InitiatorSignatureToken Support in WS-Policy definition
-------------------------------------------------------

                 Key: CXF-3960
                 URL: https://issues.apache.org/jira/browse/CXF-3960
             Project: CXF
          Issue Type: Improvement
          Components: WS-* Components
    Affects Versions: 2.4.5
         Environment: CXF supported environment
            Reporter: Vinay Penmatsa
             Fix For: 2.4.5


This patch adds support for InitiatorSignatureToken assertion. Support for 
IntiatorEncryptionToken and corresponding recipient tokens will be added 
subsequently.
Here's an example of supported policy definition:

<sp:AsymmetricBinding>
  <wsp:Policy>
    <sp:InitiatorSignatureToken>
      <wsp:Policy>
        <sp:X509Token 
sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient";>
                       
          <wsp:Policy>
            <sp:RequireThumbprintReference/>
            <sp:WssX509V3Token10/>
          </wsp:Policy> 
        </sp:X509Token>
        </wsp:Policy>
    </sp:InitiatorSignatureToken>
    <sp:RecipientToken>
      <wsp:Policy>
        <sp:X509Token 
sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always";>
  
          <wsp:Policy>
            <sp:RequireThumbprintReference/>
            <sp:WssX509V3Token10/>
          </wsp:Policy>                                                         
        </sp:X509Token>
      </wsp:Policy>
    </sp:RecipientToken>
    <sp:AlgorithmSuite>
      <wsp:Policy>
        <sp:TripleDesRsa15/>                    
        </wsp:Policy>
    </sp:AlgorithmSuite>
    <sp:Layout>
      <wsp:Policy>
        <sp:Lax />
      </wsp:Policy>
    </sp:Layout>                
    <sp:IncludeTimestamp/>                      
    <sp:OnlySignEntireHeadersAndBody />                                         
  </wsp:Policy>                                 
</sp:AsymmetricBinding>



--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to