Questions tagged [wss4j]

The Apache WSS4J™ is a Java implementation of the primary security standards for Web Services, namely the OASIS Web Services Security (WS-Security) specifications from the OASIS Web Services Security TC.

232 questions
1
vote
1 answer

Can you ever get partially decrypted data from a decryption algorithm using WSS4J library?

I'm decrypting some data using Java and Apache's most recent WSS4J library with 128-bit AES decryption. I setup the the cipher which appears to be correct with the right padding, decryption algorithm, and cipher block mode. I then make a call to…
Brian T Hannan
  • 3,925
  • 18
  • 56
  • 96
1
vote
0 answers

WSS4J code calculating digest, signing and adding key information?

We need to create a WS client to interface with the IRS. We are following the steps the IRS defines on page 31 of their guide…
Tim Schumacher
  • 321
  • 3
  • 19
1
vote
0 answers

Adding InclusiveNamespaces with WSS4J

In a WS-Security header, I'd like to add InclusiveNamespaces like this but I do not know how:
Tim Schumacher
  • 321
  • 3
  • 19
1
vote
1 answer

How do I make wss4j not create Timestamp element in soap header

Is there any way to make wss4j not add the Timestamp element from ws-security in the SOAP header? What I have now is this:
DThomas
  • 11
  • 3
1
vote
1 answer

wsse against wss4j, another soap signing

I should create a soap client that should talk to wss4j service.. Expected soap message is like following:
1
vote
1 answer

What is the correct configuration for a CXF SOAP Service with UsernameTokenSignature?

I'm trying to setup a CXF Service and Client using UsernameTokenSignature. Startingpoint is an existing, code first, service. Unfortunatly all examples I found use WS-Policy, which is - as I understand - not supported by CXF in a code first…
Gunnar Kiesel
  • 783
  • 1
  • 8
  • 21
1
vote
0 answers

How to use symmetric key to encrypt and sign SOAP using WSS4J

I need to build web-service client application using Axis 1.4 that will access third party system (Web service Producer). In order to send valid request to third party system I need to encrypt and sign the SOAP request before sending it to them. I…
Salman
  • 1,236
  • 5
  • 30
  • 59
1
vote
0 answers

SAML 1.1 Token Generator and Self Signing using Java

As a requirement I need to configure 2 enterprise applications using SAML token. Due to following listed constraints I need to write individual services for token generation and token signing. The Constraints are: No IdP(Identity Provider)…
Anupam
  • 19
  • 3
1
vote
2 answers

Websphere 8.5: Can't find classes even those classes are in lib folder

I'm using spring/wss4j for web service security in websphere 8.5. Wss4j requires xmlsec.jar and I've included xmlsec.jar under WEB-INF/lib/xmlsec-2.0.4.jar. But websphere classloader can't find DOMXMLSignatureFactory. Caused by:…
Trung Pham
  • 125
  • 7
1
vote
0 answers

Comsuming SOAP ws Security on WebSphere Application Server 8 with CXF 3.0.3 + WSS4J

my application needs to consume some SOAP ws-sercurity services and it works fine in Tomcat, but when i deploy it on WAS 8 im getting the next scenarios: Case 1: if i use just JaxWsProxyFactoryBean JaxWsProxyFactoryBean factory = new…
David Sttivend
  • 325
  • 1
  • 6
  • 16
1
vote
1 answer

WSS4J with Spring WS (user/password authentication + .cert)

I am working with Spring integration + Spring WS Security through WSS4JSecurityInterceptor. I have a WS client consuming a Web service on the server with the next security scenario: Https pre-emptive authentication (User and password) The server…
crm86
  • 1,394
  • 1
  • 21
  • 44
1
vote
2 answers

Basic Auth with WSS4J / camel cxf (Https)

For a SOAP web service, I have a working example of the configuration for PasswordDigest authentication via camel-cxf and WSS4J :
vikingsteve
  • 38,481
  • 23
  • 112
  • 156
1
vote
1 answer

Sharing data between CXF interceptor and webservice

I'm using security interceptors with Apache CXF WSS4JInInterceptor. Is there any way to pass data from interceptor to webservice? I've been searching for that in WebServiceContext but I can't find it.
rvillablanca
  • 1,606
  • 3
  • 21
  • 34
1
vote
1 answer

Coldfusion WSS4J java soap signer certificate gone after first signing

I have been trying to troubleshoot this issue for a few months now. I worked out a few problems with my java object by upgrading to the latest version of WSS4J and all of my test cases work using the Coldfusion JRE for testing inside of Eclipse.…
Silas
  • 201
  • 4
  • 16