Certificate Handling - Policy

[Sandeep Raman <sa...@tcs.com>]

Hi Venkat,

I am unable to find any tuscany sample which deals with certificates for 
Policy.

I create a component service as follows:

  <component name="TwoWSService">
        <implementation.java class="helloworld.Compose" />
        <service name="Compose" requires = "integrity">
          <binding.ws uri="http://localhost:8085/TwoWSService" /> 
        </service>
    </component>

I send a soap request with an header information pertaining to the x509 
certificate key, but it doesnt seem to be reading it. I am unable to find 
if anything is missing in the intents or the composite.


For the @requires , i have in definitions.xml as follows, is any change 
required in the below:

<sca:policySet name="hw:wsSecurityPolicyForIntegrity"
        provides="integrity"
        appliesTo="sca:binding.ws">
        <wsp:Policy wsu:Id="SignOnly" 
 
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" 

                xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
                <wsp:ExactlyOne>
                        <wsp:All>
                                <sp:AsymmetricBinding 
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                                        <wsp:Policy>
                                                <sp:InitiatorToken>
                                                        <wsp:Policy>
 <sp:X509Token 
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
 <wsp:Policy>
 <sp:WssX509V3Token10/>
 </wsp:Policy>
 </sp:X509Token>
                                                        </wsp:Policy>
                                                </sp:InitiatorToken>
                                                <sp:RecipientToken>
                                                        <wsp:Policy>
 <sp:X509Token 
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
 <wsp:Policy>
 <sp:WssX509V3Token10/>
 </wsp:Policy>
 </sp:X509Token>
                                                        </wsp:Policy>
                                                </sp:RecipientToken>
                                                <sp:AlgorithmSuite>
                                                        <wsp:Policy>
 <sp:TripleDesRsa15/>
                                                        </wsp:Policy>
                                                </sp:AlgorithmSuite>
                                                <sp:Layout>
                                                        <wsp:Policy>
 <sp:Strict/>
                                                        </wsp:Policy>
                                                </sp:Layout>
                                                <sp:IncludeTimestamp/>
 <sp:OnlySignEntireHeadersAndBody/>
                                        </wsp:Policy>
                                </sp:AsymmetricBinding>
                                <sp:Wss10 
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                                        <wsp:Policy>
 <sp:MustSupportRefKeyIdentifier/>
 <sp:MustSupportRefIssuerSerial/>
                                        </wsp:Policy>
                                </sp:Wss10>
                                <sp:SignedParts 
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                                        <sp:Body/>
                                </sp:SignedParts>
 
                                <ramp:RampartConfig 
xmlns:ramp="http://ws.apache.org/rampart/policy"> 
                                        <ramp:user>apache</ramp:user>
 <ramp:encryptionUser>apache</ramp:encryptionUser>
 
<ramp:passwordCallbackClass>helloworld.ServerPWCBHandler</ramp:passwordCallbackClass>
 
                                        <ramp:signatureCrypto>
                                                <ramp:crypto 
provider="org.apache.ws.security.components.crypto.Merlin">
                                                        <ramp:property 
name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
                                                        <ramp:property 
name="org.apache.ws.security.crypto.merlin.file">helloworldKeys.jks</ramp:property>
                                                        <ramp:property 
name="org.apache.ws.security.crypto.merlin.keystore.password">apache</ramp:property>
                                                </ramp:crypto>
                                        </ramp:signatureCrypto>
                                </ramp:RampartConfig>
 
                        </wsp:All>
                </wsp:ExactlyOne>
        </wsp:Policy>
 </sca:policySet>


Regards
Sandeep Raman.
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you