[
https://issues.jboss.org/browse/GTNWSRP-288?page=com.atlassian.jira.plugi...
]
RH Bugzilla Integration commented on GTNWSRP-288:
-------------------------------------------------
Michal Vanco <mvanco(a)redhat.com> made a comment on [bug
829885|https://bugzilla.redhat.com/show_bug.cgi?id=829885]
Hi Matt/William,
we were able to do verification of WS-security today and we have following findings for
X.509 & ws-security.
We started with test examples from
http://anonsvn.jboss.org/repos/jbossws/stack/native/tags/jbossws-native-3...
Steps to configure:
- take jboss-wsse-server.xml, rename to gatein-wsse-producer.xml and place it at
producer/conf/gatein/
- take jboss-wsse-client.xml, rename to gatein-wsse-consumer.xml and place it at
consumer/conf/gatein
- there are paths to files: wsse10.truststore, bob-sign_enc.jks, alice-sign_enc.jks (there
is a possible problem that files for producer have to be added at
wsrp-producer-jb5wss*.war archive - absolute path to files doesn't work as expected)
- place alice-sign_enc.jks and wsse10.truststore at
consumer/deploy/gatein-wsrp-integration.ear/META-INF
- place bob-sign_enc.jks and wsse10.truststore at
producer/deploy/gatein-wsrp-integration.ear/wsrp-producer-jb5wss*/META-INF
New configuration options work as expected for ws-security.
It was possible to create consumer (-> origin issue isn't present anymore).
I'm able to see soap messages, I have updated jboss-log4j.xml with
<category name="org.jboss.ws.core">
<priority value="TRACE"/>
</category>
I'm attaching logs from both producer/consumer, you can see that messages contained
all expected data (encryption, signatures). Messages are present at crypted format as
well.
I have two comments:
1) gatein-wsse-producer.xml at this case - files for encryption&signing had to be
added at WAR archive and it doesn't work with absolute path. Is this expected?
2) it seems like gatein-wsse-* files are read as well as when ws-security isn't
enabled (this can be reproduced by incorrect setup of gatein-wsse-* file) -> you will
get error when registering consumer even if ws-security is unchecked.
Can't use encryption with ws-security
-------------------------------------
Key: GTNWSRP-288
URL:
https://issues.jboss.org/browse/GTNWSRP-288
Project: GateIn WSRP
Issue Type: Bug
Affects Versions: 2.1.5-GA, 2.2.0-Beta01
Reporter: Matt Wringe
Assignee: Chris Laprun
Fix For: 2.1.7-GA, 2.2.0-Beta03
The encryption ws-security options with GateIn do not currently work properly. You can
add usernames and passwords through ws-security, but errors will occur if you try and use
the encryption options for ws-security.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see:
http://www.atlassian.com/software/jira