[JBossWS] - Ws-Security, Encryption, .Net -> JBoss interoperability (HEL
by kristof.taveirne
Hi,
I have a .Net client that's talking to a web service running on jbossws.
It's a simple helloword right now for testing purposes.
What I'm trying to add to this service is the following.
- Authentication + Signing using a client certificate
- Encryption using the servers public key
I've been playing around a bit and here is how far I am right now:
The jboss-wsse-server.xml file is simple and straightforward:
| <?xml version="1.0" encoding="UTF-8"?>
| <jboss-ws-security xmlns="http://www.jboss.com/ws-security/config"
| xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
| xsi:schemaLocation="http://www.jboss.com/ws-security/config
| http://www.jboss.com/ws-security/schema/jboss-ws-security_1_0.xsd">
| <key-store-file>WEB-INF/MyKeystore</key-store-file>
| <key-store-password>####</key-store-password>
| <trust-store-file>WEB-INF/MyTruststore</trust-store-file>
| <trust-store-password>####</trust-store-password>
| <config>
| <requires>
| <encryption />
| <signature/>
| </requires>
| </config>
| </jboss-ws-security>
|
The policy in my .Net client like this.
This is a WSE 3.0 policy file wse3policyCache.config:
| <policy name="test">
| <mutualCertificate11Security establishSecurityContext="false" renewExpiredSecurityContext="true" requireSignatureConfirmation="false" messageProtectionOrder="SignBeforeEncrypt" requireDerivedKeys="false" ttlInSeconds="300">
| <clientToken>
| <x509 storeLocation="CurrentUser" storeName="My" findValue="CN=user1" findType="FindBySubjectDistinguishedName" />
| </clientToken>
| <serviceToken>
| <x509 storeLocation="CurrentUser" storeName="My" findValue="CN=MyServer" findType="FindBySubjectDistinguishedName" />
| </serviceToken>
| <protection>
| <request signatureOptions="IncludeSoapBody" encryptBody="true" />
| <response signatureOptions="IncludeAddressing, IncludeTimestamp, IncludeSoapBody" encryptBody="true" />
| <fault signatureOptions="IncludeSoapBody" encryptBody="false" />
| </protection>
| </mutualCertificate11Security>
| <requireActionHeader />
| </policy>
|
For simplicity I left out the addressing and timestamp out of the signature, because I expect that this is what jboss does.
I have on the serverside a keystore and truststore.
I've created priv/public keypair using sun's keytool and I exported the certificate for the clients to use. The certificates of the client are generated by a CA on windows 2003 server. I've imported the certificates into the keystore using a basic keytool -import -keystore ... -alias ... - file command.
The error I get in JBoss is
| 12:10:57,337 ERROR [WSSecurityDispatcher] Internal error occured handling inboun
| d message:
| org.jboss.ws.wsse.SecurityTokenUnavailableException: Could not locate certificat
| e by key identifier
| at org.jboss.ws.wsse.KeyResolver.resolveKeyIdentifier(KeyResolver.java:1
| 14)
| at org.jboss.ws.wsse.KeyResolver.resolve(KeyResolver.java:87)
| at org.jboss.ws.wsse.KeyResolver.resolveCertificate(KeyResolver.java:129
| )
| at org.jboss.ws.wsse.KeyResolver.resolvePrivateKey(KeyResolver.java:144)
|
| at org.jboss.ws.wsse.KeyResolver.resolvePrivateKey(KeyResolver.java:164)
|
| at org.jboss.ws.wsse.element.EncryptedKey.<init>(EncryptedKey.java:90)
Is there anyone who has some experience with this?
I would appreciate any help/advice I can get.
Thanks in advance,
Kristof Taveirne
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3976533#3976533
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3976533
19 years, 7 months
[JBoss Seam] - Re: <s:decorate/>
by baz
Hello,
i like to test <s:decorate/>
But i have some problems with building and using the latest seam jars.
When i execute the build and testcore targets this error occur in the tests
anonymous wrote : [testng] FAILED: org.jboss.seam.test.ContextTest.testContexts()
| [testng] java.lang.IllegalStateException: No active application context
| ....
|
When i want to use the generated jars, i get a 'class not found' exception.
So i had to copy the newest thirdparty-all.jar into my app.
After deploying this new app is in the correct place.
But the CNF for net.sf.proxy.Factory does not vanish.
My questions:
What is the correct nightly build for testing s:decorate?
Can i use the cvs-version?
Is there something i apparently missed?
The building and using of seam in the past was no problem to me. I just does what it should.
Ciao,
Carsten
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3976531#3976531
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3976531
19 years, 7 months
[EJB 3.0] - Is Client-Side Lazy fetching possible?!?
by nomike
EJB3 enables UnitTests for Entities outside of the applicationServer.
It specifies too, that data in a DB may be externally modified without breaking the AS.
So (combining these two facts) is it possible to apply the mechanisms used for unitTesting to my swing-enabled client. So I could do lazy loading in my client application?
The reason for that is the following:
I have to build a Table with GiftCertificates. The GiftCertificates refer to other entities. I have to assume that users want to display lot's of them at once (> 100.000 pcs.). So I have a finder in a SessionBean which returns the found GiftCertificates and adds them to the tableModel.
Using eager-loading is, as you can see, no option here, because the performance will be way to slow.
Passing back the GiftCertificate entities to a SessionBean-Method which does the lazy loading for me is too slow to.
So what I want to do, is to be able to giftCertifiate.getBuyer() or giftCertificate.getTaxRate() in the table.models getValueAt() method.
I somehow need som EntityManager or similar in my Client...
Is this somehow possible?
thx in advance
nomike aka Michael Postmann
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3976530#3976530
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3976530
19 years, 7 months
[JBoss Portal] - Re: Portlet Placement
by r_mun
Hi, creative77
You can use a special portlet in the admin area (see portal example), to move the windows. It's implemented with the use of arrows, as you've mentioned.
In our project we have a similar need to enable the user to move his portal windows. We are looking forward to new Ajax-enabled features of JBoss portal. But before it's available we have to supply some sensible temporary replacement for that.
In order to achieve this task we took that portlet (from admin page) and added something similar to our user's page.
The only problem is that after triggering the position change, "map" within portlet reflects changes, but actual windows remain on the same positions, until the user relogins. QUESTION: What API function should we call to make changes visible at once, without relogin?
By the way, that portlet from admin page works the same (have to relogin).
Regards,
Roman Muntyanu
Yukon Software Ltd.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3976527#3976527
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3976527
19 years, 7 months