Changing how signing is done

View: New views
3 Messages — Rating Filter:   Alert me  

Changing how signing is done

by metro-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi All,

I am trying to call a Java Web service from .NET 3.5 that was implemented w/ Metro.  I am having problems because the service requires that the client sign the body of the message; this is not easy to do w/ .NET using the default components provided w/ WCF IINM.  If I change the service to accept messages where only the credential (public key) or timestamp (not sure which) is signed and transport-level security is used, then my WCF client programming model will be a lot easier.

How can I change the way the Metro-based Java service requires incoming messages to be signed?

BTW, I only have limited access to the Java service's source code. I can change config and WSDL, but not much else.

TIA!

--

Regards,

Travis Spencer
http://travisspencer.com
[Message sent by forum member 'travisspencer' (travislspencer@...)]

http://forums.java.net/jive/thread.jspa?messageID=369723

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...


Re: Changing how signing is done

by metro-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Travis,

You can change the policy in the wsdl for this:
If you use Netbeans to create and configure the service, you can choose
the "Message Authentication Over SSL" while configure X509 as Authentication token.

The policy is like following:


<wsp:Policy wsu:Id="CalculatorPortBindingPolicy">
        <wsp:ExactlyOne>
            <wsp:All>
                <wsaw:UsingAddressing xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl" wsp:Optional="false"/>
                <sp:TransportBinding>
                    <wsp:Policy>
                        <sp:TransportToken>
                            <wsp:Policy>
                                <sp:HttpsToken RequireClientCertificate="false"/>
                            </wsp:Policy>
                        </sp:TransportToken>
                        <sp:Layout>
                            <wsp:Policy>
                                <sp:Lax/>
                            </wsp:Policy>
                        </sp:Layout>
                        <sp:IncludeTimestamp/>
                        <sp:AlgorithmSuite>
                            <wsp:Policy>
                                <sp:Basic128/>
                            </wsp:Policy>
                        </sp:AlgorithmSuite>
                    </wsp:Policy>
                </sp:TransportBinding>
                <sp:Wss10/>
                <sp:EndorsingSupportingTokens>
                    <wsp:Policy>
                        <sp:X509Token sp1:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
                            <wsp:Policy>
                                <sp:WssX509V3Token10/>
                            </wsp:Policy>
                        </sp:X509Token>
                    </wsp:Policy>
                </sp:EndorsingSupportingTokens>
            </wsp:All>
        </wsp:ExactlyOne>
   

Regards,


Jiandong
[Message sent by forum member 'jdg6688' (jiandong.guo@...)]

http://forums.java.net/jive/thread.jspa?messageID=369848

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...


Re: Changing how signing is done

by metro-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Thanks, Jiandong.  I'll give that a go :-)
[Message sent by forum member 'travisspencer' (travislspencer@...)]

http://forums.java.net/jive/thread.jspa?messageID=369869

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...