You are viewing a plain text version of this content. The canonical link for it is here.
Posted to axis-cvs@ws.apache.org by di...@apache.org on 2008/05/01 23:20:38 UTC
svn commit: r652665 [29/45] - in /webservices/axis2/site: ./ 1_4/ 1_4/adb/
1_4/adb/images/ 1_4/images/ 1_4/images/archi-guide/ 1_4/images/userguide/
1_4/jibx/ 1_4/src/ css/ download/0_9/ download/0_91/ download/0_92/
download/0_93/ download/0_94/ downl...
Modified: webservices/axis2/site/modules/wss4j/0_95/security-module.html
URL: http://svn.apache.org/viewvc/webservices/axis2/site/modules/wss4j/0_95/security-module.html?rev=652665&r1=652664&r2=652665&view=diff
==============================================================================
--- webservices/axis2/site/modules/wss4j/0_95/security-module.html (original)
+++ webservices/axis2/site/modules/wss4j/0_95/security-module.html Thu May 1 14:20:27 2008
@@ -1,135 +1,135 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis2/Java - The Security Module</title><style type="text/css" media="all">
- @import url("../../../style/maven-base.css");
-
- @import url("../../../style/maven-theme.css");</style><link rel="stylesheet" href="../../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis2" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
- Last published: 04 May 2007
- | Doc for 1.2</div><div class="xright">
-
- <a href="../../../index.html">Axis2/Java</a>
-
-
-
- <span class="separator">|</span>
-
-
- <a href="http://ws.apache.org/axis2/c" class="externalLink" title="External Link">Axis2/C</a>
-
-
-
- <span class="separator">|</span>
-
-
- <a href="http://ws.apache.org" class="externalLink" title="External Link">Apache WS</a>
-
-
-
- <span class="separator">|</span>
-
-
- <a href="http://www.apache.org" class="externalLink" title="External Link">Apache </a>
- </div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis2_Java"><h5>Axis2/Java</h5><ul><li class="none"><a href="../../../index.html">Home</a></li></ul></div><div id="menuDownloads"><h5>Downloads</h5><ul><li class="none"><a href="../../../download.cgi">Releases</a></li><li class="none"><a href="../../../modules/index.html">Modules</a></li><li class="none"><a href="../../../tools/index.html">Tools</a></li></ul></div><div id="menuDocumentation"><h5>Documentation</h5><ul><li class="expanded"><a href="../../../1_2/contents.html">Version 1.2</a><ul><li class="none"><a href="../../../1_2/toc.html">Table of Contents</a></li><li class="none"><a href="../../../1_2/installationguide.html">Installation Guide</a></li><li class="none"><a href="../../../1_2/quickstartguide.html">QuickStart Guide</a></li><li class="none"><a href="../../../1_2/userguide.html">User Guide</a></li><li class="none"><a href="../../../1_2/pojoguide.html">POJO
Guide</a></li><li class="none"><a href="../../../1_2/spring.html">Spring Guide</a></li><li class="none"><a href="../../../1_2/webadminguide.html">Web Administrator's Guide</a></li><li class="none"><a href="../../../1_2/migration.html">Migration Guide (from Axis1)</a></li></ul></li><li class="none"><a href="../../../1_1_1/contents.html">Version 1.1.1</a></li><li class="none"><a href="../../../1_1/contents.html">Version 1.1</a></li><li class="none"><a href="../../../1_0/index.html">Version 1.0</a></li><li class="none"><a href="../../../0_95/index.html">Version 0.95</a></li><li class="none"><a href="../../../0_94/index.html">Version 0.94</a></li><li class="none"><a href="../../../0_93/index.html">Version 0.93</a></li></ul></div><div id="menuResources"><h5>Resources</h5><ul><li class="none"><a href="../../../faq.html">FAQ</a></li><li class="none"><a href="../../../articles.html">Articles</a></li><li class="none"><a href="http://wiki.apache.org/ws/FrontPage/Axis2/" class="externa
lLink" title="External Link">Wiki</a></li><li class="none"><a href="../../../refLib.html">Reference Library</a></li><li class="none"><a href="http://ws.apache.org/axis2/1_2/api/index.html" class="externalLink" title="External Link">Online Java Docs</a></li></ul></div><div id="menuGet_Involved"><h5>Get Involved</h5><ul><li class="none"><a href="../../../overview.html">Overview</a></li><li class="none"><a href="../../../svn.html">Checkout the Source</a></li><li class="none"><a href="../../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../../siteHowTo.html">Build the Site</a></li></ul></div><div id="menuProject_Information"><h5>Project Information</h5><ul><li class="none"><a href="../../../team-list.html">Project Team</a></li><li class="none"><a href="../../../issue-tracking.html">Issue Tracking</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/
axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li><li class="none"><a href="../../../thanks.html">Acknowledgements</a></li><li class="none"><a href="http://www.apache.org/licenses/LICENSE-2.0.html" class="externalLink" title="External Link">License</a></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Securing_SOAP_Messages_with_WSS4J"></a><h2>Securing SOAP Messages with WSS4J</h2><p><em>-For Axis2 Version 0.95</em></p><p>Axis2 comes with a module based on WSS4J [1] to provide WS-Security
-features. This section explains how to engage and configure the security
-module. Since the security module inserts handlers in the system specific
-pre-dispatch phase, it must be engaged globally. But it is possible to
-activate the security module for the inflow or the outflow when required by
-the service or the clients.</p><p>The security module (security.mar) is available in the axis2.war but it is
-not engaged by default.</p><p>First it should be engaged by inserting the following in the axis2.xml
-file.</p>
- <div class="source"><pre><pre> <module ref="security"/></pre>
-</pre></div>
- <p>The web admin interface can be used when Axis2 is deployed in a servlet
-container such as Apache Tomcat.</p><p>At the server it is possible to provide security on a per service basis.
-The configuration parameters should be set in the service.xml file of the
-service. The client side config parameters should be set in the axis2.xml of
-the client's Axis2 repository.</p><p>The security module uses two parameters:</p><ul>
- <li>OutflowSecurity</li>
- <li>InflowSecurity</li>
-</ul><p>
-The configuration that can go in each of these parameters are described below:
-
-</p><div class="subsection"><a name="OutflowSecurity_parameter"></a><h3>OutflowSecurity parameter</h3><p>
-This parameter is used to configure the outflow security handler. The outflow
-handler can be invoked more than once in the outflow one can provide
-configuration for each of these invocations. The 'action' element describes
-one of these configurations. Therefore the 'OutflowSecurity' parameter can
-contain more than one 'action' elements. The schema of this 'action' element
-is available <a href="sec-conf/out-action.xsd">here</a>.
-
-</p><p>An outflow configuration to add a timestamp, sing and encrypt the message
-once, is shown in<a href="#ex1"> Example 1</a> and <a href="#ex1"> Example
-2</a> shows how to sign the message twice by chaining the outflow handler
-(using two 'action' elements)</p><p>Following is a description of the elements that can go in an 'action'
-element of the OutflowSecurity parameter</p><br></br><table class="bodyTable"><tbody>
- <tr class="a"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
- <tr class="b"><td>items</td><td>Security actions for the inflow</td><td>Add a Timestamp, Sign the SOAP body and Encrypt the SOAP body <br></br>
- <items> Timestamp Signature Encrypt</items></td></tr>
- <tr class="a"><td>user</td><td>The user's name</td><td>Set alias of the key to be used to sign<br></br>
- <user> bob</user></td></tr>
- <tr class="b"><td>passwordCallbackClass</td><td>Callback class used to provide the password required to create the
- UsernameToken or to sign the message</td><td><passwordCallbackClass>
- org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
- <tr class="a"><td>signaturePropFile</td><td>property file used to get the signature parameters such as crypto
- provider, keystore and its password</td><td>Set example.properties file as the signature property file<br></br>
- <signaturePropFile>
- example.properties</signaturePropFile></td></tr>
- <tr class="b"><td>signatureKeyIdentifier</td><td>Key identifier to be used in referring the key in the signature</td><td>Use the serial number of the certificate<br></br>
- <signatureKeyIdentifier>
- IssuerSerial</signatureKeyIdentifier></td></tr>
- <tr class="a"><td>encryptionKeyIdentifier</td><td>Key identifier to be used in referring the key in encryption</td><td>Use the serial number of the certificate <br></br>
- <encryptionKeyIdentifier>IssuerSerial</encryptionKeyIdentifier></td></tr>
- <tr class="b"><td>encryptionUser</td><td>The user's name for encryption.</td><td><br></br>
- <encryptionUser>alice</encryptionUser></td></tr>
- <tr class="a"><td>encryptionSymAlgorithm</td><td>Symmetric algorithm to be used for encryption</td><td>Use AES-128<br></br>
- <encryptionSymAlgorithm>
- http://www.w3.org/2001/04/xmlenc#aes128-cbc</encryptionSymAlgorithm></td></tr>
- <tr class="b"><td>encryptionKeyTransportAlgorithm</td><td>Key encryption algorithm</td><td>Use RSA-OAEP<br></br>
- <parameter name="encryptionSymAlgorithm">
- http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p</parameter></td></tr>
- <tr class="a"><td>signatureParts</td><td>Sign multiple parts in the SOAP message</td><td>Sign Foo and Bar elements qualified by "http://app.ns/ns"<br></br>
- <signatureParts>
- {Element}{http://app.ns/ns}Foo;{Element}{http://app.ns/ns}Bar
- </signatureParts></td></tr>
- <tr class="b"><td>optimizeParts</td><td>MTOM Optimize the elements specified by the XPath query</td><td>Optimize the CipherValue<br></br>
- <optimizeParts>
- //xenc:EncryptedData/xenc:CipherData/xenc:CipherValue
- </optimizeParts></td></tr>
- </tbody></table><br></br></div><div class="subsection"><a name="InflowSecurity_parameter"></a><h3>InflowSecurity parameter</h3><p>This parameter is used to configure the inflow security handler. The
-'action' element is used to encapsulate the configuration elements here as
-well. The schema of the 'action' element is available here. <a href="#ex3">Example 3</a> shows the configuration to decrypt, verify
-signature and validate timestamp.</p><table class="bodyTable"><tbody>
- <tr class="a"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
- <tr class="b"><td>items</td><td>Security actions for the inflow</td><td>first the incoming message should be decrypted and then the
- signatures should be verified and should be checked for the
- availability of the Timestamp <br></br>
- <items> Timestamp Signature Encrypt</items></td></tr>
- <tr class="a"><td>passwordCallbackClass</td><td>Callback class used to obtain password for decryption and
- UsernameToken verification</td><td><br></br>
- <passwordCallbackClass>
- org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
- <tr class="b"><td>signaturePropFile</td><td>Property file used for signature verification</td><td><br></br>
- <signaturePropFile>
- sig.properties</signaturePropFile></td></tr>
- <tr class="a"><td>decryptionPropFile</td><td>Property file used for decryption</td><td><br></br>
- <decryptionPropFile>
- dec.properties</decryptionPropFile></td></tr>
- </tbody></table><br></br><p>Please note that the '.properties' files used in properties such as
-OutSignaturePropFile are the same property files that are using in the WSS4J
-project. Following shows the properties defined in a sample property file</p>
- <div class="source"><pre><pre> org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
- org.apache.ws.security.crypto.merlin.keystore.type=pkcs12
- org.apache.ws.security.crypto.merlin.keystore.password=security
- org.apache.ws.security.crypto.merlin.keystore.alias=16c73ab6-b892-458f-abf5-2f875f74882e
- org.apache.ws.security.crypto.merlin.alias.password=security
- org.apache.ws.security.crypto.merlin.file=keys/x509.PFX.MSFT
- </pre>
-</pre></div>
- <p>org.apache.ws.security.crypto.provider defines the implementation of
-the org.apache.ws.security.components.crypto.Crypto interface to provide the
-crypto information required by WSS4J. The other properties defined are the
-configuration properties used by the implementation class
-(org.apache.ws.security.components.crypto.Merlin).
-
-</p><p><b>References</b></p><p>1. <a href="http://ws.apache.org/wss4j" class="externalLink" title="External Link">Apache WSS4J</a></p><br></br><p><b>Examples</b></p><p id="ex1">Example 1: An outflow configuration to add a timestamp, sing and
-encrypt the message once</p><p><img alt="" src="sec-conf/out-sample.png"></img></p><p id="ex2">Example 2: An outflow configuration to sign the message twice and
-add a timestamp</p><p><img alt="" src="sec-conf/out-sample2.png"></img></p><p id="ex3">Example 3: An inflow configuration to decrypt, verify signature
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis2/Java - The Security Module</title><style type="text/css" media="all">
+ @import url("../../../style/maven-base.css");
+
+ @import url("../../../style/maven-theme.css");</style><link rel="stylesheet" href="../../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis2" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
+ Last published: 04 May 2007
+ | Doc for 1.2</div><div class="xright">
+
+ <a href="../../../index.html">Axis2/Java</a>
+
+
+
+ <span class="separator">|</span>
+
+
+ <a href="http://ws.apache.org/axis2/c" class="externalLink" title="External Link">Axis2/C</a>
+
+
+
+ <span class="separator">|</span>
+
+
+ <a href="http://ws.apache.org" class="externalLink" title="External Link">Apache WS</a>
+
+
+
+ <span class="separator">|</span>
+
+
+ <a href="http://www.apache.org" class="externalLink" title="External Link">Apache </a>
+ </div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis2_Java"><h5>Axis2/Java</h5><ul><li class="none"><a href="../../../index.html">Home</a></li></ul></div><div id="menuDownloads"><h5>Downloads</h5><ul><li class="none"><a href="../../../download.cgi">Releases</a></li><li class="none"><a href="../../../modules/index.html">Modules</a></li><li class="none"><a href="../../../tools/index.html">Tools</a></li></ul></div><div id="menuDocumentation"><h5>Documentation</h5><ul><li class="expanded"><a href="../../../1_2/contents.html">Version 1.2</a><ul><li class="none"><a href="../../../1_2/toc.html">Table of Contents</a></li><li class="none"><a href="../../../1_2/installationguide.html">Installation Guide</a></li><li class="none"><a href="../../../1_2/quickstartguide.html">QuickStart Guide</a></li><li class="none"><a href="../../../1_2/userguide.html">User Guide</a></li><li class="none"><a href="../../../1_2/pojoguide.html">POJO
Guide</a></li><li class="none"><a href="../../../1_2/spring.html">Spring Guide</a></li><li class="none"><a href="../../../1_2/webadminguide.html">Web Administrator's Guide</a></li><li class="none"><a href="../../../1_2/migration.html">Migration Guide (from Axis1)</a></li></ul></li><li class="none"><a href="../../../1_1_1/contents.html">Version 1.1.1</a></li><li class="none"><a href="../../../1_1/contents.html">Version 1.1</a></li><li class="none"><a href="../../../1_0/index.html">Version 1.0</a></li><li class="none"><a href="../../../0_95/index.html">Version 0.95</a></li><li class="none"><a href="../../../0_94/index.html">Version 0.94</a></li><li class="none"><a href="../../../0_93/index.html">Version 0.93</a></li></ul></div><div id="menuResources"><h5>Resources</h5><ul><li class="none"><a href="../../../faq.html">FAQ</a></li><li class="none"><a href="../../../articles.html">Articles</a></li><li class="none"><a href="http://wiki.apache.org/ws/FrontPage/Axis2/" class="externa
lLink" title="External Link">Wiki</a></li><li class="none"><a href="../../../refLib.html">Reference Library</a></li><li class="none"><a href="http://ws.apache.org/axis2/1_2/api/index.html" class="externalLink" title="External Link">Online Java Docs</a></li></ul></div><div id="menuGet_Involved"><h5>Get Involved</h5><ul><li class="none"><a href="../../../overview.html">Overview</a></li><li class="none"><a href="../../../svn.html">Checkout the Source</a></li><li class="none"><a href="../../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../../siteHowTo.html">Build the Site</a></li></ul></div><div id="menuProject_Information"><h5>Project Information</h5><ul><li class="none"><a href="../../../team-list.html">Project Team</a></li><li class="none"><a href="../../../issue-tracking.html">Issue Tracking</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/
axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li><li class="none"><a href="../../../thanks.html">Acknowledgements</a></li><li class="none"><a href="http://www.apache.org/licenses/LICENSE-2.0.html" class="externalLink" title="External Link">License</a></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Securing_SOAP_Messages_with_WSS4J"></a><h2>Securing SOAP Messages with WSS4J</h2><p><em>-For Axis2 Version 0.95</em></p><p>Axis2 comes with a module based on WSS4J [1] to provide WS-Security
+features. This section explains how to engage and configure the security
+module. Since the security module inserts handlers in the system specific
+pre-dispatch phase, it must be engaged globally. But it is possible to
+activate the security module for the inflow or the outflow when required by
+the service or the clients.</p><p>The security module (security.mar) is available in the axis2.war but it is
+not engaged by default.</p><p>First it should be engaged by inserting the following in the axis2.xml
+file.</p>
+ <div class="source"><pre><pre> <module ref="security"/></pre>
+</pre></div>
+ <p>The web admin interface can be used when Axis2 is deployed in a servlet
+container such as Apache Tomcat.</p><p>At the server it is possible to provide security on a per service basis.
+The configuration parameters should be set in the service.xml file of the
+service. The client side config parameters should be set in the axis2.xml of
+the client's Axis2 repository.</p><p>The security module uses two parameters:</p><ul>
+ <li>OutflowSecurity</li>
+ <li>InflowSecurity</li>
+</ul><p>
+The configuration that can go in each of these parameters are described below:
+
+</p><div class="subsection"><a name="OutflowSecurity_parameter"></a><h3>OutflowSecurity parameter</h3><p>
+This parameter is used to configure the outflow security handler. The outflow
+handler can be invoked more than once in the outflow one can provide
+configuration for each of these invocations. The 'action' element describes
+one of these configurations. Therefore the 'OutflowSecurity' parameter can
+contain more than one 'action' elements. The schema of this 'action' element
+is available <a href="sec-conf/out-action.xsd">here</a>.
+
+</p><p>An outflow configuration to add a timestamp, sing and encrypt the message
+once, is shown in<a href="#ex1"> Example 1</a> and <a href="#ex1"> Example
+2</a> shows how to sign the message twice by chaining the outflow handler
+(using two 'action' elements)</p><p>Following is a description of the elements that can go in an 'action'
+element of the OutflowSecurity parameter</p><br></br><table class="bodyTable"><tbody>
+ <tr class="a"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
+ <tr class="b"><td>items</td><td>Security actions for the inflow</td><td>Add a Timestamp, Sign the SOAP body and Encrypt the SOAP body <br></br>
+ <items> Timestamp Signature Encrypt</items></td></tr>
+ <tr class="a"><td>user</td><td>The user's name</td><td>Set alias of the key to be used to sign<br></br>
+ <user> bob</user></td></tr>
+ <tr class="b"><td>passwordCallbackClass</td><td>Callback class used to provide the password required to create the
+ UsernameToken or to sign the message</td><td><passwordCallbackClass>
+ org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
+ <tr class="a"><td>signaturePropFile</td><td>property file used to get the signature parameters such as crypto
+ provider, keystore and its password</td><td>Set example.properties file as the signature property file<br></br>
+ <signaturePropFile>
+ example.properties</signaturePropFile></td></tr>
+ <tr class="b"><td>signatureKeyIdentifier</td><td>Key identifier to be used in referring the key in the signature</td><td>Use the serial number of the certificate<br></br>
+ <signatureKeyIdentifier>
+ IssuerSerial</signatureKeyIdentifier></td></tr>
+ <tr class="a"><td>encryptionKeyIdentifier</td><td>Key identifier to be used in referring the key in encryption</td><td>Use the serial number of the certificate <br></br>
+ <encryptionKeyIdentifier>IssuerSerial</encryptionKeyIdentifier></td></tr>
+ <tr class="b"><td>encryptionUser</td><td>The user's name for encryption.</td><td><br></br>
+ <encryptionUser>alice</encryptionUser></td></tr>
+ <tr class="a"><td>encryptionSymAlgorithm</td><td>Symmetric algorithm to be used for encryption</td><td>Use AES-128<br></br>
+ <encryptionSymAlgorithm>
+ http://www.w3.org/2001/04/xmlenc#aes128-cbc</encryptionSymAlgorithm></td></tr>
+ <tr class="b"><td>encryptionKeyTransportAlgorithm</td><td>Key encryption algorithm</td><td>Use RSA-OAEP<br></br>
+ <parameter name="encryptionSymAlgorithm">
+ http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p</parameter></td></tr>
+ <tr class="a"><td>signatureParts</td><td>Sign multiple parts in the SOAP message</td><td>Sign Foo and Bar elements qualified by "http://app.ns/ns"<br></br>
+ <signatureParts>
+ {Element}{http://app.ns/ns}Foo;{Element}{http://app.ns/ns}Bar
+ </signatureParts></td></tr>
+ <tr class="b"><td>optimizeParts</td><td>MTOM Optimize the elements specified by the XPath query</td><td>Optimize the CipherValue<br></br>
+ <optimizeParts>
+ //xenc:EncryptedData/xenc:CipherData/xenc:CipherValue
+ </optimizeParts></td></tr>
+ </tbody></table><br></br></div><div class="subsection"><a name="InflowSecurity_parameter"></a><h3>InflowSecurity parameter</h3><p>This parameter is used to configure the inflow security handler. The
+'action' element is used to encapsulate the configuration elements here as
+well. The schema of the 'action' element is available here. <a href="#ex3">Example 3</a> shows the configuration to decrypt, verify
+signature and validate timestamp.</p><table class="bodyTable"><tbody>
+ <tr class="a"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
+ <tr class="b"><td>items</td><td>Security actions for the inflow</td><td>first the incoming message should be decrypted and then the
+ signatures should be verified and should be checked for the
+ availability of the Timestamp <br></br>
+ <items> Timestamp Signature Encrypt</items></td></tr>
+ <tr class="a"><td>passwordCallbackClass</td><td>Callback class used to obtain password for decryption and
+ UsernameToken verification</td><td><br></br>
+ <passwordCallbackClass>
+ org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
+ <tr class="b"><td>signaturePropFile</td><td>Property file used for signature verification</td><td><br></br>
+ <signaturePropFile>
+ sig.properties</signaturePropFile></td></tr>
+ <tr class="a"><td>decryptionPropFile</td><td>Property file used for decryption</td><td><br></br>
+ <decryptionPropFile>
+ dec.properties</decryptionPropFile></td></tr>
+ </tbody></table><br></br><p>Please note that the '.properties' files used in properties such as
+OutSignaturePropFile are the same property files that are using in the WSS4J
+project. Following shows the properties defined in a sample property file</p>
+ <div class="source"><pre><pre> org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
+ org.apache.ws.security.crypto.merlin.keystore.type=pkcs12
+ org.apache.ws.security.crypto.merlin.keystore.password=security
+ org.apache.ws.security.crypto.merlin.keystore.alias=16c73ab6-b892-458f-abf5-2f875f74882e
+ org.apache.ws.security.crypto.merlin.alias.password=security
+ org.apache.ws.security.crypto.merlin.file=keys/x509.PFX.MSFT
+ </pre>
+</pre></div>
+ <p>org.apache.ws.security.crypto.provider defines the implementation of
+the org.apache.ws.security.components.crypto.Crypto interface to provide the
+crypto information required by WSS4J. The other properties defined are the
+configuration properties used by the implementation class
+(org.apache.ws.security.components.crypto.Merlin).
+
+</p><p><b>References</b></p><p>1. <a href="http://ws.apache.org/wss4j" class="externalLink" title="External Link">Apache WSS4J</a></p><br></br><p><b>Examples</b></p><p id="ex1">Example 1: An outflow configuration to add a timestamp, sing and
+encrypt the message once</p><p><img alt="" src="sec-conf/out-sample.png"></img></p><p id="ex2">Example 2: An outflow configuration to sign the message twice and
+add a timestamp</p><p><img alt="" src="sec-conf/out-sample2.png"></img></p><p id="ex3">Example 3: An inflow configuration to decrypt, verify signature
and validate timestamp</p><p><img alt="" src="sec-conf/in-sample.png"></img></p></div></div></div></div><div class="clear"><hr></hr></div><div id="footer"><div class="xright">© 2004-2007, Apache Software Foundation</div><div class="clear"><hr></hr></div></div></body></html>
\ No newline at end of file
Modified: webservices/axis2/site/modules/wss4j/1_0/security-module.html
URL: http://svn.apache.org/viewvc/webservices/axis2/site/modules/wss4j/1_0/security-module.html?rev=652665&r1=652664&r2=652665&view=diff
==============================================================================
--- webservices/axis2/site/modules/wss4j/1_0/security-module.html (original)
+++ webservices/axis2/site/modules/wss4j/1_0/security-module.html Thu May 1 14:20:27 2008
@@ -1,137 +1,137 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis2/Java - Rampart : WS-Security module for Axis2</title><style type="text/css" media="all">
- @import url("../../../style/maven-base.css");
-
- @import url("../../../style/maven-theme.css");</style><link rel="stylesheet" href="../../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis2" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
- Last published: 04 May 2007
- | Doc for 1.2</div><div class="xright">
-
- <a href="../../../index.html">Axis2/Java</a>
-
-
-
- <span class="separator">|</span>
-
-
- <a href="http://ws.apache.org/axis2/c" class="externalLink" title="External Link">Axis2/C</a>
-
-
-
- <span class="separator">|</span>
-
-
- <a href="http://ws.apache.org" class="externalLink" title="External Link">Apache WS</a>
-
-
-
- <span class="separator">|</span>
-
-
- <a href="http://www.apache.org" class="externalLink" title="External Link">Apache </a>
- </div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis2_Java"><h5>Axis2/Java</h5><ul><li class="none"><a href="../../../index.html">Home</a></li></ul></div><div id="menuDownloads"><h5>Downloads</h5><ul><li class="none"><a href="../../../download.cgi">Releases</a></li><li class="none"><a href="../../../modules/index.html">Modules</a></li><li class="none"><a href="../../../tools/index.html">Tools</a></li></ul></div><div id="menuDocumentation"><h5>Documentation</h5><ul><li class="expanded"><a href="../../../1_2/contents.html">Version 1.2</a><ul><li class="none"><a href="../../../1_2/toc.html">Table of Contents</a></li><li class="none"><a href="../../../1_2/installationguide.html">Installation Guide</a></li><li class="none"><a href="../../../1_2/quickstartguide.html">QuickStart Guide</a></li><li class="none"><a href="../../../1_2/userguide.html">User Guide</a></li><li class="none"><a href="../../../1_2/pojoguide.html">POJO
Guide</a></li><li class="none"><a href="../../../1_2/spring.html">Spring Guide</a></li><li class="none"><a href="../../../1_2/webadminguide.html">Web Administrator's Guide</a></li><li class="none"><a href="../../../1_2/migration.html">Migration Guide (from Axis1)</a></li></ul></li><li class="none"><a href="../../../1_1_1/contents.html">Version 1.1.1</a></li><li class="none"><a href="../../../1_1/contents.html">Version 1.1</a></li><li class="none"><a href="../../../1_0/index.html">Version 1.0</a></li><li class="none"><a href="../../../0_95/index.html">Version 0.95</a></li><li class="none"><a href="../../../0_94/index.html">Version 0.94</a></li><li class="none"><a href="../../../0_93/index.html">Version 0.93</a></li></ul></div><div id="menuResources"><h5>Resources</h5><ul><li class="none"><a href="../../../faq.html">FAQ</a></li><li class="none"><a href="../../../articles.html">Articles</a></li><li class="none"><a href="http://wiki.apache.org/ws/FrontPage/Axis2/" class="externa
lLink" title="External Link">Wiki</a></li><li class="none"><a href="../../../refLib.html">Reference Library</a></li><li class="none"><a href="http://ws.apache.org/axis2/1_2/api/index.html" class="externalLink" title="External Link">Online Java Docs</a></li></ul></div><div id="menuGet_Involved"><h5>Get Involved</h5><ul><li class="none"><a href="../../../overview.html">Overview</a></li><li class="none"><a href="../../../svn.html">Checkout the Source</a></li><li class="none"><a href="../../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../../siteHowTo.html">Build the Site</a></li></ul></div><div id="menuProject_Information"><h5>Project Information</h5><ul><li class="none"><a href="../../../team-list.html">Project Team</a></li><li class="none"><a href="../../../issue-tracking.html">Issue Tracking</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/
axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li><li class="none"><a href="../../../thanks.html">Acknowledgements</a></li><li class="none"><a href="http://www.apache.org/licenses/LICENSE-2.0.html" class="externalLink" title="External Link">License</a></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Securing_SOAP_Messages_with_WSS4J"></a><h2>Securing SOAP Messages with WSS4J</h2><p><em>-For Axis2 Version 1.0</em></p><p>Axis2 comes with a module based on WSS4J [1] to provide WS-Security
-features, called "rampart". This document explains how to engage and
-configure rampart module.</p><div class="subsection"><a name="Content"></a><h3>Content</h3><ul>
- <li><a href="#intro">Introduction</a></li>
- <li><a href="#outflowsecurity">OutflowSecurity Parameter</a></li>
- <li><a href="#inflowsecurity">InflowSecurity Parameter</a></li>
- <li><a href="#references">References</a></li>
- <li><a href="#examples">Examples</a></li>
-</ul><p><a name="intro"></a></p></div><div class="subsection"><a name="Introduction"></a><h3>Introduction</h3><p>Since rampart module inserts handlers in the system specific pre-dispatch
-phase, it must be engaged globally. But it is possible to activate rampart
-module for the inflow or the outflow when required by the service or the
-clients.</p><p>The rampart module (rampart.mar) is available with the Axis2 release.</p><p>First it should be engaged by inserting the following in the axis2.xml
-file.</p>
- <div class="source"><pre><pre> <module ref="rampart"/></pre>
-</pre></div>
- <p>The web admin interface can be used when Axis2 is deployed in a servlet
-container such as Apache Tomcat.</p><p>At the server it is possible to provide security on a per service basis.
-The configuration parameters should be set in the service.xml file of the
-service. The client side config parameters should be set in the axis2.xml of
-the client's Axis2 repository.</p><p>Aegis module uses two parameters:</p><ul>
- <li>OutflowSecurity</li>
- <li>InflowSecurity</li>
-</ul><p>
-The configuration that can go in each of these parameters are described
-below: <a name="outflowsecurity"></a></p></div><div class="subsection"><a name="OutflowSecurity_Parameter"></a><h3>OutflowSecurity Parameter</h3><p>
-This parameter is used to configure the outflow security handler. The outflow
-handler can be invoked more than once in the outflow one can provide
-configuration for each of these invocations. The 'action' element describes
-one of these configurations. Therefore the 'OutflowSecurity' parameter can
-contain more than one 'action' elements. The schema of this 'action' element
-is available <a href="sec-conf/out-action.xsd">here</a>.
-
-</p><p>An outflow configuration to add a timestamp, sing and encrypt the message
-once, is shown in<a href="#ex1"> Example 1</a> and <a href="#ex1"> Example
-2</a> shows how to sign the message twice by chaining the outflow handler
-(using two 'action' elements)</p><p>Following is a description of the elements that can go in an 'action'
-element of the OutflowSecurity parameter</p><br></br><table class="bodyTable"><tbody>
- <tr class="b"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
- <tr class="a"><td>items</td><td>Security actions for the inflow</td><td>Add a Timestamp, Sign the SOAP body and Encrypt the SOAP body <br></br>
- <items> Timestamp Signature Encrypt</items></td></tr>
- <tr class="b"><td>user</td><td>The user's name</td><td>Set alias of the key to be used to sign<br></br>
- <user> bob</user></td></tr>
- <tr class="a"><td>passwordCallbackClass</td><td>Callback class used to provide the password required to create the
- UsernameToken or to sign the message</td><td><passwordCallbackClass>
- org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
- <tr class="b"><td>signaturePropFile</td><td>property file used to get the signature parameters such as crypto
- provider, keystore and its password</td><td>Set example.properties file as the signature property file<br></br>
- <signaturePropFile>
- example.properties</signaturePropFile></td></tr>
- <tr class="a"><td>signatureKeyIdentifier</td><td>Key identifier to be used in referring the key in the signature</td><td>Use the serial number of the certificate<br></br>
- <signatureKeyIdentifier>
- IssuerSerial</signatureKeyIdentifier></td></tr>
- <tr class="b"><td>encryptionKeyIdentifier</td><td>Key identifier to be used in referring the key in encryption</td><td>Use the serial number of the certificate <br></br>
- <encryptionKeyIdentifier>IssuerSerial</encryptionKeyIdentifier></td></tr>
- <tr class="a"><td>encryptionUser</td><td>The user's name for encryption.</td><td><br></br>
- <encryptionUser>alice</encryptionUser></td></tr>
- <tr class="b"><td>encryptionSymAlgorithm</td><td>Symmetric algorithm to be used for encryption</td><td>Use AES-128<br></br>
- <encryptionSymAlgorithm>
- http://www.w3.org/2001/04/xmlenc#aes128-cbc</encryptionSymAlgorithm></td></tr>
- <tr class="a"><td>encryptionKeyTransportAlgorithm</td><td>Key encryption algorithm</td><td>Use RSA-OAEP<br></br>
- <parameter name="encryptionSymAlgorithm">
- http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p</parameter></td></tr>
- <tr class="b"><td>signatureParts</td><td>Sign multiple parts in the SOAP message</td><td>Sign Foo and Bar elements qualified by "http://app.ns/ns"<br></br>
- <signatureParts>
- {Element}{http://app.ns/ns}Foo;{Element}{http://app.ns/ns}Bar
- </signatureParts></td></tr>
- <tr class="a"><td>optimizeParts</td><td>MTOM Optimize the elements specified by the XPath query</td><td>Optimize the CipherValue<br></br>
- <optimizeParts>
- //xenc:EncryptedData/xenc:CipherData/xenc:CipherValue
- </optimizeParts></td></tr>
- </tbody></table><p><a name="inflowsecurity"></a></p></div><div class="subsection"><a name="InflowSecurity_Parameter"></a><h3>InflowSecurity Parameter</h3><p>This parameter is used to configure the inflow security handler. The
-'action' element is used to encapsulate the configuration elements here as
-well. The schema of the 'action' element is available here. <a href="#ex3">Example 3</a> shows the configuration to decrypt, verify
-signature and validate timestamp.</p><table class="bodyTable"><tbody>
- <tr class="b"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
- <tr class="a"><td>items</td><td>Security actions for the inflow</td><td>first the incoming message should be decrypted and then the
- signatures should be verified and should be checked for the
- availability of the Timestamp <br></br>
- <items> Timestamp Signature Encrypt</items></td></tr>
- <tr class="b"><td>passwordCallbackClass</td><td>Callback class used to obtain password for decryption and
- UsernameToken verification</td><td><br></br>
- <passwordCallbackClass>
- org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
- <tr class="a"><td>signaturePropFile</td><td>Property file used for signature verification</td><td><br></br>
- <signaturePropFile>
- sig.properties</signaturePropFile></td></tr>
- <tr class="b"><td>decryptionPropFile</td><td>Property file used for decryption</td><td><br></br>
- <decryptionPropFile>
- dec.properties</decryptionPropFile></td></tr>
- </tbody></table><br></br><p>Please note that the '.properties' files used in properties such as
-OutSignaturePropFile are the same property files that are using in the WSS4J
-project. Following shows the properties defined in a sample property file</p>
- <div class="source"><pre><pre> org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
- org.apache.ws.security.crypto.merlin.keystore.type=pkcs12
- org.apache.ws.security.crypto.merlin.keystore.password=security
- org.apache.ws.security.crypto.merlin.keystore.alias=16c73ab6-b892-458f-abf5-2f875f74882e
- org.apache.ws.security.crypto.merlin.alias.password=security
- org.apache.ws.security.crypto.merlin.file=keys/x509.PFX.MSFT
- </pre>
-</pre></div>
- <p>org.apache.ws.security.crypto.provider defines the implementation of
-the org.apache.ws.security.components.crypto.Crypto interface to provide the
-crypto information required by WSS4J. The other properties defined are the
-configuration properties used by the implementation class
-(org.apache.ws.security.components.crypto.Merlin). <a name="ref"></a><a name="references"></a></p></div><div class="subsection"><a name="References"></a><h3>References</h3><p>1. <a href="http://ws.apache.org/wss4j" class="externalLink" title="External Link">Apache WSS4J -Home</a></p><p><a name="examples"></a></p></div><div class="subsection"><a name="Examples"></a><h3>Examples</h3><p id="ex1">Example 1: An outflow configuration to add a timestamp, sing and
-encrypt the message once</p><p><img alt="" src="sec-conf/out-sample.png"></img></p><p id="ex2">Example 2: An outflow configuration to sign the message twice and
-add a timestamp</p><p><img alt="" src="sec-conf/out-sample2.png"></img></p><p id="ex3">Example 3: An inflow configuration to decrypt, verify signature
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis2/Java - Rampart : WS-Security module for Axis2</title><style type="text/css" media="all">
+ @import url("../../../style/maven-base.css");
+
+ @import url("../../../style/maven-theme.css");</style><link rel="stylesheet" href="../../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis2" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
+ Last published: 04 May 2007
+ | Doc for 1.2</div><div class="xright">
+
+ <a href="../../../index.html">Axis2/Java</a>
+
+
+
+ <span class="separator">|</span>
+
+
+ <a href="http://ws.apache.org/axis2/c" class="externalLink" title="External Link">Axis2/C</a>
+
+
+
+ <span class="separator">|</span>
+
+
+ <a href="http://ws.apache.org" class="externalLink" title="External Link">Apache WS</a>
+
+
+
+ <span class="separator">|</span>
+
+
+ <a href="http://www.apache.org" class="externalLink" title="External Link">Apache </a>
+ </div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis2_Java"><h5>Axis2/Java</h5><ul><li class="none"><a href="../../../index.html">Home</a></li></ul></div><div id="menuDownloads"><h5>Downloads</h5><ul><li class="none"><a href="../../../download.cgi">Releases</a></li><li class="none"><a href="../../../modules/index.html">Modules</a></li><li class="none"><a href="../../../tools/index.html">Tools</a></li></ul></div><div id="menuDocumentation"><h5>Documentation</h5><ul><li class="expanded"><a href="../../../1_2/contents.html">Version 1.2</a><ul><li class="none"><a href="../../../1_2/toc.html">Table of Contents</a></li><li class="none"><a href="../../../1_2/installationguide.html">Installation Guide</a></li><li class="none"><a href="../../../1_2/quickstartguide.html">QuickStart Guide</a></li><li class="none"><a href="../../../1_2/userguide.html">User Guide</a></li><li class="none"><a href="../../../1_2/pojoguide.html">POJO
Guide</a></li><li class="none"><a href="../../../1_2/spring.html">Spring Guide</a></li><li class="none"><a href="../../../1_2/webadminguide.html">Web Administrator's Guide</a></li><li class="none"><a href="../../../1_2/migration.html">Migration Guide (from Axis1)</a></li></ul></li><li class="none"><a href="../../../1_1_1/contents.html">Version 1.1.1</a></li><li class="none"><a href="../../../1_1/contents.html">Version 1.1</a></li><li class="none"><a href="../../../1_0/index.html">Version 1.0</a></li><li class="none"><a href="../../../0_95/index.html">Version 0.95</a></li><li class="none"><a href="../../../0_94/index.html">Version 0.94</a></li><li class="none"><a href="../../../0_93/index.html">Version 0.93</a></li></ul></div><div id="menuResources"><h5>Resources</h5><ul><li class="none"><a href="../../../faq.html">FAQ</a></li><li class="none"><a href="../../../articles.html">Articles</a></li><li class="none"><a href="http://wiki.apache.org/ws/FrontPage/Axis2/" class="externa
lLink" title="External Link">Wiki</a></li><li class="none"><a href="../../../refLib.html">Reference Library</a></li><li class="none"><a href="http://ws.apache.org/axis2/1_2/api/index.html" class="externalLink" title="External Link">Online Java Docs</a></li></ul></div><div id="menuGet_Involved"><h5>Get Involved</h5><ul><li class="none"><a href="../../../overview.html">Overview</a></li><li class="none"><a href="../../../svn.html">Checkout the Source</a></li><li class="none"><a href="../../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../../siteHowTo.html">Build the Site</a></li></ul></div><div id="menuProject_Information"><h5>Project Information</h5><ul><li class="none"><a href="../../../team-list.html">Project Team</a></li><li class="none"><a href="../../../issue-tracking.html">Issue Tracking</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/
axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li><li class="none"><a href="../../../thanks.html">Acknowledgements</a></li><li class="none"><a href="http://www.apache.org/licenses/LICENSE-2.0.html" class="externalLink" title="External Link">License</a></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Securing_SOAP_Messages_with_WSS4J"></a><h2>Securing SOAP Messages with WSS4J</h2><p><em>-For Axis2 Version 1.0</em></p><p>Axis2 comes with a module based on WSS4J [1] to provide WS-Security
+features, called "rampart". This document explains how to engage and
+configure rampart module.</p><div class="subsection"><a name="Content"></a><h3>Content</h3><ul>
+ <li><a href="#intro">Introduction</a></li>
+ <li><a href="#outflowsecurity">OutflowSecurity Parameter</a></li>
+ <li><a href="#inflowsecurity">InflowSecurity Parameter</a></li>
+ <li><a href="#references">References</a></li>
+ <li><a href="#examples">Examples</a></li>
+</ul><p><a name="intro"></a></p></div><div class="subsection"><a name="Introduction"></a><h3>Introduction</h3><p>Since rampart module inserts handlers in the system specific pre-dispatch
+phase, it must be engaged globally. But it is possible to activate rampart
+module for the inflow or the outflow when required by the service or the
+clients.</p><p>The rampart module (rampart.mar) is available with the Axis2 release.</p><p>First it should be engaged by inserting the following in the axis2.xml
+file.</p>
+ <div class="source"><pre><pre> <module ref="rampart"/></pre>
+</pre></div>
+ <p>The web admin interface can be used when Axis2 is deployed in a servlet
+container such as Apache Tomcat.</p><p>At the server it is possible to provide security on a per service basis.
+The configuration parameters should be set in the service.xml file of the
+service. The client side config parameters should be set in the axis2.xml of
+the client's Axis2 repository.</p><p>Aegis module uses two parameters:</p><ul>
+ <li>OutflowSecurity</li>
+ <li>InflowSecurity</li>
+</ul><p>
+The configuration that can go in each of these parameters are described
+below: <a name="outflowsecurity"></a></p></div><div class="subsection"><a name="OutflowSecurity_Parameter"></a><h3>OutflowSecurity Parameter</h3><p>
+This parameter is used to configure the outflow security handler. The outflow
+handler can be invoked more than once in the outflow one can provide
+configuration for each of these invocations. The 'action' element describes
+one of these configurations. Therefore the 'OutflowSecurity' parameter can
+contain more than one 'action' elements. The schema of this 'action' element
+is available <a href="sec-conf/out-action.xsd">here</a>.
+
+</p><p>An outflow configuration to add a timestamp, sing and encrypt the message
+once, is shown in<a href="#ex1"> Example 1</a> and <a href="#ex1"> Example
+2</a> shows how to sign the message twice by chaining the outflow handler
+(using two 'action' elements)</p><p>Following is a description of the elements that can go in an 'action'
+element of the OutflowSecurity parameter</p><br></br><table class="bodyTable"><tbody>
+ <tr class="b"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
+ <tr class="a"><td>items</td><td>Security actions for the inflow</td><td>Add a Timestamp, Sign the SOAP body and Encrypt the SOAP body <br></br>
+ <items> Timestamp Signature Encrypt</items></td></tr>
+ <tr class="b"><td>user</td><td>The user's name</td><td>Set alias of the key to be used to sign<br></br>
+ <user> bob</user></td></tr>
+ <tr class="a"><td>passwordCallbackClass</td><td>Callback class used to provide the password required to create the
+ UsernameToken or to sign the message</td><td><passwordCallbackClass>
+ org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
+ <tr class="b"><td>signaturePropFile</td><td>property file used to get the signature parameters such as crypto
+ provider, keystore and its password</td><td>Set example.properties file as the signature property file<br></br>
+ <signaturePropFile>
+ example.properties</signaturePropFile></td></tr>
+ <tr class="a"><td>signatureKeyIdentifier</td><td>Key identifier to be used in referring the key in the signature</td><td>Use the serial number of the certificate<br></br>
+ <signatureKeyIdentifier>
+ IssuerSerial</signatureKeyIdentifier></td></tr>
+ <tr class="b"><td>encryptionKeyIdentifier</td><td>Key identifier to be used in referring the key in encryption</td><td>Use the serial number of the certificate <br></br>
+ <encryptionKeyIdentifier>IssuerSerial</encryptionKeyIdentifier></td></tr>
+ <tr class="a"><td>encryptionUser</td><td>The user's name for encryption.</td><td><br></br>
+ <encryptionUser>alice</encryptionUser></td></tr>
+ <tr class="b"><td>encryptionSymAlgorithm</td><td>Symmetric algorithm to be used for encryption</td><td>Use AES-128<br></br>
+ <encryptionSymAlgorithm>
+ http://www.w3.org/2001/04/xmlenc#aes128-cbc</encryptionSymAlgorithm></td></tr>
+ <tr class="a"><td>encryptionKeyTransportAlgorithm</td><td>Key encryption algorithm</td><td>Use RSA-OAEP<br></br>
+ <parameter name="encryptionSymAlgorithm">
+ http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p</parameter></td></tr>
+ <tr class="b"><td>signatureParts</td><td>Sign multiple parts in the SOAP message</td><td>Sign Foo and Bar elements qualified by "http://app.ns/ns"<br></br>
+ <signatureParts>
+ {Element}{http://app.ns/ns}Foo;{Element}{http://app.ns/ns}Bar
+ </signatureParts></td></tr>
+ <tr class="a"><td>optimizeParts</td><td>MTOM Optimize the elements specified by the XPath query</td><td>Optimize the CipherValue<br></br>
+ <optimizeParts>
+ //xenc:EncryptedData/xenc:CipherData/xenc:CipherValue
+ </optimizeParts></td></tr>
+ </tbody></table><p><a name="inflowsecurity"></a></p></div><div class="subsection"><a name="InflowSecurity_Parameter"></a><h3>InflowSecurity Parameter</h3><p>This parameter is used to configure the inflow security handler. The
+'action' element is used to encapsulate the configuration elements here as
+well. The schema of the 'action' element is available here. <a href="#ex3">Example 3</a> shows the configuration to decrypt, verify
+signature and validate timestamp.</p><table class="bodyTable"><tbody>
+ <tr class="b"><td><b>Parameter</b></td><td><b>Description</b></td><td><b>Example</b></td></tr>
+ <tr class="a"><td>items</td><td>Security actions for the inflow</td><td>first the incoming message should be decrypted and then the
+ signatures should be verified and should be checked for the
+ availability of the Timestamp <br></br>
+ <items> Timestamp Signature Encrypt</items></td></tr>
+ <tr class="b"><td>passwordCallbackClass</td><td>Callback class used to obtain password for decryption and
+ UsernameToken verification</td><td><br></br>
+ <passwordCallbackClass>
+ org.apache.axis2.security.PWCallback</passwordCallbackClass></td></tr>
+ <tr class="a"><td>signaturePropFile</td><td>Property file used for signature verification</td><td><br></br>
+ <signaturePropFile>
+ sig.properties</signaturePropFile></td></tr>
+ <tr class="b"><td>decryptionPropFile</td><td>Property file used for decryption</td><td><br></br>
+ <decryptionPropFile>
+ dec.properties</decryptionPropFile></td></tr>
+ </tbody></table><br></br><p>Please note that the '.properties' files used in properties such as
+OutSignaturePropFile are the same property files that are using in the WSS4J
+project. Following shows the properties defined in a sample property file</p>
+ <div class="source"><pre><pre> org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
+ org.apache.ws.security.crypto.merlin.keystore.type=pkcs12
+ org.apache.ws.security.crypto.merlin.keystore.password=security
+ org.apache.ws.security.crypto.merlin.keystore.alias=16c73ab6-b892-458f-abf5-2f875f74882e
+ org.apache.ws.security.crypto.merlin.alias.password=security
+ org.apache.ws.security.crypto.merlin.file=keys/x509.PFX.MSFT
+ </pre>
+</pre></div>
+ <p>org.apache.ws.security.crypto.provider defines the implementation of
+the org.apache.ws.security.components.crypto.Crypto interface to provide the
+crypto information required by WSS4J. The other properties defined are the
+configuration properties used by the implementation class
+(org.apache.ws.security.components.crypto.Merlin). <a name="ref"></a><a name="references"></a></p></div><div class="subsection"><a name="References"></a><h3>References</h3><p>1. <a href="http://ws.apache.org/wss4j" class="externalLink" title="External Link">Apache WSS4J -Home</a></p><p><a name="examples"></a></p></div><div class="subsection"><a name="Examples"></a><h3>Examples</h3><p id="ex1">Example 1: An outflow configuration to add a timestamp, sing and
+encrypt the message once</p><p><img alt="" src="sec-conf/out-sample.png"></img></p><p id="ex2">Example 2: An outflow configuration to sign the message twice and
+add a timestamp</p><p><img alt="" src="sec-conf/out-sample2.png"></img></p><p id="ex3">Example 3: An inflow configuration to decrypt, verify signature
and validate timestamp</p><p><img alt="" src="sec-conf/in-sample.png"></img></p></div></div></div></div><div class="clear"><hr></hr></div><div id="footer"><div class="xright">© 2004-2007, Apache Software Foundation</div><div class="clear"><hr></hr></div></div></body></html>
\ No newline at end of file
Modified: webservices/axis2/site/modules/wss4j/index.html
URL: http://svn.apache.org/viewvc/webservices/axis2/site/modules/wss4j/index.html?rev=652665&r1=652664&r2=652665&view=diff
==============================================================================
--- webservices/axis2/site/modules/wss4j/index.html (original)
+++ webservices/axis2/site/modules/wss4j/index.html Thu May 1 14:20:27 2008
@@ -1,12 +1,12 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis 2.0 - :: Axis2 - WSS4J Module ::</title><style type="text/css" media="all">
- @import url("../../style/maven-base.css");
-
- @import url("../../style/maven-theme.css");</style><link rel="stylesheet" href="../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis 2.0" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
- Last published: 23 March 2006
- | Doc for 0.95</div><div class="xright"></div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis_2_0"><h5>Axis 2.0</h5><ul><li class="none"><a href="../../index.html">Home</a></li><li class="expanded"><a href="../../">Download Axis2</a><ul><li class="none"><a href="../../download.cgi">Releases</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li></ul></li><li class="expanded"><a href="../../">Documentation</a><ul><li class="none"><a href="../../0_93/index.html">Version 0.93</a></li><li class="none"><a href="../../0_94/index.html">Version 0.94</a></li><li class="none"><a href="../../0_95/index.html">Version 0.95</a></li></ul></li><li class="expanded"><a href="../../overview.html">Get Involved</a><ul><li class="none"><a href="../../svn.html">Checkout the Source</a></li><li class="none"><a href=
"../../siteHowTo.html">Build the Site</a></li><li class="none"><a href="../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../refLib.html">Reference Library</a></li><li class="none"><a href="../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../faq.html">FAQ</a></li></ul></li><li class="none"><a href="../../modules/index.html">Modules</a></li><li class="none"><a href="../../thanks.html">Acknowledgements</a></li><li class="expanded"><a href="../../">Project Information</a><ul><li class="none"><a href="../../team-list.html">Project Team</a></li><li class="none"><a href="../../issue-tracking.html">Issue Tracking</a></li></ul></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Axis2_-_WSS4J_Module"></a><h2>Axis2 - WSS4J Module
</h2><p>This is an implementation of WS-Security on Axis2. </p><div class="subsection"><a name="Documentation"></a><h3>Documentation</h3><ul>
- <li>Version 0.94
- <ul>
- <li><a href="0.94/security-module.html">User Guide</a> </li>
- </ul>
- </li>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><title>Axis 2.0 - :: Axis2 - WSS4J Module ::</title><style type="text/css" media="all">
+ @import url("../../style/maven-base.css");
+
+ @import url("../../style/maven-theme.css");</style><link rel="stylesheet" href="../../style/print.css" type="text/css" media="print"></link><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></meta></head><body class="composite"><div id="banner"><a href="http://www.apache.org/" id="organizationLogo"><img alt="Apache Software Foundation" src="http://www.apache.org/images/asf-logo.gif"></img></a><a href="http://ws.apache.org/axis2/" id="projectLogo"><img alt="Apache Axis 2.0" src="http://ws.apache.org/axis2/images/axis.jpg"></img></a><div class="clear"><hr></hr></div></div><div id="breadcrumbs"><div class="xleft">
+ Last published: 23 March 2006
+ | Doc for 0.95</div><div class="xright"></div><div class="clear"><hr></hr></div></div><div id="leftColumn"><div id="navcolumn"><div id="menuAxis_2_0"><h5>Axis 2.0</h5><ul><li class="none"><a href="../../index.html">Home</a></li><li class="expanded"><a href="../../">Download Axis2</a><ul><li class="none"><a href="../../download.cgi">Releases</a></li><li class="none"><a href="http://svn.apache.org/viewcvs.cgi/webservices/axis2/trunk/?root=Apache-SVN" class="externalLink" title="External Link">Source Code</a></li></ul></li><li class="expanded"><a href="../../">Documentation</a><ul><li class="none"><a href="../../0_93/index.html">Version 0.93</a></li><li class="none"><a href="../../0_94/index.html">Version 0.94</a></li><li class="none"><a href="../../0_95/index.html">Version 0.95</a></li></ul></li><li class="expanded"><a href="../../overview.html">Get Involved</a><ul><li class="none"><a href="../../svn.html">Checkout the Source</a></li><li class="none"><a href=
"../../siteHowTo.html">Build the Site</a></li><li class="none"><a href="../../guidelines.html">Developer Guidelines</a></li><li class="none"><a href="../../refLib.html">Reference Library</a></li><li class="none"><a href="../../mail-lists.html">Mailing Lists</a></li><li class="none"><a href="../../faq.html">FAQ</a></li></ul></li><li class="none"><a href="../../modules/index.html">Modules</a></li><li class="none"><a href="../../thanks.html">Acknowledgements</a></li><li class="expanded"><a href="../../">Project Information</a><ul><li class="none"><a href="../../team-list.html">Project Team</a></li><li class="none"><a href="../../issue-tracking.html">Issue Tracking</a></li></ul></li></ul></div><a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy"><img alt="Built by Maven" src="../../images/logos/maven-button-1.png"></img></a></div></div><div id="bodyColumn"><div class="contentBox"><div class="section"><a name="Axis2_-_WSS4J_Module"></a><h2>Axis2 - WSS4J Module
</h2><p>This is an implementation of WS-Security on Axis2. </p><div class="subsection"><a name="Documentation"></a><h3>Documentation</h3><ul>
+ <li>Version 0.94
+ <ul>
+ <li><a href="0.94/security-module.html">User Guide</a> </li>
+ </ul>
+ </li>
</ul></div></div></div></div><div class="clear"><hr></hr></div><div id="footer"><div class="xright">© 2004-2006, Apache Software Foundation</div><div class="clear"><hr></hr></div></div></body></html>
\ No newline at end of file
Modified: webservices/axis2/site/overview.html
URL: http://svn.apache.org/viewvc/webservices/axis2/site/overview.html?rev=652665&r1=652664&r2=652665&view=diff
==============================================================================
--- webservices/axis2/site/overview.html (original)
+++ webservices/axis2/site/overview.html Thu May 1 14:20:27 2008
@@ -9,9 +9,10 @@
-<html>
+
+<html xmlns="http://www.w3.org/1999/xhtml">
<head>
- <title>Apache Axis2 - </title>
+ <title>Maven - </title>
<style type="text/css" media="all">
@import url("./css/maven-base.css");
@import url("./css/maven-theme.css");
@@ -29,7 +30,7 @@
</a>
<span id="bannerRight">
- <img src="http://ws.apache.org/axis2/images/axis.jpg" alt="" />
+ <img src="../images/axis.jpg" alt="" />
</span>
<div class="clear">
@@ -44,23 +45,25 @@
+
<div class="xleft">
- Last Published: 08/13/2007
+ Last Published: 2008-05-01
</div>
- <div class="xright"> <a href="index.html">Axis2/Java</a>
- |
- <a href="http://ws.apache.org/axis2/c">Axis2/C</a>
- |
- <a href="../../">Apache WS</a>
- |
- <a href="http://www.apache.org">Apache</a>
-
+ <div class="xright"> <a href="index.html">Axis2/Java</a>
+ |
+ <a href="../c">Axis2/C</a>
+ |
+ <a href="../..">Apache WS</a>
+ |
+ <a href="http://www.apache.org" class="externalLink">Apache</a>
+
+
</div>
<div class="clear">
<hr/>
@@ -75,30 +78,31 @@
+
<h5>Axis2/Java</h5>
- <ul>
+ <ul>
<li class="none">
- <a href="index.html">Home</a>
- </li>
+ <a href="index.html">Home</a>
+ </li>
</ul>
- <h5>Downloads</h5>
- <ul>
+ <h5>Downloads</h5>
+ <ul>
<li class="none">
- <a href="download.cgi">Releases</a>
- </li>
+ <a href="download.cgi">Releases</a>
+ </li>
<li class="none">
- <a href="modules/index.html">Modules</a>
- </li>
+ <a href="modules/index.html">Modules</a>
+ </li>
<li class="none">
- <a href="tools/index.html">Tools</a>
- </li>
+ <a href="tools/index.html">Tools</a>
+ </li>
</ul>
- <h5>Documentation</h5>
- <ul>
+ <h5>Documentation</h5>
+ <ul>
@@ -117,147 +121,157 @@
+
+
<li class="expanded">
- <a href="1_3/contents.html">Version 1.3</a>
- <ul>
+ <a href="1_4/contents.html">Version 1.4</a>
+ <ul>
<li class="none">
- <a href="1_3/toc.html">Table of Contents</a>
- </li>
+ <a href="1_4/toc.html">Table of Contents</a>
+ </li>
<li class="none">
- <a href="1_3/installationguide.html">Installation Guide</a>
- </li>
+ <a href="1_4/installationguide.html">Installation Guide</a>
+ </li>
<li class="none">
- <a href="1_3/quickstartguide.html">QuickStart Guide</a>
- </li>
+ <a href="1_4/quickstartguide.html">QuickStart Guide</a>
+ </li>
<li class="none">
- <a href="1_3/userguide.html">User Guide</a>
- </li>
+ <a href="1_4/userguide.html">User Guide</a>
+ </li>
<li class="none">
- <a href="1_3/pojoguide.html">POJO Guide</a>
- </li>
+ <a href="1_4/jaxws-guide.html">JAXWS Guide</a>
+ </li>
<li class="none">
- <a href="1_3/spring.html">Spring Guide</a>
- </li>
+ <a href="1_4/pojoguide.html">POJO Guide</a>
+ </li>
<li class="none">
- <a href="1_3/webadminguide.html">Web Administrator's Guide</a>
- </li>
+ <a href="1_4/spring.html">Spring Guide</a>
+ </li>
<li class="none">
- <a href="1_3/migration.html">Migration Guide (from Axis1)</a>
- </li>
+ <a href="1_4/webadminguide.html">Web Administrator's Guide</a>
+ </li>
+
+ <li class="none">
+ <a href="1_4/migration.html">Migration Guide (from Axis1)</a>
+ </li>
</ul>
</li>
<li class="none">
- <a href="1_2/contents.html">Version 1.2</a>
- </li>
+ <a href="1_3/contents.html">Version 1.3</a>
+ </li>
<li class="none">
- <a href="1_1_1/contents.html">Version 1.1.1</a>
- </li>
+ <a href="1_2/contents.html">Version 1.2</a>
+ </li>
<li class="none">
- <a href="1_1/contents.html">Version 1.1</a>
- </li>
+ <a href="1_1_1/contents.html">Version 1.1.1</a>
+ </li>
<li class="none">
- <a href="1_0/index.html">Version 1.0</a>
- </li>
+ <a href="1_1/contents.html">Version 1.1</a>
+ </li>
<li class="none">
- <a href="0_95/index.html">Version 0.95</a>
- </li>
+ <a href="1_0/index.html">Version 1.0</a>
+ </li>
<li class="none">
- <a href="0_94/index.html">Version 0.94</a>
- </li>
+ <a href="0_95/index.html">Version 0.95</a>
+ </li>
<li class="none">
- <a href="0_93/index.html">Version 0.93</a>
- </li>
+ <a href="0_94/index.html">Version 0.94</a>
+ </li>
+
+ <li class="none">
+ <a href="0_93/index.html">Version 0.93</a>
+ </li>
</ul>
- <h5>Resources</h5>
- <ul>
+ <h5>Resources</h5>
+ <ul>
<li class="none">
- <a href="faq.html">FAQ</a>
- </li>
+ <a href="faq.html">FAQ</a>
+ </li>
<li class="none">
- <a href="articles.html">Articles</a>
- </li>
+ <a href="articles.html">Articles</a>
+ </li>
<li class="none">
- <a href="http://wiki.apache.org/ws/FrontPage/Axis2/">Wiki</a>
- </li>
+ <a href="http://wiki.apache.org/ws/FrontPage/Axis2/" class="externalLink">Wiki</a>
+ </li>
<li class="none">
- <a href="refLib.html">Reference Library</a>
- </li>
+ <a href="refLib.html">Reference Library</a>
+ </li>
<li class="none">
- <a href="http://ws.apache.org/axis2/1_3/api/index.html">Online Java Docs</a>
- </li>
+ <a href="../1_4/api/index.html">Online Java Docs</a>
+ </li>
</ul>
- <h5>Get Involved</h5>
- <ul>
+ <h5>Get Involved</h5>
+ <ul>
<li class="none">
<strong>Overview</strong>
</li>
<li class="none">
- <a href="svn.html">Checkout the Source</a>
- </li>
+ <a href="svn.html">Checkout the Source</a>
+ </li>
<li class="none">
- <a href="mail-lists.html">Mailing Lists</a>
- </li>
+ <a href="mail-lists.html">Mailing Lists</a>
+ </li>
<li class="none">
- <a href="release-process.html">Release Process</a>
- </li>
+ <a href="release-process.html">Release Process</a>
+ </li>
<li class="none">
- <a href="guidelines.html">Developer Guidelines</a>
- </li>
+ <a href="guidelines.html">Developer Guidelines</a>
+ </li>
<li class="none">
- <a href="siteHowTo.html">Build the Site</a>
- </li>
+ <a href="siteHowTo.html">Build the Site</a>
+ </li>
</ul>
- <h5>Project Information</h5>
- <ul>
+ <h5>Project Information</h5>
+ <ul>
<li class="none">
- <a href="team-list.html">Project Team</a>
- </li>
+ <a href="team-list.html">Project Team</a>
+ </li>
<li class="none">
- <a href="issue-tracking.html">Issue Tracking</a>
- </li>
+ <a href="issue-tracking.html">Issue Tracking</a>
+ </li>
<li class="none">
- <a href="http://svn.apache.org/viewcvs.cgi/webservices/axis2/trunk/?root=Apache-SVN">Source Code</a>
- </li>
+ <a href="http://svn.apache.org/viewcvs.cgi/webservices/axis2/trunk/?root=Apache-SVN" class="externalLink">Source Code</a>
+ </li>
<li class="none">
- <a href="thanks.html">Acknowledgements</a>
- </li>
+ <a href="thanks.html">Acknowledgements</a>
+ </li>
<li class="none">
- <a href="http://www.apache.org/licenses/LICENSE-2.0.html">License</a>
- </li>
+ <a href="http://www.apache.org/licenses/LICENSE-2.0.html" class="externalLink">License</a>
+ </li>
</ul>
- <a href="http://maven.apache.org/" title="Built by Maven" id="poweredBy">
+ <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
<img alt="Built by Maven" src="./images/logos/maven-feather.png"></img>
</a>
@@ -267,51 +281,48 @@
+
</div>
</div>
<div id="bodyColumn">
<div id="contentBox">
- <html xmlns="http://www.w3.org/1999/xhtml">
-<head>
-<meta name="generator" content="HTML Tidy for Windows (vers 14 June 2007), see www.w3.org"></meta>
-Overview
-<link href="css/axis-docs.css" rel="stylesheet" type="text/css" media="all"></link>
-</head>
-
-<h2>Overview</h2>
-<p>Every volunteer project obtains its strength from the people
+ <html xmlns="http://www.w3.org/1999/xhtml"><head><meta name="generator" content="HTML Tidy for Windows (vers 14 June 2007), see www.w3.org">Overview<link href="css/axis-docs.css" rel="stylesheet" type="text/css" media="all"></head><h2>Overview</h2><p>Every volunteer project obtains its strength from the people
involved in it. We invite you to participate as much or as little
as you choose. The roles and responsibilities that people can
assume in the project are based on merit. Everybody's input
matters!</p>
<p>There are a variety of ways to participate. Regardless of how
you choose to participate, we suggest you join some or all of our
-<a href="mail-lists.html">mailing lists</a>.</p>
-<h2><b>Use the Products and Give Us Feedback</b></h2>
-<p>Using the products, reporting bugs, making feature requests,
+<a href="mail-lists.html">mailing lists</a>
+.</p>
+<h2><b>Use the Products and Give Us Feedback</b>
+</h2><p>Using the products, reporting bugs, making feature requests,
etc. is by far the most important role. It's your feedback that
allows the technology to evolve.</p>
-<ul>
-<li><a href="mail-lists.html">Join Mailing Lists</a></li>
-<li><a href="http://ws.apache.org/axis2/download.cgi">Download Binary Builds</a></li>
-<li><a href="http://issues.apache.org/jira/browse/AXIS2">Report
-bugs/Request additional features</a></li>
+<ul><li><a href="mail-lists.html">Join Mailing Lists</a>
+</li>
+<li><a class="externalLink" href="http://ws.apache.org/axis2/download.cgi">Download Binary Builds</a>
+</li>
+<li><a class="externalLink" href="http://issues.apache.org/jira/browse/AXIS2">Report
+bugs/Request additional features</a>
+</li>
</ul>
-<h2><b>Contribute Code or Documentation Patches</b></h2>
-In this role, you participate in the actual development of the
+<h2><b>Contribute Code or Documentation Patches</b>
+</h2><p>In this role, you participate in the actual development of the
code. If this is the type of role you'd like to play, here are some
-steps (in addition to the ones above) to get you started:
-<ul>
-<li>Read our <a href="guidelines.html">developer guidelines</a> and <a href="release-process.html">release process</a></li>
-<li>Review the <a href="refLib.html">reference library</a></li>
-<li><a href="http://svn.apache.org/viewvc/webservices/axis2/">
-View the Source Code</a></li>
-<li><a href="svn.html">Access SVN Repository</a></li>
+steps (in addition to the ones above) to get you started:</p>
+<ul><li>Read our <a href="guidelines.html">developer guidelines</a>
+ and <a href="release-process.html">release process</a>
+</li>
+<li>Review the <a href="refLib.html">reference library</a>
+</li>
+<li><a class="externalLink" href="http://svn.apache.org/viewvc/webservices/axis2/">
+View the Source Code</a>
+</li>
+<li><a href="svn.html">Access SVN Repository</a>
+</li>
</ul>
-
-<div id="pdf" align="right"></div>
-
-</html>
+<div id="pdf" align="right"></div></html>
</div>
</div>
<div class="clear">
@@ -319,7 +330,7 @@
</div>
<div id="footer">
<div class="xright">©
- 2004-2007
+ 2004-2008
Apache Software Foundation
@@ -329,10 +340,11 @@
+
</div>
<div class="clear">
<hr/>
</div>
</div>
</body>
-</html>
\ No newline at end of file
+</html>
---------------------------------------------------------------------
To unsubscribe, e-mail: axis-cvs-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-cvs-help@ws.apache.org