[wsf-c-dev] Policy and Security Policy integration to wsclient

Sanjiva Weerawarana sanjiva at wso2.com
Sun Jun 24 10:05:47 PDT 2007


Excellent!

Sanjiva.

Manjula Peiris wrote:
> I have implemented the following options in the wsclient spec to support
> security. All the options are policy driven.
> 
> 1. Encrypting the payload.
> 2. Signing the body.
> 3. UsernameToken Support.
> 4. Timestamp
>    -Currently this is implmented for default ttl value. Need to support
> --ttl option.
> 
> 5. Encrypt before sign
> 6. Sign before encryption
> 7. Encrypting the Signature.
> 
> Thanks
> -Manjula.
>       				 
> 
> 
> 
> 
> 
> On Thu, 2007-06-21 at 09:21 +0530, Manjula Peiris wrote:
>> I have changed the API to give the algorithmsuite as an option.
>>
>> -Manjula.
>>
>>
>> On Mon, 2007-06-18 at 11:40 +0530, Manjula Peiris wrote:
>>> Hi,
>>>
>>>
>>> Currently wsclient API specifies symmetric, assymmetric algorithms as
>>> seperate things.
>>> see Security options in wsclient API
>>> https://www-lk.wso2.com/wiki/doku.php?id=specification_for_wsclient
>>>
>>> But In WS-Security Policy these will be specified as a single
>>> Algorithmsuite.
>>> See section [7.1]- AlgorithmSuite Property in Web Services Security
>>> Policy Language July 2005.
>>>
>>> So we may need to change the API to support this.
>>>
>>> Any thoughts??
>>>
>>> Thanks.
>>> -Manjula.
>>>
>>>
>>>
>>> _______________________________________________
>>> Wsf-c-dev mailing list
>>> Wsf-c-dev at wso2.org
>>> http://wso2.org/cgi-bin/mailman/listinfo/wsf-c-dev
>>
>> _______________________________________________
>> Wsf-c-dev mailing list
>> Wsf-c-dev at wso2.org
>> http://wso2.org/cgi-bin/mailman/listinfo/wsf-c-dev
> 
> 
> _______________________________________________
> Wsf-c-dev mailing list
> Wsf-c-dev at wso2.org
> http://wso2.org/cgi-bin/mailman/listinfo/wsf-c-dev
> 

-- 
Sanjiva Weerawarana, Ph.D.
Founder, Chairman & CEO; WSO2, Inc.; http://www.wso2.com/
email: sanjiva at wso2.com; cell: +94 77 787 6880; fax: +1 509 691 2000

"Oxygenating the Web Service Platform."



More information about the Wsf-c-dev mailing list