WSS4J implements WS-I Basic Security Profile Version 1.0 spec?

[pasquale vitale]

Hi all,
I have a question: wss4j 1.5.4 implements a WS-I Basic Security Profile Version 1.0.

I see in the readme.txt file of wss4j 1.5.4 API that:

WSS4J implements 

 * OASIS Web Serives Security: SOAP Message Security 1.0 Standard 200401, 
   March 2004 
    * Username Token profile V1.0 
    * X.509 Token Profile V1.0 

and in the WS-I Basic Security Profile Version 1.0 spec. (go to http://www.ws-i.org/Profiles/BasicSecurityProfile-1.0.html) there are reference to OASIS Standard 200401, but I don't know if wss4j (version 1.5.4) implements WS-I Basic Security Profile Version 1.0 spec?
Can anyone tell me if that is true?

Thanks
pasquy

[Peer Reynders]

"pasquy",

Please check your private messages regarding an important administrative matter.

[Peer Reynders]

pasquy pasquy wrote:I don't know if wss4j (version 1.5.4) implements WS-I Basic Security Profile Version 1.0 spec?

I strongly doubt it. While the standards implemented by WSS4J are certainly part of the Basic Security Profile, the profile itself is much broader. So additional measures would be necessary to achieve full profile compliance. Furthermore the profile wasn't approved until March 2007 which is three years after the standards mentioned by the WSS4J.