Questions tagged [rampart]

Apache Rampart - Axis2 Security Module

Rampart is the security module of Axis2. It secures SOAP messages according to specifications in the WS-Security stack. Homepage: http://axis.apache.org/axis2/java/rampart/

163 questions
2
votes
1 answer

axis2+rampart: Must Understand check failed for header Security

I have problem with axis2+rampart WS-Security response in case of server internal error. When server returns "200 OK" all seems ok. Response is checked by rampart if it has proper timestamp, signature and decrypts function response XML. But when…
Michał Niklas
  • 53,067
  • 18
  • 70
  • 114
2
votes
0 answers

Rampart: Define password without using CallbackHandler

I have the following working code, that successfully connects to a WS using WSSecurity with UsernameToken authentication: public void addValidation( Stub stub) throws Exception { ServiceClient serviceClient = stub._getServiceClient(); …
SJuan76
  • 24,532
  • 6
  • 47
  • 87
2
votes
0 answers

Ws-security java client, need to send empty password in Username token

I have a java client which uses axis2 and rampart to send a soa message with ws-security envelope. As this is part of an Identity Manager connector, I need to do it all programatically, no chance to have configuration files. The web service I am…
2
votes
3 answers

"Missing wsse:Security header in request" when I try posting a SOAP message with Axis2 and Rampart

I feel like I've been looking at this issue forever. Background: I have to call a secured third party web service. The body and a header block both need to be signed with a client certificate. If I disable Rampart and use tcpmon and capture the…
Jamie McIlroy
  • 459
  • 2
  • 8
  • 19
2
votes
0 answers

Exception while running STS Client from WSO2 Identity Server

I am new to WebServer Security and STS. I need to secure web services. My first target is to get the samples running. As such I downloaded the STS-CLIENT from svn co…
2
votes
1 answer

Axis2 problem: WSHandler: Check Signature confirmation: stored SV vector not empty

I have problem with querying webservice which uses WS-Security. I use code creadted by axis2 with rampard module which implements WS-Security. I think I make good query and I got response, but that response have something my client do not…
Michał Niklas
  • 53,067
  • 18
  • 70
  • 114
2
votes
0 answers

Adding rampart.mar to classpath via Maven

I have been trying to find a solution for this for several days, but with no avail. I'm currently in the process of introducing Maven to some of my Java projects. One of them requires Axis2 and Rampart for WS Security. I added all Axis2 and Rampart…
SiN
  • 3,704
  • 2
  • 31
  • 36
2
votes
1 answer

Signing SOAP Messages in WSO2 ESB using sha-256 digest Algorithm

I have an issue using rampart in wso2 ESB to sign my soap messages, i use an XML policy attached to the outgoing endpoint, this policy specifies sha-256 as the algorithm to use for the digest (AlgorithmSuite : Basic256Sha256) The problem i have is…
2
votes
1 answer

WSS4J complains "No Subject DN Certificate Constraints were defined. This could be a security issue" using Axis2 Rampart

We see the following warning message using Rampart-1.6.2 and wss4j-1.6.14. We wonder if anyone can advise how to set the cert subject DN constraint in Rampart. We found a way for Apache CXF though:…
user2589347
  • 21
  • 1
  • 3
2
votes
1 answer

Cannot load Rampart module within Axis2 client project

While my project is a Java web application, I use web services only as client. I successfully created stubs with Apache Axis2 and tested them with SoapUI. Now it's time to implement security. This is one of the services I must integrate. It ships a…
usr-local-ΕΨΗΕΛΩΝ
  • 26,101
  • 30
  • 154
  • 305
2
votes
2 answers

Maven Dependency Resolution for Apache Rampart Fails

I'm having trouble performing a clean install on my Maven project. This was an old web project that I converted to Maven using Eclipse Kepler's 'Convert to Maven Project' functionality. I am using JDK 1.6, with both project and workspace compliance…
liltitus27
  • 1,670
  • 5
  • 29
  • 46
2
votes
0 answers

In Apache Axis2/Rampart, while generating wsdl and validating policy, is Ws-security Policy 1.2 assertion not handled completely?

We are implementing WS-Security Policy on our web services with the following framework/module/specification. Apache Axis2 1.6.2 Apache Rampart 1.6.2 WS-Security Policy 1.2(namespace:http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702) We…
aRvi
  • 107
  • 1
  • 2
  • 13
2
votes
2 answers

Axis2 : Unable to engage Rampart module

I am getting the following error while trying to implement WS-Security using Rampart in Axis2. org.apache.axis2.AxisFault: Unable to engage module : rampart at org.apache.axis2.client.ServiceClient.engageModule(ServiceClient.java:358) I am using…
Saju
  • 402
  • 3
  • 11
  • 30
2
votes
1 answer

java.lang.NoSuchMethodError: org.apache.ws.security.WSSConfig.setHandleCustomPasswordTypes(Z)VI am

I am getting following error. I am using WSS4j1.5.8 i.e. Rampart 1.5 and AXIS2-1.4: java.lang.NoSuchMethodError: org.apache.ws.security.WSSConfig.setHandleCustomPasswordTypes(Z)V When I used Rampart 1.4 i.e. wss4j 1.5.7 and AXIS2 1.4 it gives me…
Nailesh
  • 153
  • 1
  • 8
2
votes
1 answer

Understanding how rampart engine works

I know that Apache Rampart configuration allows providing a password callback handler class, that can be used to provide passwords needed for Rampart engine to build username tokens and create signatures when sending messages. It's written that…
Tania Marinova
  • 1,788
  • 8
  • 39
  • 67
1
2
3
10 11