Stack Overflow
Stack Overflow

Questions tagged [wss4j]

The Apache WSS4J™ is a Java implementation of the primary security standards for Web Services, namely the OASIS Web Services Security (WS-Security) specifications from the OASIS Web Services Security TC.

232 questions
20
votes
4 answers

SOAPFaultException "MustUnderstand headers (oasis-200401-wss-wssecurity-secext-1.0.xsd) are not understood"

I try to get information from web service that uses PasswordText WSS type. Firstly, I test it using soapUI and successfully got data. Then I implemented authentication on Java, writing SecurityHandler: public final class SecurityHandler implements…
Marboni
  • 2,399
  • 3
  • 25
  • 42
11
votes
6 answers

cxf + wss4j + maven NoSuchMethod error

trying to use the cxf+wss4j using maven. Created both the service and client without any compilation issues. The service runs fine in tomcat. Issue: When I run the client code, I get "java.lang.NoSuchMethodError:…
Balaji Krishnan
  • 1,007
  • 3
  • 12
  • 29
8
votes
2 answers

Looking for java Library/API for implementing WS-Security for SOAP messages with Attachment(SwA)

I am implementing ebXML3.0 in java and looking for a java library/API I can use for Signing and Encryption of SOAP messages with attachment. Earlier I was using "Apache wss4j" but this seems to only support signing/encryption of SOAP Body (No…
user1842997
  • 99
  • 4
7
votes
3 answers

Webservice Security and Windows Certificates

I want to sign webservice requests using Apache CXF and WSS4J. As far as I know, I would need a JKS store containing the certificate I want to use for signing. There's the requirement to be able to use a X.509 certificate from the Windows…
tobiasbayer
  • 10,269
  • 4
  • 46
  • 64
7
votes
2 answers

How to make WSS4J load the keystore password from a callback?

I'm using Apache CXF to build a Web Service. It uses Apache WSS4J to provide WS-Security functionality. I need to make a SOAP request and it must be signed. This is the content of the properties file I pass to…
Alex Oliveira
  • 893
  • 1
  • 9
  • 27
6
votes
2 answers

WSSE - Sign an element inside soapenv:Header

I want to add wsse:security to my soap message. This is my code: public Document signSoapMessage(SOAPMessage message) { try { Document doc = message.getSOAPBody().getOwnerDocument(); Crypto crypto =…
Maciej Pulikowski
  • 2,457
  • 3
  • 15
  • 34
6
votes
0 answers

WSDoAllSender class replacement in wss4j-1.6.10?

I have a WSDD what works well with wssj4-1.5.12. It looks like this:
user1477923
  • 61
  • 3
6
votes
1 answer

UsernameToken WS-Security with Apache CXF Annotations (WSS4J)

I'm trying to create a "java first" webservice that will use plain and simple UsernameToken WS-Security. I've attempted to follow the examples from CXF. When I query my wsdl I see no mention of anything ws-security related. I'm using CXF 2.7.5 and…
aCodeMonkey
  • 360
  • 1
  • 6
  • 16
5
votes
1 answer

Upgrading CXF and WSS4J but can't find dependencies

So I have a working project that I am trying to upgrade CXF and WSS4J It looks like I have upgraded my client ok, but that's because I am using this for wss4j: org.apache.wss4j …
mmaceachran
  • 3,178
  • 7
  • 53
  • 102
5
votes
2 answers

How to provide dynamic credentials (username and password) to web service using Grails-cxf plugin

I am using this awesome plugin, http://grails.org/plugin/cxf-client, to consume a contract-first web service with security. So I already have something like this in my config: cxf { client { cybersourceClient { …
lilalfyalien
  • 203
  • 1
  • 3
  • 9
4
votes
0 answers

Spring WSS4J The private key for the supplied alias does not exist in the keystore

I'm using Spring + wss4j with annotations config. The Wss4jSecurityInterceptor interceptor has this configuration: @Bean public Wss4jSecurityInterceptor sessionInterceptorNb() throws Exception { Wss4jSecurityInterceptor securityInterceptor = new…
Rosendo Ropher
  • 496
  • 8
  • 21
4
votes
1 answer

Signing soap message using WSS4j in Java

I am writing a Java client application that needs to sign a SOAP message (with 2 parts in it) and send it to a remote server before fetching the response. I managed to make successful calls in SoapUI (see request and screenshot below). I have most…
Vincent L
  • 699
  • 2
  • 11
  • 25
4
votes
2 answers

Spring Security - Wss4jSecurityInterceptor - Nullpointer

I have the luck to migrate a large monolithic system from Java7 and Scala 2.10 to Java8 and Scala 2.11. So far so good. The application is using SpringSecurity. After updating the spring libraries to the newest one we faced a null pointer exception…
λ Allquantor λ
  • 1,071
  • 1
  • 9
  • 22
4
votes
2 answers

Why can't I get the wss4j maven dependency in eclipse?

I have always gotten my dependencies from http://mvnrepository.com. Has worked every time. But I can't seem to get wss4j working. My POM is like this: org.springframework …
mmaceachran
  • 3,178
  • 7
  • 53
  • 102
4
votes
0 answers

CXF WSS4JOutInterceptor Digital Signature and Thumbprint

I am using CXF to consume a webservice It involves signing the node with my private key and also encrypting the node . I am using WSS4JOutInterceptor to sign the soap message . I am not able to figure out on how to specify…
navin
  • 41
  • 3
1
2 3
…
15 16