Questions tagged [ws-security]

WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.

WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.

939 questions
15
votes
3 answers

How to add soap header in java

i have a NO-.net webservice from oracle To access i need to add the soap header. How can i add the soap header in java? Authenticator.setDefault(new ProxyAuthenticator("username", "password")); System.getProperties().put("proxySet",…
Luis
  • 2,665
  • 8
  • 44
  • 70
14
votes
3 answers

Error in WCF client consuming Axis 2 web service with WS-Security UsernameToken PasswordDigest authentication scheme

I have a WCF client connecting to a Java based Axis2 web service (outside my control). It is about to have WS-Security applied to it, and I need to fix the .NET client. However, I am struggling to provide the correct authentication. I am aware that…
Rebecca
  • 13,914
  • 10
  • 95
  • 136
13
votes
1 answer

Invoking a web service with WS Security from .NET

I need to consume a web service secured with WS-Security from ASP.NET. I'm testing the service with SoapUI, being the envelop request:
Diane
  • 428
  • 2
  • 6
  • 16
12
votes
2 answers

How to encrypt SOAP messages manually?

I use JBoss 4.2.3.GA. In previous task I've used base encryption mechanism which JBoss supports (WS-Security). I.e. I used keystore, truststore files for encryption and signing messages. As usually (in standard way) in jboss-wsse-* files were…
Zaur_M
  • 737
  • 3
  • 11
  • 18
11
votes
2 answers

Creating Headers (wsse) Section of WCF Client Programmatically in C#

how do make a the following section of Service Settings of app.config in C# programmatically:
user402186
  • 489
  • 2
  • 7
  • 17
11
votes
1 answer

ONVIF Authentication in .NET 4.0 with Visual Studios 2010

My task is to try to establish a communication with a ONVIF camera in the building to, eventually, upgrade the company's domotic solution to automatically recognize ONVIF cameras and to be able to set them up and to use their services. I am already…
user704419
  • 291
  • 1
  • 3
  • 8
11
votes
2 answers

WCF Client consuming WS-Security webservice

I managed to consume a java based web service (third party) with WS-Security 1.1 protocol. The web service needs only to be signed over a x509 certificate, not encrypted. But I'm getting this error: The signature confirmation elements cannot occur…
Gonzalo Lorieto
  • 635
  • 6
  • 24
10
votes
3 answers

JAX-WS Consuming web service with WS-Security and WS-Addressing

I'm trying to develop a standalone Java web service client with JAX-WS (Metro) that uses WS-Security with Username Token Authentication (Password digest, nonces and timestamp) and timestamp verification along with WS-Addressing over SSL. The WSDL I…
Jared Knipp
  • 5,880
  • 7
  • 44
  • 52
10
votes
2 answers

Does WCF support WS-Security with SOAP 1.1?

I need to call some 3rd Web services that require WS-Security. I created a WCF endpoint with the following configuration:
Stefan Moser
  • 6,663
  • 9
  • 35
  • 48
10
votes
1 answer

how to implement ws-security 1.1 in php5

I'm trying to call a webservice with Soap in PHP5, for this, I need to use WS-Security 1.1. (In java and .NET this is all generated automatically.) Are there any frameworks available to generate the security headers easily in PHP? Or do I have to…
Sam Segers
  • 1,951
  • 2
  • 22
  • 28
10
votes
1 answer

WSContext.getUserPrincipal() returns null for password digest authentication

In my WebService I need to log the caller's id, but wsContext.getUserPrincipal() returns null even though the user was authenticated using WS-Security with password authentication. According to the JavaDocs for JAX-WS 2.1…
Dean Schulze
  • 9,633
  • 24
  • 100
  • 165
9
votes
1 answer

WCF Client - Specifying the signature algorithm for WS-Security Timestamp signature

I have a WCF client that is sending a message to a non-WCF service and that service is having problems handling the HMAC-SHA1 signature method used to sign the WS-Security Timestamp element. Ideally, we'd like to use the RSA-SHA1 signature method…
BearsEars
  • 849
  • 1
  • 13
  • 21
9
votes
4 answers

Apache CXF - credentials not being sent from WSS4JOutInterceptor?

I am trying to connect to a web service using WS-Security UsernameToken spec 1.0, using apache cxf 2.4.0. I've copied the code below from the CXF docs, but am getting: org.apache.cxf.ws.policy.PolicyException: No username available …
bwsmith
  • 165
  • 2
  • 4
  • 11
9
votes
4 answers

How do you use TLS/SSL Http Authentication with a CXF client to a web service?

I'm trying to access a web service secured by a certificate. The security is setup on IIS and the web service is behind it. I don't think WS-SECURITY will do this type of authentication. Is there any way to pass the client certificate when you call…
ScArcher2
  • 85,501
  • 44
  • 121
  • 160
9
votes
4 answers

WCF Service with WS-Security requires Signed Timestamp only

I need to provide a service to a third-party that will be sending soap messages with a signed Timestamp. How can I configure my service to support this? UPDATE I've managed to get close to the format of the Soap message that we're after but WCF…
Dog Ears
  • 9,637
  • 5
  • 37
  • 54
1
2
3
62 63