Questions tagged [wss4j]

The Apache WSS4J™ is a Java implementation of the primary security standards for Web Services, namely the OASIS Web Services Security (WS-Security) specifications from the OASIS Web Services Security TC.

232 questions
19
votes
4 answers

SOAPFaultException "MustUnderstand headers (oasis-200401-wss-wssecurity-secext-1.0.xsd) are not understood"

I try to get information from web service that uses PasswordText WSS type. Firstly, I test it using soapUI and successfully got data. Then I implemented authentication on Java, writing SecurityHandler: public final class SecurityHandler implements…
Marboni
  • 2,234
  • 3
  • 21
  • 35
11
votes
6 answers

cxf + wss4j + maven NoSuchMethod error

trying to use the cxf+wss4j using maven. Created both the service and client without any compilation issues. The service runs fine in tomcat. Issue: When I run the client code, I get "java.lang.NoSuchMethodError:…
Balaji Krishnan
  • 967
  • 3
  • 11
  • 28
8
votes
2 answers

Looking for java Library/API for implementing WS-Security for SOAP messages with Attachment(SwA)

I am implementing ebXML3.0 in java and looking for a java library/API I can use for Signing and Encryption of SOAP messages with attachment. Earlier I was using "Apache wss4j" but this seems to only support signing/encryption of SOAP Body (No…
7
votes
3 answers

Webservice Security and Windows Certificates

I want to sign webservice requests using Apache CXF and WSS4J. As far as I know, I would need a JKS store containing the certificate I want to use for signing. There's the requirement to be able to use a X.509 certificate from the Windows…
tobiasbayer
  • 9,921
  • 4
  • 42
  • 64
6
votes
2 answers

WSSE - Sign an element inside soapenv:Header

I want to add wsse:security to my soap message. This is my code: public Document signSoapMessage(SOAPMessage message) { try { Document doc = message.getSOAPBody().getOwnerDocument(); Crypto crypto =…
Maciej Pulikowski
  • 2,140
  • 2
  • 11
  • 29
6
votes
0 answers

WSDoAllSender class replacement in wss4j-1.6.10?

I have a WSDD what works well with wssj4-1.5.12. It looks like this:
6
votes
1 answer

UsernameToken WS-Security with Apache CXF Annotations (WSS4J)

I'm trying to create a "java first" webservice that will use plain and simple UsernameToken WS-Security. I've attempted to follow the examples from CXF. When I query my wsdl I see no mention of anything ws-security related. I'm using CXF 2.7.5 and…
aCodeMonkey
  • 350
  • 1
  • 5
  • 14
6
votes
2 answers

How to make WSS4J load the keystore password from a callback?

I'm using Apache CXF to build a Web Service. It uses Apache WSS4J to provide WS-Security functionality. I need to make a SOAP request and it must be signed. This is the content of the properties file I pass to…
Alex Oliveira
  • 843
  • 8
  • 23
5
votes
2 answers

How to provide dynamic credentials (username and password) to web service using Grails-cxf plugin

I am using this awesome plugin, http://grails.org/plugin/cxf-client, to consume a contract-first web service with security. So I already have something like this in my config: cxf { client { cybersourceClient { …
lilalfyalien
  • 183
  • 1
  • 2
  • 8
4
votes
1 answer

Upgrading CXF and WSS4J but can't find dependencies

So I have a working project that I am trying to upgrade CXF and WSS4J It looks like I have upgraded my client ok, but that's because I am using this for wss4j: org.apache.wss4j
mmaceachran
  • 2,708
  • 6
  • 37
  • 87
4
votes
2 answers

Spring Security - Wss4jSecurityInterceptor - Nullpointer

I have the luck to migrate a large monolithic system from Java7 and Scala 2.10 to Java8 and Scala 2.11. So far so good. The application is using SpringSecurity. After updating the spring libraries to the newest one we faced a null pointer exception…
λ Allquantor λ
  • 921
  • 8
  • 20
4
votes
2 answers

Why can't I get the wss4j maven dependency in eclipse?

I have always gotten my dependencies from http://mvnrepository.com. Has worked every time. But I can't seem to get wss4j working. My POM is like this: org.springframework
mmaceachran
  • 2,708
  • 6
  • 37
  • 87
4
votes
0 answers

CXF WSS4JOutInterceptor Digital Signature and Thumbprint

I am using CXF to consume a webservice It involves signing the node with my private key and also encrypting the node . I am using WSS4JOutInterceptor to sign the soap message . I am not able to figure out on how to specify…
navin
  • 41
  • 3
4
votes
2 answers

SoapFault MustUnderstand headers, CXF WSS4J No crypto property file supplied

My SOAP server is receiving a SOAP message with must understand headers set to 1. In order to understand the header I am using a wss4j interceptor. My sign.properties file…
Rudder_NZ
  • 57
  • 1
  • 5
4
votes
1 answer

WSS4J - No certificates for user were found for signature

I'm trying sign a soap message using CXF, after configure my client using the knowledge I found over the internet, I'm suffering with the following error message: org.apache.ws.security.WSSecurityException: General security error (No certificates…
brevleq
  • 1,866
  • 8
  • 46
  • 90
1
2 3
15 16