The Apache WSS4J™ is a Java implementation of the primary security standards for Web Services, namely the OASIS Web Services Security (WS-Security) specifications from the OASIS Web Services Security TC.
Questions tagged [wss4j]
232 questions
1
vote
0 answers
Using keystores with Websphere and WSS4j
I am implementing a solution that includes using WSS4j for signature validation and decryption.There will be two key stores, one for each of these purposes.This is being done in a servlet webapp. For testing I am putting the key store/crypto…
MikeDubs307
- 11
- 2
1
vote
0 answers
How do I solve the error of relative namespaces in WSS4J
I try to consume a Soap service with security using WSS4J 2.1.0 and CXF 2.7.5 technologies and I'm having an error with the relative namespaces in the canonicalization, how could I solve this? Is there another technology that solves this problem? .…
1
vote
1 answer
Why do I get ClassNotFoundException: org.apache.ws.security.handler.WSHandler when I use CXF 2.2.11
I can not understand, why do I get Exception on the statement:
WSS4JOutInterceptor wssOut = new WSS4JOutInterceptor();
when I use version of CXF 2.2.11?
I am trying to make call to WSDL WebService. Here is code:
URL wsdlUrl = new…
Renat Gatin
- 6,053
- 5
- 37
- 58
1
vote
0 answers
empty keyStore in crypto
I'm using wss4j in order to sign a message request.
But when signing the message with this code:
Document d = signer.build(unsignedDoc, crypto, header)
I always get the error
org.apache.ws.security.WSSecurityException: General security error (no…
Leto
- 11
- 4
1
vote
2 answers
Autowire failed in Password Callback Class
I am using a WSS4JOutInterceptor and a WSS4JInInterceptor to intercept soap web service. In there I am using
passwordCallbackClass
Sample intercepter
…
Madhawas
- 371
- 1
- 2
- 15
1
vote
1 answer
ws-security - set different username and password in every request
I'm using Apache-CXF to create my web service client that uses ws-security with a UsernameTokenauthentification.
In order to use the same credentials for every request I just add the following properties to my BindingProvider(i.e. the ws-port):
…
Joern
- 1,926
- 1
- 13
- 18
1
vote
2 answers
Alternative to CXF WSPasswordCallback
For the SOAP client I'm implementing the signing of the certificate by using CXF security.
In all provided samples the reference to the passwordCallback class is set in WSS4JOutInterceptor properties.
…
Misha
- 828
- 10
- 23
1
vote
1 answer
Intercepting cxf web service header with Apache Camel (Java DSL)
I created a web service client to handle cxf soap web services with apache camel.
String serviceUri = "cxf:http://localhost:10000/myservice?serviceClass=" +
MyRequest.class.getCanonicalName();
from(uri).to("mock:xyz");
The web service…
ABX
- 1,173
- 2
- 22
- 39
1
vote
0 answers
WS-Security response message decryption fail
I'm developing a client SOAP service using Spring-Boot and Spring WS which sends a SOAP messages to a target service using trusted certificate to encrypt the request message. The target service is using a public key from a public-private key pair I…
Avantgarde
- 11
- 2
1
vote
0 answers
wss4j doesn't see security header
I try to validate security header expiration using wss4j:
List resultList = wsSecurityEngine.processSecurityHeader(doc,
"Actor", callbackHandler, crypto);
But wss4j doesn't see header content and result is…
advortsov
- 196
- 2
- 8
1
vote
1 answer
403 forbidden using wss4jOutInterceptor with camel and cxf
First things first:
War with camel and cxf (tried latests versions and actually trying with 2.12.0 and 2.7.6 respectively).
A simple camel route without process, just from - log - to.
The final goal is to add WS-Security to a SOAP…
jakinho
- 33
- 2
- 7
1
vote
4 answers
Spring-WS 2.3.0 Security Header Validation with WSS4J 2.1.4 - NoSecurity won't work
I'm using Spring-WS for Client an try to update to the newest version. Allthough configured not to validate incoming security header the new Wss4jSecurityInterceptor throws Wss4jSecurityValidationException("No WS-Security header found").
S. Rohe
- 11
- 2
- 4
1
vote
1 answer
Multiple AlgorithmSuite Policies WS-SecurityPolicy CXF
When defining multiple policies in an AlgorithmSuite in a WSDL I get an exception.
JordyOnrust
- 652
- 1
- 6
- 16
1
vote
2 answers
WSS4j 1.5: How to skip password validation?
I'm required to use apache WSS4J 1.5 for some SOAP signing/verification, however I'm having trouble skipping/disabling the UsernameToken password validation.
In WSS4J 1.6+ I am able to configure the security engine to use the NoOpValidator() class…
Eric B.
- 23,425
- 50
- 169
- 316
1
vote
1 answer
Can wss4j 2.1.* run using Java6?
I compiled the code using the maven script provided by apache but I'm not sure it will run in Java6. Can anyone confirm whether or not this library will work with Java6?
If not naturally, then is there a way to do this somehow?
Brian T Hannan
- 3,925
- 18
- 56
- 96