You are viewing a plain text version of this content. The canonical link for it is here.
Posted to axis-cvs@ws.apache.org by ru...@apache.org on 2006/10/29 13:55:04 UTC
svn commit: r468891 - in /webservices/axis2/branches/java/1_1/modules/rahas:
./ sts-aar-resources/
Author: ruchithf
Date: Sun Oct 29 04:55:03 2006
New Revision: 468891
URL: http://svn.apache.org/viewvc?view=rev&rev=468891
Log:
Adding resources for STS .aar default configuration and removing org.apache.rahas.client.* stuff from the STS.aar
Added:
webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/
webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/rahas-sts.jks (with props)
webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/saml-issuer-config.xml
webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/sct-issuer-config.xml
webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/services.xml
webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-canceler-config.xml
webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-dispatcher-configuration.xml
Modified:
webservices/axis2/branches/java/1_1/modules/rahas/maven.xml
Modified: webservices/axis2/branches/java/1_1/modules/rahas/maven.xml
URL: http://svn.apache.org/viewvc/webservices/axis2/branches/java/1_1/modules/rahas/maven.xml?view=diff&rev=468891&r1=468890&r2=468891
==============================================================================
--- webservices/axis2/branches/java/1_1/modules/rahas/maven.xml (original)
+++ webservices/axis2/branches/java/1_1/modules/rahas/maven.xml Sun Oct 29 04:55:03 2006
@@ -14,7 +14,6 @@
<!-- Create the sts.aar : STATRT -->
<mkdir dir="target/sts"/>
- <mkdir dir="target/METS-INF"/>
<mkdir dir="target/sts/lib"/>
<!-- Copy classes -->
<copy todir="target/sts">
@@ -43,6 +42,10 @@
</jar>
<delete file="target/sts/META-INF/module.xml"/>
+ <delete includeEmptyDirs="true">
+ <fileset dir="target/sts/org/apache/rahas/client"/>
+ </delete>
+
<copy file="test-resources/trust/impl/sts-services.xml" toFile="target/sts/META-INF/services.xml"/>
<copy file="test-resources/trust/impl/sct-issuer-config.xml" toFile="target/sts/sct-issuer-config.xml"/>
@@ -54,9 +57,10 @@
<include name="**/*"/>
</jar>
- <delete includeEmptyDirs="true">
- <fileset dir="target/sts"/>
+ <delete includeEmptyDirs="true">
+ <fileset dir="target/sts"/>
</delete>
+
<!-- Create the sts.aar : END -->
</postGoal>
Added: webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/rahas-sts.jks
URL: http://svn.apache.org/viewvc/webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/rahas-sts.jks?view=auto&rev=468891
==============================================================================
Binary file - no diff available.
Propchange: webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/rahas-sts.jks
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Added: webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/saml-issuer-config.xml
URL: http://svn.apache.org/viewvc/webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/saml-issuer-config.xml?view=auto&rev=468891
==============================================================================
--- webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/saml-issuer-config.xml (added)
+++ webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/saml-issuer-config.xml Sun Oct 29 04:55:03 2006
@@ -0,0 +1,46 @@
+<saml-issuer-config>
+ <issuerName>Test_STS</issuerName>
+
+ <!-- alias of the issuer's private key -->
+ <issuerKeyAlias>ip</issuerKeyAlias>
+
+ <!-- password of the issuer's private key -->
+ <issuerKeyPassword>password</issuerKeyPassword>
+
+ <cryptoProperties>
+ <crypto provider="org.apache.ws.security.components.crypto.Merlin">
+ <property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</property>
+ <property name="org.apache.ws.security.crypto.merlin.file">rahas-sts.jks</property>
+ <property name="org.apache.ws.security.crypto.merlin.keystore.password">password</property>
+ </crypto>
+ </cryptoProperties>
+
+ <timeToLive>300000</timeToLive>
+
+ <keySize>256</keySize>
+
+ <addRequestedAttachedRef />
+ <addRequestedUnattachedRef />
+
+ <!--
+ Key computation mechanism
+ 1 - Use Request Entropy
+ 2 - Provide Entropy
+ 3 - Use Own Key
+ -->
+ <keyComputation>2</keyComputation>
+
+ <!--
+ proofKeyType element is valid only if the keyComputation is set to 3
+ i.e. Use Own Key
+
+ Valid values are: EncryptedKey & BinarySecret
+ -->
+ <proofKeyType>BinarySecret</proofKeyType>
+
+ <trusted-services>
+ <!-- The service name and the alias of the trusted cert to use -->
+ <service alias="bob">http://localhost:8080/axis2/services/STS</service>
+ </trusted-services>
+
+</saml-issuer-config>
Added: webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/sct-issuer-config.xml
URL: http://svn.apache.org/viewvc/webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/sct-issuer-config.xml?view=auto&rev=468891
==============================================================================
--- webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/sct-issuer-config.xml (added)
+++ webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/sct-issuer-config.xml Sun Oct 29 04:55:03 2006
@@ -0,0 +1,29 @@
+<sct-issuer-config>
+
+ <cryptoProperties>
+ <crypto provider="org.apache.ws.security.components.crypto.Merlin">
+ <property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</property>
+ <property name="org.apache.ws.security.crypto.merlin.file">sts.jks</property>
+ <property name="org.apache.ws.security.crypto.merlin.keystore.password">password</property>
+ </crypto>
+ </cryptoProperties>
+
+ <addRequestedAttachedRef />
+ <addRequestedUnattachedRef />
+
+ <!--
+ Key computation mechanism
+ 1 - Use Request Entropy
+ 2 - Provide Entropy
+ 3 - Use Own Key
+ -->
+ <keyComputation>3</keyComputation>
+
+ <!--
+ proofKeyType element is valid only if the keyComputation is set to 3
+ i.e. Use Own Key
+
+ Valid values are: EncryptedKey & BinarySecret
+ -->
+ <proofKeyType>BinarySecret</proofKeyType>
+</sct-issuer-config>
Added: webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/services.xml
URL: http://svn.apache.org/viewvc/webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/services.xml?view=auto&rev=468891
==============================================================================
--- webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/services.xml (added)
+++ webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/services.xml Sun Oct 29 04:55:03 2006
@@ -0,0 +1,89 @@
+<!-- Security token service configuration -->
+<service name="STS">
+
+ <operation name="RequestSecurityToken">
+ <messageReceiver class="org.apache.rahas.STSMessageReceiver"/>
+
+ <!-- Action mapping to accept SCT requests -->
+ <actionMapping>http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT</actionMapping>
+
+ <actionMapping>http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue</actionMapping>
+ <actionMapping>http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Renew</actionMapping>
+ <actionMapping>http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Cancel</actionMapping>
+ <actionMapping>http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel</actionMapping>
+ <actionMapping>http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Validate</actionMapping>
+
+ </operation>
+
+ <!-- Using the config file -->
+ <parameter name="token-dispatcher-configuration-file">token-dispatcher-configuration.xml</parameter>
+
+ <!-- Configure Rampart to authenticate clients -->
+ <wsp:Policy wsu:Id="SigOnly" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
+ <wsp:ExactlyOne>
+ <wsp:All>
+
+ <ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy">
+
+ <ramp:user>ip</ramp:user>
+ <ramp:encryptionUser>useReqSigCert</ramp:encryptionUser>
+ <ramp:passwordCallbackClass>PWCBHandler</ramp:passwordCallbackClass>
+
+ <ramp:signatureCrypto>
+ <ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
+ <ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
+ <ramp:property name="org.apache.ws.security.crypto.merlin.file">rahas-sts.jks</ramp:property>
+ <ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
+ </ramp:crypto>
+ </ramp:signatureCrypto>
+
+ </ramp:RampartConfig>
+
+ <sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <sp:InitiatorToken>
+ <wsp:Policy>
+ <sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
+ <wsp:Policy>
+ <sp:WssX509V3Token10/>
+ </wsp:Policy>
+ </sp:X509Token>
+ </wsp:Policy>
+ </sp:InitiatorToken>
+ <sp:RecipientToken>
+ <wsp:Policy>
+ <sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
+ <wsp:Policy>
+ <sp:WssX509V3Token10/>
+ </wsp:Policy>
+ </sp:X509Token>
+ </wsp:Policy>
+ </sp:RecipientToken>
+ <sp:AlgorithmSuite>
+ <wsp:Policy>
+ <sp:TripleDesRsa15/>
+ </wsp:Policy>
+ </sp:AlgorithmSuite>
+ <sp:Layout>
+ <wsp:Policy>
+ <sp:Strict/>
+ </wsp:Policy>
+ </sp:Layout>
+ <sp:IncludeTimestamp/>
+ <sp:OnlySignEntireHeadersAndBody/>
+ </wsp:Policy>
+ </sp:AsymmetricBinding>
+ <sp:Wss10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <wsp:Policy>
+ <sp:MustSupportRefKeyIdentifier/>
+ <sp:MustSupportRefIssuerSerial/>
+ </wsp:Policy>
+ </sp:Wss10>
+ <sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
+ <sp:Body/>
+ </sp:SignedParts>
+ </wsp:All>
+ </wsp:ExactlyOne>
+ </wsp:Policy>
+
+</service>
Added: webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-canceler-config.xml
URL: http://svn.apache.org/viewvc/webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-canceler-config.xml?view=auto&rev=468891
==============================================================================
--- webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-canceler-config.xml (added)
+++ webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-canceler-config.xml Sun Oct 29 04:55:03 2006
@@ -0,0 +1,3 @@
+<token-canceler-config>
+
+</token-canceler-config>
Added: webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-dispatcher-configuration.xml
URL: http://svn.apache.org/viewvc/webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-dispatcher-configuration.xml?view=auto&rev=468891
==============================================================================
--- webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-dispatcher-configuration.xml (added)
+++ webservices/axis2/branches/java/1_1/modules/rahas/sts-aar-resources/token-dispatcher-configuration.xml Sun Oct 29 04:55:03 2006
@@ -0,0 +1,17 @@
+<token-dispatcher-configuration>
+ <!-- Issuers. You may have many issuers. -->
+ <issuer class="org.apache.rahas.impl.SCTIssuer" default="true">
+ <configuration type="file">sct-issuer-config.xml</configuration>
+ <tokenType>http://schemas.xmlsoap.org/ws/2005/02/sc/sct</tokenType>
+ </issuer>
+ <issuer class="org.apache.rahas.impl.SAMLTokenIssuer">
+ <configuration type="file">saml-issuer-config.xml</configuration>
+ <tokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1</tokenType>
+ </issuer>
+
+ <!-- Only a single canceler is allowed -->
+ <canceler class="org.apache.rahas.impl.TokenCancelerImpl">
+ <configuration type="file">token-canceler-config.xml</configuration>
+ </canceler>
+
+</token-dispatcher-configuration>
\ No newline at end of file
---------------------------------------------------------------------
To unsubscribe, e-mail: axis-cvs-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-cvs-help@ws.apache.org