The Apache WSS4J™ is a Java implementation of the primary security standards for Web Services, namely the OASIS Web Services Security (WS-Security) specifications from the OASIS Web Services Security TC.
Questions tagged [wss4j]
232 questions
1
vote
1 answer
How to generate UsernameToken for SOAP request?
I want to generate "UsernameToken-28FE7B32CCC1AB2B22141113557641136"> in Java in order to send a request to a SOAP web service. Using SoapUI and the request is easy, because it will autogenerate, but how can i do this in java? I am currently sending…
Dark Soul
- 83
- 5
- 14
1
vote
1 answer
Writing SOAP request/responses to a log file
I have a web service Client class that establishes a connection with the destination server using the wsdl url. This class uses JaxWsProxyFactoryBean and the WSS4JOutInterceptor to establish a secure connection. I would like to see the SOAP request…
Sapphire
- 1,107
- 8
- 20
- 35
1
vote
0 answers
Sign SOAP messages with personnal signing application
I'm using WSS4J interceptors to sign my SOAP requests.
I would like to know if it's possible to configure the outInterceptor to sign the requests with my own java signing program.
Roman Kos
- 265
- 2
- 6
- 15
1
vote
2 answers
how to insert a SAML Assertion to SOAPHeader
NB-6.8 jdk-1.6.14 WSS4j-1.5.8 ,OpenSAML-2.3.0
I try to modify WSS4J-1.5.8 to operate SAML 2.0, and I could not insert a generated assertion to existing SOAP Header, the code like this:
Assertion assertion = createAssertion("some subject", "some…
mono
- 1,651
- 3
- 13
- 7
1
vote
1 answer
Spring WS Security WSS4J with SAML from WSO2
Earlier I was in assumption that, WSS4J is not compatible with SAML, but as I see this http://jaminhitchcock.blogspot.in/2014/05/creating-and-validating-saml-assertions.html , I hope to give a try. But I want to use a Identity Provider(WSO2) to…
Chakradhar K
- 501
- 13
- 40
1
vote
0 answers
Securing SOAP Web-Services using WSS4J Library (Spring WITHOUT MVC)
I am new to spring web services.I am doing an interceptor on the sage.xml (otherwse, known as spring-ws-servlet.xml) in my project by using eclipse.
Without the interceptors and it's handler. The web services work fine, but once added the…
John Yap
- 49
- 1
- 6
1
vote
2 answers
CXF WSS4J Interceptors
I'm trying to configure WSS4J Interceptors with code only using this:
try {
Map outProps = new HashMap();
outProps.put(WSHandlerConstants.ACTION,
WSHandlerConstants.TIMESTAMP…
Emowpy
- 105
- 3
- 14
1
vote
3 answers
WSS4J and PCKS11 keystore
I'm trying to use PKCS11 keystone (smart card) with WSS4J. I have code for creating keystone from smart card and another code for singing SOAP message with WSS4J using keystone from file. Problem is how to "merge" them.
PKCS11 keystore:
String…
user65404
- 11
- 1
- 2
1
vote
0 answers
How to configure Apache CXF + WSS4J to prevent token from expiring?
I am using Apache CXF with wss4j to create a client for a webservice which uses Username token based authentication.
What I want to do is to authenticate the connection to the webservice only once since the process is a little slow(in order to use…
Mythul
- 1,807
- 7
- 34
- 53
1
vote
1 answer
Use PrivateKey in wss4j directly
wss4j use merlins and keystores. I have crypto provider, which implements java.security.PrivateKey, but no merlins and no keystores. How can i use objects of java.security.PrivateKey in wss4j?
cynepnaxa
- 1,024
- 1
- 14
- 30
1
vote
1 answer
PayloadRootQNameEndpointMapping with Wss4jSecurityInterceptor causing SOAPProcessingException
I am using below configuration, for PayloadRootQNameEndpointMapping with Wss4jSecurityInterceptor
…
Chakradhar K
- 501
- 13
- 40
1
vote
1 answer
Wss4j and soaphandler error when calling a web service twice
I have got a problem when i'm using wss4j to verify the security on SOAP request on my server, here is the part of code I use to verify the security headers of the soap request (I'm in the handleMessage method of a SOAPHandler implementation) :
//…
Florent
- 11
- 3
1
vote
0 answers
How to check UsernameToken with derived key only?
With servers, how can I check clients use derived key or not?
I'm working on a JAX-WS project with WSS4J.
I managed to make some code working in UsernameToken with password derived key (salt+iteration).
Server generates username/password and give…
Jin Kwon
- 20,295
- 14
- 115
- 184
0
votes
1 answer
common webservice interceptor and UsernameTokenValidation compatible with Spring-WS and CXF
I have a scenario, where I want to configure a webservice security interceptor, and a UsernameTokenValidator and put this into say myws-security.jar. Which can be then be used by any webservice (be it CXF based or Spring-WS) that uses this jar. What…
user620339
- 851
- 3
- 20
- 42
0
votes
1 answer
Configure a common webservice interceptor and usernameTokenValidator compatible with Spring-WS and CXF
Right now I have below configuration for one of my WS endpoints.
user620339
- 851
- 3
- 20
- 42