using SPKI to sign message

[ca...@das.ufsc.br]

Hi All

I would like to know if somebody can help me in this question: Using SPKI
(Simple Public Key Infrastructure) key to sign messages.

If I use X.509 certificates, the KeyInfo has this format:

<ds:keyInfo>
  <wsse:SecurityTokenReference>
     <wsse:Reference URI="#X509Token"/>
  </wsse:SecurityTokenReference>
</ds:KeyInfo>

In the above case, the KeyInfo element has a URI that is a reference for a
X509 Token.

Now, if I will use SPKI to sign the message, how it would be the format of
the SOAP message?

I would need specify a SPKI token? (haven't a spec SPKI Token Profile.
There  is a X.509 token profile and Kerberos Token profile) or I could put
the information about the SPKI key into <ds:keyInfo>?

The wss4j intends to work with SPKI?

Thanks,

Edson







---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org