Signing and Encrypting Attachments in Rampart 1.4

[Koehring John <jk...@us.axway.com>]

Hello,
 
Could somebody tell me if the functionality implied by the method
setAttachments() in org.apache.ws.secpolicy.model.SignedEncryptedParts
is meant to be complete? I attempted to get Rampart 1.4 to sign an
attachment by calling this method with the value true but only the body
of my message was signed. I see that
RampartPolicyBuilder.processSignedEncryptedParts() calls
SignedEncryptedParts.isAttachments() and sets the corresponding value in
a RampartPolicyData. However, I do not see any calls to
RampartPolicyData.isSignAttachments() or
RampartPolicyData.isEncryptAttachments().
 
I am new to Rampart so I apologize if the answer to this question is
obvious. I would just like to know if Rampart 1.4 supports the signing
and encrypting of attachments.
 
Thank you,
 
-- john
==============================================
John Koehring - Software Engineer - Axway Inc.

RE: Signing and Encrypting Attachments in Rampart 1.4

[Koehring John <jk...@us.axway.com>]

I have come to the conclusion that despite appearances, Rampart 1.4 does
not support the signing or encrypting of SOAP attachments. By
"appearances" I am referring to the method setAttachments() in
SignedEncryptedParts. This support seems to stop at
org.apache.rampart.RampartUtil where the methods getSignedParts(),
getEncryptedParts(), getPartsAndElements() and
getContentEncryptedElements() do not seem to support SOAP attachments.

So now my question is has anybody investigated what it would take to
complete the support for signing and encrypting SOAP attachments to
Rampart? It looks like the required changes would not be limited to
Rampart, but would also include at least WSS4J. Has anybody scoped out
this effort?

Thanks,

-- john
==============================================
John Koehring - Software Engineer - Axway Inc.

-----Original Message-----
From: Koehring John [mailto:jkoehring@us.axway.com] 
Sent: Thursday, April 09, 2009 12:18
To: rampart-dev@ws.apache.org
Subject: Signing and Encrypting Attachments in Rampart 1.4

Hello,
 
Could somebody tell me if the functionality implied by the method
setAttachments() in org.apache.ws.secpolicy.model.SignedEncryptedParts
is meant to be complete? I attempted to get Rampart 1.4 to sign an
attachment by calling this method with the value true but only the body
of my message was signed. I see that
RampartPolicyBuilder.processSignedEncryptedParts() calls
SignedEncryptedParts.isAttachments() and sets the corresponding value in
a RampartPolicyData. However, I do not see any calls to
RampartPolicyData.isSignAttachments() or
RampartPolicyData.isEncryptAttachments().
 
I am new to Rampart so I apologize if the answer to this question is
obvious. I would just like to know if Rampart 1.4 supports the signing
and encrypting of attachments.
 
Thank you,
 
-- john
==============================================
John Koehring - Software Engineer - Axway Inc.