You are viewing a plain text version of this content. The canonical link for it is here.
Posted to rampart-dev@ws.apache.org by Edson Tavares de Camargo <ca...@stela.org.br> on 2008/06/05 20:49:38 UTC
encrypt the usernameToken?
Hi All
Is it possible to encrypt only the UsernameToken (or the security
header)? I have looked for samples, but I haven't found them.I am using
the rampart 1.2 module.
It is a requirement of my system to use UsernameToken with plain text
password. So, I want to encrypt the security header. Otherwise, I would
have to use https and this is not a option.
Thanks in advance!
Cheers
Edson
--
Edson Tavares de Camargo - Instituto Stela
Florianópolis - SC - Brasil
(48) 3239 2572
camargo@stela.org.br
Re: encrypt the usernameToken?
Posted by Edson Tavares de Camargo <ca...@stela.org.br>.
Nandana,
I downloaded the Rampart 1.4 and now I have anothers questions:
I have read the rampart 1.4 documentation and I couldn't find a encrypt
usernameToken sample. But, if I am not wrong, will I have to write the
security policy to encrypt the usernameToken, right? There are the
option of using basic rampart configuration instead of WS-SecurityPolicy?
Thanks again!
ps: I am using axis2 v1.2. There is the possibility of using axis1.2
with rampart 1.4?
Edson
Edson Tavares de Camargo escreveu:
> Hi Nandana,
>
> Thanks for your answer. I am using axis2 v1.2. There is the
> possibility of using axis1.2 with rampart 1.4?
>
> Thanks,
>
> Edson
>
> Nandana Mihindukulasooriya escreveu:
>
>> Hi Edson,
>> Is there any possibility that you can use Ramaprt 1.4 ? What is the
>> Axis 2 version you are using ? In Rampart 1.4 , we encrypt the user name
>> token when it is not in a secured transport and when we have a necessary
>> encryption crypto information. You can download the Rampart 1.4 which is
>> being voted in here [1].
>>
>> regards,
>> nandana
>>
>> [1] - http://people.apache.org/~nandana/rampart-1.4/1.4/dist/
>>
>> On Thu, Jun 5, 2008 at 9:49 PM, Edson Tavares de Camargo <
>> camargo@stela.org.br> wrote:
>>
>>
>>
>>> Hi All
>>>
>>> Is it possible to encrypt only the UsernameToken (or the security
>>> header)?
>>> I have looked for samples, but I haven't found them.I am using the
>>> rampart
>>> 1.2 module.
>>>
>>> It is a requirement of my system to use UsernameToken with plain text
>>> password. So, I want to encrypt the security header. Otherwise, I
>>> would have
>>> to use https and this is not a option.
>>>
>>> Thanks in advance!
>>>
>>> Cheers
>>>
>>> Edson
>>>
>>> --
>>> Edson Tavares de Camargo - Instituto Stela
>>> Florianópolis - SC - Brasil
>>> (48) 3239 2572
>>> camargo@stela.org.br
>>>
>>>
>>>
>>
>>
>>
>>
>
>
--
Edson Tavares de Camargo - Instituto Stela
Florianópolis - SC - Brasil
(48) 3239 2572
camargo@stela.org.br
Re: encrypt the usernameToken?
Posted by Edson Tavares de Camargo <ca...@stela.org.br>.
Hi Nandana,
Thanks for your answer. I am using axis2 v1.2. There is the
possibility of using axis1.2 with rampart 1.4?
Thanks,
Edson
Nandana Mihindukulasooriya escreveu:
>Hi Edson,
> Is there any possibility that you can use Ramaprt 1.4 ? What is the
>Axis 2 version you are using ? In Rampart 1.4 , we encrypt the user name
>token when it is not in a secured transport and when we have a necessary
>encryption crypto information. You can download the Rampart 1.4 which is
>being voted in here [1].
>
>regards,
>nandana
>
>[1] - http://people.apache.org/~nandana/rampart-1.4/1.4/dist/
>
>On Thu, Jun 5, 2008 at 9:49 PM, Edson Tavares de Camargo <
>camargo@stela.org.br> wrote:
>
>
>
>>Hi All
>>
>>Is it possible to encrypt only the UsernameToken (or the security header)?
>>I have looked for samples, but I haven't found them.I am using the rampart
>>1.2 module.
>>
>>It is a requirement of my system to use UsernameToken with plain text
>>password. So, I want to encrypt the security header. Otherwise, I would have
>>to use https and this is not a option.
>>
>>Thanks in advance!
>>
>>Cheers
>>
>>Edson
>>
>>--
>>Edson Tavares de Camargo - Instituto Stela
>>Florianópolis - SC - Brasil
>>(48) 3239 2572
>>camargo@stela.org.br
>>
>>
>>
>>
>
>
>
--
Edson Tavares de Camargo - Instituto Stela
Florianópolis - SC - Brasil
(48) 3239 2572
camargo@stela.org.br
Re: encrypt the usernameToken?
Posted by Nandana Mihindukulasooriya <na...@gmail.com>.
Hi Edson,
Is there any possibility that you can use Ramaprt 1.4 ? What is the
Axis 2 version you are using ? In Rampart 1.4 , we encrypt the user name
token when it is not in a secured transport and when we have a necessary
encryption crypto information. You can download the Rampart 1.4 which is
being voted in here [1].
regards,
nandana
[1] - http://people.apache.org/~nandana/rampart-1.4/1.4/dist/
On Thu, Jun 5, 2008 at 9:49 PM, Edson Tavares de Camargo <
camargo@stela.org.br> wrote:
> Hi All
>
> Is it possible to encrypt only the UsernameToken (or the security header)?
> I have looked for samples, but I haven't found them.I am using the rampart
> 1.2 module.
>
> It is a requirement of my system to use UsernameToken with plain text
> password. So, I want to encrypt the security header. Otherwise, I would have
> to use https and this is not a option.
>
> Thanks in advance!
>
> Cheers
>
> Edson
>
> --
> Edson Tavares de Camargo - Instituto Stela
> Florianópolis - SC - Brasil
> (48) 3239 2572
> camargo@stela.org.br
>
>