+

Search Tips   |   Advanced Search

ws-security.xml

 

<?xml version="1.0" encoding="UTF-8"?>
<com.ibm.etools.webservice.wssecurity:WSSecurity xmi:version="2.0" xmlns:xmi="http://www.omg.org/XMI" xmlns:com.ibm.etools.webservice.wssecurity="http://www.ibm.com/websphere/appserver/schemas/5.0.2/wssecurity.xmi" xmi:id="WSSecurity_1084441805509">

  <!-- for WAS5 -->
  <certStoreList xmi:id="CertStoreList_1051247395637">
    <collectionCertStores xmi:id="CollectionCertStore_1051247395637" provider="IBMCertPath" name="SampleCollectionCertStore">
      <x509Certificates xmi:id="X509Certificate_1051247395637" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/intca2.cer"/>
    </collectionCertStores>
  </certStoreList>
  <trustAnchors xmi:id="TrustAnchor_1051247395637" name="SampleClientTrustAnchor">
    <keyStore xmi:id="KeyStore_1051247395637" storepass="{xor}PDM2OjEr" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/dsig-sender.ks" type="JKS"/>
  </trustAnchors>
  <trustAnchors xmi:id="TrustAnchor_1051247395638" name="SampleServerTrustAnchor">
    <keyStore xmi:id="KeyStore_1051247395638" storepass="{xor}LDotKTot" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/dsig-receiver.ks" type="JKS"/>
  </trustAnchors>
  <keyLocators xmi:id="KeyLocator_1051247395637" name="SampleClientSignerKey" classname="com.ibm.wsspi.wssecurity.config.KeyStoreKeyLocator">
    <keyStore xmi:id="KeyStore_1051247395639" storepass="{xor}PDM2OjEr" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/dsig-sender.ks" type="JKS"/>
    <keys xmi:id="Key_1051247395637" alias="soaprequester" keypass="{xor}PDM2OjEr" name="clientsignerkey"/>
  </keyLocators>
  <keyLocators xmi:id="KeyLocator_1051247395638" name="SampleServerSignerKey" classname="com.ibm.wsspi.wssecurity.config.KeyStoreKeyLocator">
    <keyStore xmi:id="KeyStore_1051247395640" storepass="{xor}LDotKTot" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/dsig-receiver.ks" type="JKS"/>
    <keys xmi:id="Key_1051247395638" alias="soapprovider" keypass="{xor}LDotKTot" name="serversignerkey"/>
  </keyLocators>
  <keyLocators xmi:id="KeyLocator_1051247395639" name="SampleSenderEncryptionKeyLocator" classname="com.ibm.wsspi.wssecurity.config.KeyStoreKeyLocator">
    <keyStore xmi:id="KeyStore_1051247395641" storepass="{xor}LCswLTovPiws" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/enc-sender.jceks" type="JCEKS"/>
    <keys xmi:id="Key_1051247395639" alias="Group1" keypass="{xor}NDomLz4sLA==" name="CN=Group1"/>
  </keyLocators>
  <keyLocators xmi:id="KeyLocator_1051247395640" name="SampleReceiverEncryptionKeyLocator" classname="com.ibm.wsspi.wssecurity.config.KeyStoreKeyLocator">
    <keyStore xmi:id="KeyStore_1051247395642" storepass="{xor}LCswLTovPiws" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/enc-receiver.jceks" type="JCEKS"/>
    <keys xmi:id="Key_1051247395640" alias="Group1" keypass="{xor}NDomLz4sLA==" name="CN=Group1"/>
  </keyLocators>
  <keyLocators xmi:id="KeyLocator_1051247395641" name="SampleResponseSenderEncryptionKeyLocator" classname="com.ibm.wsspi.wssecurity.config.WSIdKeyStoreMapKeyLocator">
    <properties xmi:id="Property_1051247395637" name="id_1" value="was"/>
    <properties xmi:id="Property_1051247395638" name="mappedName_1" value="CN=Alice, O=IBM, C=US"/>
    <properties xmi:id="Property_1051247395639" name="default" value="CN=Alice, O=IBM, C=US"/>
    <keyStore xmi:id="KeyStore_1051247395643" storepass="{xor}LCswLTovPiws" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/enc-receiver.jceks" type="JCEKS"/>
    <keys xmi:id="Key_1051247395647" alias="Group1" keypass="{xor}NDomLz4sLA==" name="CN=Group1"/>
  </keyLocators>
  <trustedIDEvaluators xmi:id="TrustedIDEvaluator_1051247395647" classname="com.ibm.wsspi.wssecurity.id.TrustedIDEvaluatorImpl" name="SampleTrustedIDEvaluator"/>
  <loginMappings xmi:id="LoginMapping_1051247395647" authMethod="BasicAuth" configName="WSLogin">
    <callbackHandlerFactory xmi:id="CallbackHandlerFactory_1051247395647" classname="com.ibm.wsspi.wssecurity.auth.callback.WSCallbackHandlerFactoryImpl"/>
  </loginMappings>
  <loginMappings xmi:id="LoginMapping_1051247395648" authMethod="Signature" configName="system.wssecurity.Signature">
    <callbackHandlerFactory xmi:id="CallbackHandlerFactory_1051247395648" classname="com.ibm.wsspi.wssecurity.auth.callback.WSCallbackHandlerFactoryImpl"/>
  </loginMappings>
  <loginMappings xmi:id="LoginMapping_1051247395649" authMethod="IDAssertion" configName="system.wssecurity.IDAssertion">
    <callbackHandlerFactory xmi:id="CallbackHandlerFactory_1051247395649" classname="com.ibm.wsspi.wssecurity.auth.callback.WSCallbackHandlerFactoryImpl"/>
  </loginMappings>
  <loginMappings xmi:id="LoginMapping_1051247395650" authMethod="LTPA" configName="WSLogin">
    <callbackHandlerFactory xmi:id="CallbackHandlerFactory_1051247395650" classname="com.ibm.wsspi.wssecurity.auth.callback.WSCallbackHandlerFactoryImpl"/>
    <tokenValueType xmi:id="TokenValueType_1051247395647" uri="http://www.ibm.com/websphere/appserver/tokentype/5.0.2" localName="LTPA"/>
  </loginMappings>
  <properties xmi:id="Property_1057972161460" name="com.ibm.ws.wssecurity.config.token.BasicAuth.Nonce.cacheTimeout" value="600"/>
  <properties xmi:id="Property_1057972161461" name="com.ibm.ws.wssecurity.config.token.BasicAuth.Nonce.maxAge" value="300"/>
  <properties xmi:id="Property_1057972161462" name="com.ibm.ws.wssecurity.config.token.BasicAuth.Nonce.clockSkew" value="0"/>

  <!-- for WAS6 -->
  <keyLocators xmi:id="KeyLocator_1084441805509" name="SampleGeneratorSignatureKeyStoreKeyLocator" classname="com.ibm.wsspi.wssecurity.keyinfo.KeyStoreKeyLocator">
    <keyStore xmi:id="KeyStore_1084441805509" storepass="{xor}PDM2OjEr" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/dsig-sender.ks" type="JKS"/>
    <keys xmi:id="Key_1084441805519" alias="soaprequester" keypass="{xor}PDM2OjEr" name="CN=SOAPRequester, OU=TRL, O=IBM, ST=Kanagawa, C=JP"/>
  </keyLocators>
  <keyLocators xmi:id="KeyLocator_1084441805519" name="SampleConsumerSignatureKeyStoreKeyLocator" classname="com.ibm.wsspi.wssecurity.keyinfo.KeyStoreKeyLocator">
    <keyStore xmi:id="KeyStore_1084441805519" storepass="{xor}LDotKTot" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/dsig-receiver.ks" type="JKS"/>
    <keys xmi:id="Key_1084441805520" alias="soapprovider" keypass="{xor}LDotKTot" name="CN=SOAPProvider, OU=TRL, O=IBM, ST=Kanagawa, C=JP"/>
  </keyLocators>
  <keyLocators xmi:id="KeyLocator_1084441805520" name="SampleGeneratorEncryptionKeyStoreKeyLocator" classname="com.ibm.wsspi.wssecurity.keyinfo.KeyStoreKeyLocator">
    <keyStore xmi:id="KeyStore_1084441805520" storepass="{xor}LCswLTovPiws" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/enc-sender.jceks" type="JCEKS"/>
    <keys xmi:id="Key_1084441805521" alias="Group1" keypass="{xor}NDomLz4sLA==" name="CN=Group1"/>
    <keys xmi:id="Key_1084441805522" alias="alice" keypass="{xor}NDomLz4sLA==" name="CN=Alice,O=IBM,C=US"/>
    <keys xmi:id="Key_1084441805523" alias="bob" keypass="{xor}NDomLz4sLA==" name="CN=Bob,O=IBM,C=US"/>
  </keyLocators>
  <keyLocators xmi:id="KeyLocator_1084441805521" name="SampleConsumerEncryptionKeyStoreKeyLocator" classname="com.ibm.wsspi.wssecurity.keyinfo.KeyStoreKeyLocator">
    <keyStore xmi:id="KeyStore_1084441805521" storepass="{xor}LCswLTovPiws" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/enc-receiver.jceks" type="JCEKS"/>
    <keys xmi:id="Key_1084441805524" alias="Group1" keypass="{xor}NDomLz4sLA==" name="CN=Group1"/>
    <keys xmi:id="Key_1084441805525" alias="alice" keypass="{xor}NDomLz4sLA==" name="CN=Alice,O=IBM,C=US"/>
    <keys xmi:id="Key_1084441805526" alias="bob" keypass="{xor}NDomLz4sLA==" name="CN=Bob,O=IBM,C=US"/>
  </keyLocators>
  <keyLocators xmi:id="KeyLocator_1084441805522" name="SampleX509TokenKeyLocator" classname="com.ibm.wsspi.wssecurity.keyinfo.X509TokenKeyLocator">
    <keyStore xmi:id="KeyStore_1084441805522" storepass="{xor}LCswLTovPiws" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/enc-receiver.jceks" type="JCEKS"/>
    <keys xmi:id="Key_1084441805527" alias="Group1" keypass="{xor}NDomLz4sLA==" name="CN=Group1"/>
    <keys xmi:id="Key_1084441805528" alias="alice" keypass="{xor}NDomLz4sLA==" name="CN=Alice,O=IBM,C=US"/>
    <keys xmi:id="Key_1084441805529" alias="bob" keypass="{xor}NDomLz4sLA==" name="CN=Bob,O=IBM,C=US"/>
  </keyLocators>
  <nonceCaching xmi:id="NonceCaching_1084441805519"/>
  <defaultbindings xmi:id="Defaultbindings_1084441805519">
    <generator xmi:id="Generator_1084441805519" wsseNameSpace="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" wsuNameSpace="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
      <signingInfo xmi:id="SigningInfo_1084441805519" name="gen_signinfo">
        <signatureMethod xmi:id="SignatureMethod_1084441805519" algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
        <canonicalizationMethod xmi:id="CanonicalizationMethod_1084441805519" algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <partReference xmi:id="PartReference_1084441805519" name="gen_signpart">
          <transform xmi:id="Transform_1084441805519" algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" name="transform1"/>
          <digestMethod xmi:id="DigestMethod_1084441805519" algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
        </partReference>
        <signingKeyInfo xmi:id="SigningKeyInfo_1084441805519" keyinfoRef="gen_signkeyinfo" name="gen_skeyinfo"/>
      </signingInfo>
      <encryptionInfo xmi:id="EncryptionInfo_1084441805519" name="gen_encinfo">
        <encryptionMethod xmi:id="DataEncryptionMethod_1084441805519" algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
        <keyEncryptionMethod xmi:id="KeyEncryptionMethod_1084441805519" algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>
        <encryptionKeyInfo xmi:id="EncryptionKeyInfo_1084441805519" keyinfoRef="gen_enckeyinfo" name="gen_ekeyinfo"/>
      </encryptionInfo>
      <keyInfo xmi:id="KeyInfo_1084441805519" type="STRREF" name="gen_signkeyinfo" classname="com.ibm.ws.webservices.wssecurity.keyinfo.STRReferenceContentGenerator">
        <keyLocatorMapping xmi:id="KeyLocatorMapping_1084441805519" locatorRef="SampleGeneratorSignatureKeyStoreKeyLocator" keynameRef="CN=SOAPRequester, OU=TRL, O=IBM, ST=Kanagawa, C=JP"/>
        <tokenReference xmi:id="TokenReference_1084441805539" tokenRef="gen_signtgen" name="gen_signkeyinfo_tref"/>
      </keyInfo>
      <keyInfo xmi:id="KeyInfo_1084441805539" type="KEYID" name="gen_enckeyinfo" classname="com.ibm.ws.webservices.wssecurity.keyinfo.KeyIdContentGenerator">
        <keyLocatorMapping xmi:id="KeyLocatorMapping_1084441805539" locatorRef="SampleGeneratorEncryptionKeyStoreKeyLocator" keynameRef="CN=Bob,O=IBM,C=US"/>
        <tokenReference xmi:id="TokenReference_1084441805540" tokenRef="gen_enctgen" name="gen_enckeyifno_tref"/>
      </keyInfo>
      <tokenGenerator xmi:id="TokenGenerator_1084441805539" name="gen_signtgen" classname="com.ibm.wsspi.wssecurity.token.X509TokenGenerator">
        <valueType xmi:id="ValueType_1084441805539" localName="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509" uri="" name="gen_signtgen_vtype"/>
        <callbackHandler xmi:id="CallbackHandler_1084441805539" classname="com.ibm.wsspi.wssecurity.auth.callback.X509CallbackHandler">
          <key xmi:id="Key_1084441805539" alias="soaprequester" keypass="{xor}PDM2OjEr" name="CN=SOAPRequester, OU=TRL, O=IBM, ST=Kanagawa, C=JP"/>
          <keyStore xmi:id="KeyStore_1084441805539" storepass="{xor}PDM2OjEr" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/dsig-sender.ks" type="JKS"/>
        </callbackHandler>
      </tokenGenerator>
      <tokenGenerator xmi:id="TokenGenerator_1084441805540" name="gen_enctgen" classname="com.ibm.wsspi.wssecurity.token.X509TokenGenerator">
        <valueType xmi:id="ValueType_1084441805540" localName="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509" uri="" name="gen_enctgen_vtype"/>
        <callbackHandler xmi:id="CallbackHandler_1084441805540" classname="com.ibm.wsspi.wssecurity.auth.callback.X509CallbackHandler">
          <key xmi:id="Key_1084441805540" alias="bob" keypass="{xor}" name="CN=Bob,O=IBM,C=US"/>
          <keyStore xmi:id="KeyStore_1084441805540" storepass="{xor}LCswLTovPiws" path="${USER_INSTALL_ROOT}/etc/ws-security/samples/enc-sender.jceks" type="JCEKS"/>
        </callbackHandler>
      </tokenGenerator>
    </generator>
    <consumer xmi:id="Consumer_1084441805539">
      <signingInfo xmi:id="SigningInfo_1084441805539" name="con_signinfo">
        <signatureMethod xmi:id="SignatureMethod_1084441805539" algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
        <canonicalizationMethod xmi:id="CanonicalizationMethod_1084441805539" algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <partReference xmi:id="PartReference_1084441805541" name="con_signpart">
          <transform xmi:id="Transform_1084441805539" algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" name="reqint_body_transform1"/>
          <digestMethod xmi:id="DigestMethod_1084441805539" algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
        </partReference>
        <signingKeyInfo xmi:id="SigningKeyInfo_1084441805539" keyinfoRef="con_signkeyinfo" name="con_skeyinfo"/>
      </signingInfo>
      <encryptionInfo xmi:id="EncryptionInfo_1084441805539" name="con_encinfo">
        <encryptionMethod xmi:id="DataEncryptionMethod_1084441805539" algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
        <keyEncryptionMethod xmi:id="KeyEncryptionMethod_1084441805539" algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>
        <encryptionKeyInfo xmi:id="EncryptionKeyInfo_1084441805539" keyinfoRef="con_enckeyinfo" name="con_ekeyinfo"/>
      </encryptionInfo>
      <keyInfo xmi:id="KeyInfo_1084441805540" type="STRREF" name="con_signkeyinfo" classname="com.ibm.ws.webservices.wssecurity.keyinfo.STRReferenceContentConsumer">
        <keyLocatorMapping xmi:id="KeyLocatorMapping_1084441805540" locatorRef="SampleX509TokenKeyLocator"/>
        <tokenReference xmi:id="TokenReference_1084441805541" tokenRef="con_signtcon" name="con_signkeyinfo_tref"/>
      </keyInfo>
      <keyInfo xmi:id="KeyInfo_1084441805541" type="KEYID" name="con_enckeyinfo" classname="com.ibm.ws.webservices.wssecurity.keyinfo.KeyIdContentConsumer">
        <keyLocatorMapping xmi:id="KeyLocatorMapping_1084441805541" locatorRef="SampleConsumerEncryptionKeyStoreKeyLocator"/>
        <tokenReference xmi:id="TokenReference_1084441805542" tokenRef="con_enctcon" name="con_enckeyinfo_tref"/>
      </keyInfo>
      <tokenConsumer xmi:id="TokenConsumer_1084441805539" classname="com.ibm.wsspi.wssecurity.token.X509TokenConsumer" name="con_signtcon">
        <valueType xmi:id="ValueType_1084441805541" localName="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509" uri="" name="signtconsumer_vtype"/>
        <jAASConfig xmi:id="JAASConfig_1084441805539" configName="system.wssecurity.X509BST"/>
        <certPathSettings xmi:id="CertPathSettings_1084441805539">
          <trustAnchorRef xmi:id="TrustAnchorRef_1084441805539" ref="SampleClientTrustAnchor"/>
          <certStoreRef xmi:id="CertStoreRef_1084441805539" ref="SampleCollectionCertStore"/>
        </certPathSettings>
      </tokenConsumer>
      <tokenConsumer xmi:id="TokenConsumer_1084441805540" classname="com.ibm.wsspi.wssecurity.token.X509TokenConsumer" name="con_enctcon">
        <valueType xmi:id="ValueType_1084441805542" localName="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509" uri="" name="enctconsumer_vtype"/>
        <jAASConfig xmi:id="JAASConfig_1084441805540" configName="system.wssecurity.X509BST"/>
        <certPathSettings xmi:id="CertPathSettings_1084441805540">
          <trustAnyCertificate xmi:id="TrustAnyCertificate_1084441805549"/>
        </certPathSettings>
      </tokenConsumer>
    </consumer>
  </defaultbindings>
</com.ibm.etools.webservice.wssecurity:WSSecurity>