Spring/spring-ws
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SWS-282 (Reference docs)

Browse Source
This commit is contained in:
Arjen Poutsma
2008-02-28 16:24:10 +00:00
parent 72b7280155
commit 012d23e05f
1 changed files with 33 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
src/docbkx/security.xml
View File

@@ -1389,6 +1389,38 @@
<literal>DirectReference</literal>, <literal>Thumbprint</literal>,
<literal>SKIKeyIdentifier</literal> or <literal>EmbeddedKeyName</literal>.
</para>
<para>
If the <literal>EmbeddedKeyName</literal> type is chosen, you need to specify the
<emphasis>secret key</emphasis> to use for the encryption. The alias of the key is set via the
<property>securementEncryptionUser</property> property just as for the other key identifier types.
However, WSS4J requires a callback handler to fetch the secret key.
Thus, <property>securementCallbackHandler</property> must be provided with a
<classname>KeyStoreCallbackHandler</classname> pointing to the appropriate keystore.
By default, the <literal>ds:KeyName</literal> element in the resulting WS-Security header takes the
value of the <property>securementEncryptionUser</property> property. To indicate a different name,
set the <property>securementEncryptionEmbeddedKeyName</property> with the desired value.
In the next example, the outgoing message will be encrypted with a key aliased
<literal>secretKey</literal> whereas <literal>myKey</literal> will appear in
<literal>ds:KeyName</literal> element:
</para>
<programlisting><![CDATA[<bean class="org.springframework.ws.soap.security.wss4j.Wss4jSecurityInterceptor">
<property name="securementActions" value="Encrypt"/>
<property name="securementEncryptionKeyIdentifier" value="EmbeddedKeyName"/>
<property name="securementEncryptionUser" value="secretKey"/>
<property name="securementEncryptionEmbeddedKeyName" value="myKey"/>
<property name="securementCallbackHandler">
<bean class="org.springframework.ws.soap.security.wss4j.callback.KeyStoreCallbackHandler">
<property name="symmetricKeyPassword" value="keypass"/>
<property name="keyStore">
<bean class="org.springframework.ws.soap.security.support.KeyStoreFactoryBean">
<property name="location" value="file:/keystore.jks"/>
<property name="type" value="jceks"/>
<property name="password" value="123456"/>
</bean>
</property>
</bean>
</property>
</bean>]]></programlisting>
<para>
The <property>securementEncryptionKeyTransportAlgorithm</property> property
defines which algorithm to use to encrypt the generated symmetric key. Supported values are
@@ -1435,4 +1467,4 @@
</section>
</section>
</section>
</chapter>
</chapter>