You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-user@axis.apache.org by Michele Mazzucco <Mi...@ncl.ac.uk> on 2006/07/07 13:57:08 UTC

[Axis2] rampart question

Hi all,

I've got a couple of questions about Rampart.
What happens if the rampart module is used?, only the message body is
encrypted or the header is encrypted as well? And what about attachments
(if any)?


Thanks,
Michele

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org

Re: [Axis2] rampart question

Posted by Michele Mazzucco <Mi...@ncl.ac.uk>.
Hi Ruchith,

thanks for your reply.

Michele

Ruchith Fernando wrote:
> Hi Michele,
> 
> If you do not explicitly specify the encryptionParts then rampart will
> only encrypt the body.
> You can use the <encryptionParts> element within the <action> element
> of the outflowConfiguration parameter to specify the elements you want
> to encrypt.
> 
> This example [1] is a case where the wsse:UsernameToken element is
> encrypted. If you want to encrypt the content of the element only,
> then use "{}" instead of "{Element}" when specifying the element to be
> encrypted.
> 
> In the case where we use MTOM optimization you will have to refer to
> the element by the qname of the element that holds the attachment and
> will have to configure rampart to encrypt content of that element.
> 
> Thanks,
> Ruchith
> 
> [1]
> https://svn.apache.org/repos/asf/webservices/axis2/trunk/java/modules/integration/test-resources/security/s2a.client.axis2.xml
> 
> 
> On 7/7/06, Michele Mazzucco <Mi...@ncl.ac.uk> wrote:
>> Hi all,
>>
>> I've got a couple of questions about Rampart.
>> What happens if the rampart module is used?, only the message body is
>> encrypted or the header is encrypted as well? And what about attachments
>> (if any)?
>>
>>
>> Thanks,
>> Michele
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
>> For additional commands, e-mail: axis-user-help@ws.apache.org
>>
>>
> 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org

Re: [Axis2] rampart question

Posted by Ruchith Fernando <ru...@gmail.com>.
Hi Michele,

If you do not explicitly specify the encryptionParts then rampart will
only encrypt the body.
You can use the <encryptionParts> element within the <action> element
of the outflowConfiguration parameter to specify the elements you want
to encrypt.

This example [1] is a case where the wsse:UsernameToken element is
encrypted. If you want to encrypt the content of the element only,
then use "{}" instead of "{Element}" when specifying the element to be
encrypted.

In the case where we use MTOM optimization you will have to refer to
the element by the qname of the element that holds the attachment and
will have to configure rampart to encrypt content of that element.

Thanks,
Ruchith

[1] https://svn.apache.org/repos/asf/webservices/axis2/trunk/java/modules/integration/test-resources/security/s2a.client.axis2.xml

On 7/7/06, Michele Mazzucco <Mi...@ncl.ac.uk> wrote:
> Hi all,
>
> I've got a couple of questions about Rampart.
> What happens if the rampart module is used?, only the message body is
> encrypted or the header is encrypted as well? And what about attachments
> (if any)?
>
>
> Thanks,
> Michele
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
> For additional commands, e-mail: axis-user-help@ws.apache.org
>
>


-- 
www.ruchith.org

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org