• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Jeanne Boyarsky
  • Ron McLeod
  • Paul Clapham
  • Liutauras Vilda
Sheriffs:
  • paul wheaton
  • Rob Spoor
  • Devaka Cooray
Saloon Keepers:
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
  • Frits Walraven
  • Tim Moores
Bartenders:
  • Mikalai Zaikin

Ws-Security using wss4j

 
Ranch Hand
Posts: 215
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
I have to implement oasis ws-security (using username token) for accessing web service.
Does anybody have experience with wss4j?
Can I use any other open source software?
Any guidance would be helpful.
 
Ranch Hand
Posts: 548
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
you have below options :

a. you can use WSS4J alone to meet the requirements
b. generate the WS-Security headers/namespace programatically and use IBM XSS/Apache-XML-SECURITY/TSIK etc. to meet the requirements

I have used WSS4J and quite satisfied with that.
 
D. Rose
Ranch Hand
Posts: 215
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi Kumaran,

Is it OK if I mail my wss4j questions ,if any to you? or do you visit here regularly?

Also could you please post some links about using wss4j?

Thanks in advance.
 
Greenhorn
Posts: 12
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi

WSS4J is good for implementing the standard WSS, some other tools (or API's) you can use jointly could be Apache SOAP or Axis (Axis is helpful for deploying web services including security assertions).

I hope this will be helpful, so if you have any questions just let us know

Greetings

Luis Canizares
Quito, Ecuador
 
D. Rose
Ranch Hand
Posts: 215
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi,

I have installed wss4j and experimenting with it.

It seems wss4j provides default Crypto provider called Merlin.

I tried testing it like



It worked fine when I copied keys subdirectory of wss4j installation in myclasspath.

It is not clear what keys and certificates this subdirectory holds and how they are used.
Is there any good reference for wss4j?
I do not want to test a secure web service client which send user name token.
[ September 19, 2005: Message edited by: D. Rose ]
reply
    Bookmark Topic Watch Topic
  • New Topic