec-conf/in-sample.png" alt=""></img>
+</p></div></div></div></div><div class="clear"><hr></hr></div><div id="footer"><div class="xright">© 2004-2006, Apache Software Foundation</div><div class="clear"><hr></hr></div></div></body></html>
\ No newline at end of file
Added: webservices/site/trunk/targets/axis2/modules/wss4j/index.html
URL: http://svn.apache.org/viewcvs/webservices/site/trunk/targets/axis2/modules/wss4j/index.html?rev=367656&view=auto
==============================================================================
--- webservices/site/trunk/targets/axis2/modules/wss4j/index.html (added)
+++ webservices/site/trunk/targets/axis2/modules/wss4j/index.html Tue Jan 10 07:45:32 2006
@@ -0,0 +1,12 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis 2.0 - :: Axis2 - WSS4J Module ::</title><style type="text/css" media="all">
+ @import url("../../style/maven-base.css");
+
+ @import url("../../style/maven-theme.css");</style><link rel="stylesheet" href="../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis 2.0" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
+ Last published: 10 January 2006
+ | Doc for 0.94</div><div class="xright"></div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis_2_0"><h5>Axis 2.0</h5><ul><li class="none"><a href="../../index.html">Home</a></li><li class="expanded"><a href="../../">Download Axis2</a><ul><li class="none"><a href="../../download.cgi">Releases</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li></ul></li><li class="expanded"><a href="../../">Documentation</a><ul><li class="none"><a href="../../0_93/index.html">Version 0.93</a></li><li class="none"><a href="../../0_94/index.html">Version 0.94</a></li></ul></li><li class="expanded"><a href="../../overview.html">Get Involved</a><ul><li class="none"><a href="../../svn.html">Checkout the Source</a></li><li class="none"><a href="../../siteHowTo.html">Build the Site</a></li><li class="none"><a href
="../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../refLib.html">Reference Library</a></li><li class="none"><a href="../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../faq.html">FAQ</a></li></ul></li><li class="none"><a href="../../modules/index.html">Modules</a></li><li class="none"><a href="../../thanks.html">Acknowledgements</a></li><li class="expanded"><a href="../../">Project Information</a><ul><li class="none"><a href="../../team-list.html">Project Team</a></li><li class="none"><a href="../../issue-tracking.html">Issue Tracking</a></li></ul></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Axis2_-_WSS4J_Module"></a><h2>Axis2 - WSS4J Module</h2><p>This is an implementation of WS-Security on Axis2. </p><div cl
ass="subsection"><a name="Documentation"></a><h3>Documentation</h3><ul>
+ <li>Version 0.94
+ <ul>
+ <li><a href="0.94/security-module.html">User Guide</a> </li>
+ </ul>
+ </li>
+</ul></div></div></div></div><div class="clear"><hr></hr></div><div id="footer"><div class="xright">© 2004-2006, Apache Software Foundation</div><div class="clear"><hr></hr></div></div></body></html>
\ No newline at end of file