Re: [WSS4J] XML-Signature with signer certificate - how to?

Le mer 25/02/2004 =E0 07:11, Nachiappan Narayanan a =E9crit :
> All,
> =20
>  Im exploring on XML-Signature. The default KeyIdentifier Type is
> WSConstants.ISSUER_SERIAL
> This format sends the Key Information as follows:
> =20
>    <ds:KeyInfo Id=3D"id-610399">
>     <wsse:SecurityTokenReference>
>      <ds:X509IssuerSerial>
>       <ds:X509IssuerName>CN=3DNithya Mani</ds:X509IssuerName>
>       <ds:X509SerialNumber>44369778256217224370984914847992022613</ds:X=
509SerialNumber>
>      </ds:X509IssuerSerial>
>     </wsse:SecurityTokenReference>
>    </ds:KeyInfo>
>   =20
>  Here, the tag <wsse:SecurityTokenReference>.... is it proprietary to
> WSS4J?=20
> =20

This tag is defined in the WS-Security spec - see
http://www-106.ibm.com/developerworks/webservices/library/ws-secure/

The X509 certificate is included as a Binary Security Token.
See the example in the above spec.

Madhusudan,G.


> =20
> =20
> =20
>  I want to send the Sender/Signer's Public Key along with the SOAP
> Request as follows:
> =20
>        <dsig:KeyInfo>
>       =20
>        <dsig:X509Data>
> =20
>           <dsig:X509SubjectName>CN=3DNithya Mani, OU=3DRoxer, O=3DInfra=
vio,
> L=3DChennai, ST=3DTN, C=3DIN</dsig:X509SubjectName>
> =20
>           <dsig:X509Certificate>
> =20
>           =20
> MIIEqTCCA5GgAwIBAgIBATANBgkqhkiG9w0BAQQFADCBjzELMAkGA1UEBhMC
> =20
>           =20
> SUUxDzANBgNVBAgTBkR1YmxpbjERMA8GA1UEBxMIRHVibGluIDQxFDASBgNV
> =20
>           =20
> BAoTC1ZvcmRlbCBMdGQuMSEwHwYDVQQLExhSZXNlYXJjaCBBbmQgRGV2ZWxv
> =20
>           =20
> cG1lbnQxIzAhBgNVBAMTGlZvcmRlbCBDQSBTZWxmIFNpZ25lZCBSb290MB4X
> =20
>           =20
> DTAzMDcwMjE2MTU1NloXDTEzMDYyOTE2MTU1NlowgYAxCzAJBgNVBAYTAklF
> =20
>           =20
> MQ8wDQYDVQQIEwZEdWJsaW4xETAPBgNVBAcTCER1YmxpbiA0MRQwEgYDVQQK
> =20
>           =20
> EwtWb3JkZWwgTHRkLjEhMB8GA1UECxMYUmVzZWFyY2ggQW5kIERldmVsb3Bt
> =20
>           =20
> ZW50MRQwEgYDVQQDEwtTYW1wbGUgVXNlcjCCASIwDQYJKoZIhvcNAQEBBQAD
> =20
>           =20
> ggEPADCCAQoCggEBALo5Y51NZy++4//SabaNmBuVpDZwAKdCgn8MQ6CnSdS3
> =20
>           =20
> 5Hhg7Qs3FzKzX+N55/wmLh9A3ON10VTqMZw3qGDQMM28wZWIMrsq1eqUoe56
> =20
>           =20
> s2whA/vHsU20uyfdprFCWqfVjYG5u9xUfqhFTd/pTJ54Ue5meivAMt2hnolH
> =20
>           =20
> osJ+RDqnI2sB2T9+V6MmPCDPG1q3tnlVriQ3Ze/4f3DDdr/vOJEZeLZfq3Es
> =20
>           =20
> GXoR8o5DJfyBp/x9mkrBtmWj0CjdGUJw85MXlUaWP7kan9nAZPfRYDg/gg10
> =20
>           =20
> L36MbBlnK0Bgqm8VJ/5jo7bm95LPbF4EdrDuImDgO8kHGVx/0q7ie/OeKTUC
> =20
>           =20
> AwEAAaOCARswggEXMAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8WHU9wZW5T
> =20
>           =20
> U0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBRl4c0FfIzcF1S3
> =20
>           =20
> UDjbmXu7X+duATCBvAYDVR0jBIG0MIGxgBSMFNQiJRrpUiLgYM2vM74gLA/7
> =20
>           =20
> Q6GBlaSBkjCBjzELMAkGA1UEBhMCSUUxDzANBgNVBAgTBkR1YmxpbjERMA8G
> =20
>           =20
> A1UEBxMIRHVibGluIDQxFDASBgNVBAoTC1ZvcmRlbCBMdGQuMSEwHwYDVQQL
> =20
>           =20
> ExhSZXNlYXJjaCBBbmQgRGV2ZWxvcG1lbnQxIzAhBgNVBAMTGlZvcmRlbCBD
> =20
>           =20
> QSBTZWxmIFNpZ25lZCBSb290ggEAMA0GCSqGSIb3DQEBBAUAA4IBAQCyCwQu
> =20
>           =20
> GElQ4JlAgYujLDI9ZyCKw6hqadYEiQUX+wG5lIIUAX8lPn5P+ncoWBI6DFtt
> =20
>           =20
> EGlKVeaIsf5xpY5Xfzwh+auLUqghc++R8xRpW611ISrp7iQS1clgiKwbCT5B
> =20
>           =20
> jHIgZT16s44XXRXK+d93DGyn8gXzkICNDxiXgSwS3yDW7ibsUmEZfT+TlJef
> =20
>           =20
> 4GjuGPRyZ35eNsGgOMHdmyHxOFntgSV3NtVRHqwLFAIm8EFwI5/YR5x9MB7L
> =20
>           =20
> 9nJdwf6IS3Lp4fweteBY8kOJ7ekd+hB5hOvZnID1/qI5b4jhQ+Z0Dz0jtym5
> =20
>             P4Lh2TqGntQDlpL5zzX4b1cXXTid1XluWoT/
> =20
>           </dsig:X509Certificate>
> =20
>         </dsig:X509Data>
> =20
>       </dsig:KeyInfo>
> =20
> =20
>  In order to do so, what type of KeyIdentifier should i set to the
> WSSignEnvelope Object?
> =20
> Regards,
> Nachiappan.N
> =20
>=20



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click