[wsf-c-dev] Current status of Rampart/C
Samisa Abeysinghe
samisa at wso2.com
Tue Jan 16 17:40:44 PST 2007
Should not this discussion be on Apache C dev? At least if not the whole
(e.g. PHP stuff) the rest should go to Apache list IMHO.
Samisa...
Kaushalye Kapuruge wrote:
> Hi list,
> Following will describe the current status of Rampart/C
>
> Recent modifications:
> Recently I've introduced an authentication module, which can be used
> to authenticate an incoming username token. Rampart will load the
> authentication module dynamically and plug it to the username token
> verification process. Just like the way we used the password callback
> module. But with a little difference.
> Instead of giving just the username to pick the password, we will
> provide both the username and the password. The module will validate
> the pair and return a status code. There are two methods to implement
> by the module writer for both plaintext passwords and the digests.
> Under rampart/samples/authn_provider there is a sample implementation
> for this.
> The next step is to write a credential module for the message outgoing
> case. Both these were raised in JIRA -
> http://issues.apache.org/jira/browse/AXIS2C-261
>
> There are few changes in OMXMLSecurity to extract x509
> certificates/keys from a buffer. This is done specifically to support
> the PHP extension.
>
> Security-Policy integration:
> We are almost at the integration level of security-policy with
> rampart. The security-policy code will be committed to the svn this week.
>
> XML-Signature and Canonicalization:
> We have planned to locate the C14N implementation under the
> OMXMLSecurity library. After that we will start the XML-Signature
> implementation in OMXMLSecurity and then later use it in Rampart/C.
>
>
> Cheers,
> Kaushalye
>
>
>
>
>
>
>
> _______________________________________________
> Wsf-c-dev mailing list
> Wsf-c-dev at wso2.org
> http://wso2.org/cgi-bin/mailman/listinfo/wsf-c-dev
>
--
Samisa Abeysinghe : http://www.wso2.org/ (WSO2 Oxygen Tank - Web Services Developers' Portal)
More information about the Wsf-c-dev
mailing list