[jboss-user] [JBossWS] - timestamp and WS-Security
gressho
do-not-reply at jboss.com
Wed Sep 24 09:56:33 EDT 2008
Hello,
since JBossWS 3.0.2 a timestamp-verification tag is available. So I've deployed
a server configuration file like the following:
| <jboss-ws-security xmlns="http://www.jboss.com/ws-security/config"
| xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
| xsi:schemaLocation="http://www.jboss.com/ws-security/config
| http://www.jboss.com/ws-security/schema/jboss-ws-security_1_0.xsd">
| <key-store-file>META-INF/ikmapp.jks</key-store-file>
| <key-store-password>xxx</key-store-password>
| <key-store-type>jks</key-store-type>
| <trust-store-file>META-INF/wsse10.truststore</trust-store-file>
| <trust-store-password>xxx</trust-store-password>
|
| <config>
| <timestamp ttl="300"/>
| <timestamp-verification createdTolerance="30" warnCreated="false" expiresTolerance="10" warnExpires="false"/>
| <requires>
| <signature/>
| </requires>
| </config>
|
| </jboss-ws-security>
|
The result is questionable. I'm calling a service and get an exception. The log claims
the message is from the future. When I update the time of my system by ntp I receive
normally a variance of about -0.052230 sec and fewer!
I even tried to deactivate timestamps on my client but with no result.
Our server is a cluster based on JBoss 4.2.3 (JDK 6) with JBossWS 3.0.3 installed.
Has anybody a solution for this?
Best wishes
Werner
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4178580#4178580
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4178580
More information about the jboss-user
mailing list