Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <!-- simple wso2 esb service to validate signature and sign a response -->
- <?xml version="1.0" encoding="UTF-8"?>
- <proxy xmlns="http://ws.apache.org/ns/synapse"
- name="test_sec"
- transports="http https"
- startOnLoad="true">
- <description/>
- <target endpoint="testEp">
- <inSequence>
- <header xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
- name="wsse:Security"
- action="remove"/>
- <payloadFactory>
- <format>
- <response xmlns="">OK</response>
- </format>
- </payloadFactory>
- <loopback/>
- </inSequence>
- <outSequence>
- <send/>
- </outSequence>
- </target>
- <policy key="SamplePolicy001"/>
- <parameter name="ScenarioID">scenario2</parameter>
- <enableSec/>
- </proxy>
- <!-- policy with default keystore -->
- <wsp:Policy wsu:Id="SigOnly"
- xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
- <wsp:ExactlyOne>
- <wsp:All>
- <sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <wsp:Policy>
- <sp:InitiatorToken>
- <wsp:Policy>
- <sp:X509Token
- sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
- <wsp:Policy>
- <sp:WssX509V3Token10/>
- </wsp:Policy>
- </sp:X509Token>
- </wsp:Policy>
- </sp:InitiatorToken>
- <sp:RecipientToken>
- <wsp:Policy>
- <sp:X509Token
- sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
- <wsp:Policy>
- <sp:WssX509V3Token10/>
- </wsp:Policy>
- </sp:X509Token>
- </wsp:Policy>
- </sp:RecipientToken>
- <sp:AlgorithmSuite>
- <wsp:Policy>
- <sp:Basic256/>
- </wsp:Policy>
- </sp:AlgorithmSuite>
- <sp:Layout>
- <wsp:Policy>
- <sp:Strict/>
- </wsp:Policy>
- </sp:Layout>
- <sp:IncludeTimestamp/>
- <sp:OnlySignEntireHeadersAndBody/>
- </wsp:Policy>
- </sp:AsymmetricBinding>
- <sp:Wss10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <wsp:Policy>
- <sp:MustSupportRefKeyIdentifier/>
- <sp:MustSupportRefIssuerSerial/>
- </wsp:Policy>
- </sp:Wss10>
- <sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
- <sp:Body/>
- </sp:SignedParts>
- </wsp:All>
- </wsp:ExactlyOne>
- <rampart:RampartConfig xmlns:rampart="http://ws.apache.org/rampart/policy">
- <rampart:user>wso2carbon</rampart:user>
- <rampart:passwordCallbackClass>com.apogado.wso2egov.passwordcallback.SimplePasswordCallback</rampart:passwordCallbackClass>
- <rampart:signatureCrypto>
- <rampart:crypto provider="org.apache.ws.security.components.crypto.Merlin" cryptoKey="org.apache.ws.security.crypto.merlin.file" cacheRefreshInterval="300000">
- <rampart:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</rampart:property>
- <rampart:property name="org.apache.ws.security.crypto.merlin.file">repository/resources/security/wso2carbon.jks</rampart:property>
- <rampart:property name="org.apache.ws.security.crypto.merlin.keystore.password">wso2carbon</rampart:property>
- </rampart:crypto>
- </rampart:signatureCrypto>
- <rampart:encryptionCypto>
- <rampart:crypto provider="org.apache.ws.security.components.crypto.Merlin" cryptoKey="org.apache.ws.security.crypto.merlin.file" cacheRefreshInterval="300000">
- <rampart:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</rampart:property>
- <rampart:property name="org.apache.ws.security.crypto.merlin.file">repository/resources/security/wso2carbon.jks</rampart:property>
- <rampart:property name="org.apache.ws.security.crypto.merlin.keystore.password">dkkdkvdt123</rampart:property>
- </rampart:crypto>
- </rampart:encryptionCypto>
- </rampart:RampartConfig>
- </wsp:Policy>
Advertisement
Add Comment
Please, Sign In to add comment