cxf-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ningji...@apache.org
Subject svn commit: r541568 [1/4] - in /incubator/cxf/trunk: api/src/main/java/org/apache/cxf/configuration/jsse/ common/schemas/src/main/resources/schemas/configuration/ distribution/src/main/release/samples/hello_world_https/ distribution/src/main/release/sa...
Date Fri, 25 May 2007 06:44:32 GMT
Author: ningjiang
Date: Thu May 24 23:44:27 2007
New Revision: 541568

URL: http://svn.apache.org/viewvc?view=rev&rev=541568
Log:
[CXF-661,CXF-666,CXF-672] applied polar's patch for SSL configuration

Added:
    incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/
    incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSClientParameters.java   (with props)
    incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSParameterBase.java   (with props)
    incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSServerParameters.java   (with props)
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/CherryServer.cxf
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/InsecureClient.cxf
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/WibbleClient.cxf
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/bin/
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/bin/gencerts.sh   (with props)
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ca.crl
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cacert.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/caprivkey.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry-ra-cert.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry.chain
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry.jks   (with props)
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrcherry.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrra.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrwibble.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt   (with props)
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt.old
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1345.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1346.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1347.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial.old
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/exts
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ra-ca-cert.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/raprivkey.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/truststore.jks   (with props)
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble-ra-cert.pem
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble.chain
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble.jks   (with props)
    incubator/cxf/trunk/rt/transports/http-jetty/src/main/java/org/apache/cxf/transport/http_jetty/JettyHTTPServerEngineFactory.java   (with props)
    incubator/cxf/trunk/rt/transports/http-jetty/src/main/java/org/apache/cxf/transport/https_jetty/CXFJettySslSocketConnector.java   (with props)
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/configuration/
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/configuration/jsse/
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/configuration/jsse/spring/
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/configuration/jsse/spring/TLSClientParametersConfig.java   (with props)
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/configuration/jsse/spring/TLSParameterJaxBUtils.java   (with props)
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/configuration/jsse/spring/TLSServerParametersConfig.java   (with props)
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/HTTPConduit2Test.java   (with props)
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Abost-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Bethal-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Gordy-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Http2HttpLoopRedirectFail-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Http2HttpRedirect-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Hurlon-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Morpit-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Mortimer-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Poltim-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Rethwel-2.cxf
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/resources/Tarpin-2.cxf
Modified:
    incubator/cxf/trunk/common/schemas/src/main/resources/schemas/configuration/security.xsd
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/README.txt
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/build.xml
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/client.xml
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/insecure_client.xml
    incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/server.xml
    incubator/cxf/trunk/rt/transports/http-jetty/pom.xml
    incubator/cxf/trunk/rt/transports/http-jetty/src/main/java/org/apache/cxf/transport/http_jetty/JettyHTTPDestination.java
    incubator/cxf/trunk/rt/transports/http-jetty/src/main/java/org/apache/cxf/transport/http_jetty/JettyHTTPServerEngine.java
    incubator/cxf/trunk/rt/transports/http-jetty/src/main/java/org/apache/cxf/transport/http_jetty/JettyHTTPTransportFactory.java
    incubator/cxf/trunk/rt/transports/http-jetty/src/main/java/org/apache/cxf/transport/https_jetty/JettySslConnectorFactory.java
    incubator/cxf/trunk/rt/transports/http-jetty/src/test/java/org/apache/cxf/transport/http_jetty/JettyHTTPDestinationTest.java
    incubator/cxf/trunk/rt/transports/http-jetty/src/test/java/org/apache/cxf/transport/http_jetty/JettyHTTPServerEngineTest.java
    incubator/cxf/trunk/rt/transports/http-jetty/src/test/java/org/apache/cxf/transport/https_jetty/JettySslConnectorFactoryTest.java
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/transport/http/AbstractHTTPDestination.java
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/transport/http/AbstractHTTPTransportFactory.java
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/transport/http/HTTPConduit.java
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/transport/http/spring/HttpConduitBeanDefinitionParser.java
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/transport/http/spring/HttpDestinationBeanDefinitionParser.java
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/transport/https/HttpsURLConnectionFactory.java
    incubator/cxf/trunk/rt/transports/http/src/main/java/org/apache/cxf/transport/https/SSLUtils.java
    incubator/cxf/trunk/rt/transports/http/src/main/resources/schemas/configuration/http-listener.xsd
    incubator/cxf/trunk/rt/transports/http/src/main/resources/schemas/wsdl/http-conf.xsd
    incubator/cxf/trunk/rt/transports/http/src/test/java/org/apache/cxf/transport/https/HttpsURLConnectionFactoryTest.java
    incubator/cxf/trunk/systests/pom.xml
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/http/HTTPConduitTest.java
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/management/CountersClientServerTest.java
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/management/ManagedBusTest.java
    incubator/cxf/trunk/systests/src/test/java/org/apache/cxf/systest/management/ManagedClientServerTest.java

Added: incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSClientParameters.java
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSClientParameters.java?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSClientParameters.java (added)
+++ incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSClientParameters.java Thu May 24 23:44:27 2007
@@ -0,0 +1,23 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.cxf.configuration.jsse;
+
+public class TLSClientParameters extends TLSParameterBase {
+    
+}

Propchange: incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSClientParameters.java
------------------------------------------------------------------------------
    svn:eol-style = native

Propchange: incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSClientParameters.java
------------------------------------------------------------------------------
    svn:keywords = Rev Date

Added: incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSParameterBase.java
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSParameterBase.java?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSParameterBase.java (added)
+++ incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSParameterBase.java Thu May 24 23:44:27 2007
@@ -0,0 +1,156 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.cxf.configuration.jsse;
+
+import java.security.SecureRandom;
+import java.util.ArrayList;
+import java.util.List;
+
+import javax.net.ssl.KeyManager;
+import javax.net.ssl.TrustManager;
+
+import org.apache.cxf.configuration.security.FiltersType;
+/**
+ * This class is the base class for TLS parameters that are common
+ * to both client and server sides.
+ */
+public class TLSParameterBase {
+    private KeyManager[]    keyManagers;
+    private TrustManager[]  trustManagers;
+    private String          provider;
+    private List<String>    ciphersuites = new ArrayList<String>();
+    private FiltersType     cipherSuiteFilters;
+    private SecureRandom    secureRandom;
+    private String          protocol;
+    
+    /**
+     * This parameter configures the JSSE provider. If not set, it
+     * uses system default.
+     */
+    public final void setJsseProvider(String prov) {
+        provider = prov;
+    }
+    
+    /**
+     * This parameter configures to use the following KeyManagers.
+     * This parameter may be set to null for system default behavior.
+     */
+    public final void setKeyManagers(KeyManager[] keyMgrs) {
+        keyManagers = keyMgrs;
+    }
+
+    /**
+     * This parameter configures to use the following TrustManagers.
+     * This parameter may be set to null for system default behavior.
+     */
+    public final void setTrustManagers(TrustManager[] trustMgrs) {
+        trustManagers = trustMgrs;
+    }
+    
+    /**
+     * This parameter sets the cipher suites list to use. If left unset
+     * it uses system defaults.
+     */
+    public final void setCipherSuites(List<String> cs) {
+        ciphersuites = cs;
+    }
+    
+    /**
+     * This parameter sets the filter to include and/or exclude the 
+     * cipher suites to use from the set list or system defaults.
+     */
+    public final void setCipherSuitesFilter(FiltersType filters) {
+        cipherSuiteFilters = filters;
+    }
+    
+    /**
+     * This sets the protocol to use. The system default is usually
+     * "TLS".
+     */
+    public final void setSecureSocketProtocol(String proto) {
+        protocol = proto;
+    }
+
+    /**
+     * This sets the secure random provider and alogorithm. If left unset or set
+     * to null, it uses the system default.
+     */
+    public final void setSecureRandom(SecureRandom random) {
+        secureRandom = random;
+    }
+
+    /**
+     * This sets the secure random alogorithm. If left unset or set
+     * to null, it uses the system default.
+     */
+    public SecureRandom getSecureRandom() {
+        return secureRandom;
+    }
+
+    /**
+     * This sets the protocol to use. The system default is usually
+     * "TLS".
+     */
+    public String getSecureSocketProtocol() {
+        return protocol;
+    }
+
+    /**
+     * This parameter configures the JSSE provider. If not set, it
+     * uses system default.
+     */
+    public String getJsseProvider() {
+        return provider;
+    }
+
+    /**
+     * This parameter configures to use the following KeyManagers.
+     * This parameter may be set to null for system default behavior.
+     */
+    public KeyManager[] getKeyManagers() {
+        return keyManagers;
+    }
+
+    /**
+     * This parameter configures to use the following TrustManagers.
+     * This parameter may be set to null for system default behavior.
+     */
+    public TrustManager[] getTrustManagers() {
+        return trustManagers;
+    }
+
+    /**
+     * This parameter sets the cipher suites list to use. If left unset
+     * it uses system defaults.
+     */
+    public List<String> getCipherSuites() {
+        if (ciphersuites == null) {
+            ciphersuites = new ArrayList<String>();
+        }
+        return ciphersuites;
+    }
+
+    /**
+     * This parameter sets the filter to include and/or exclude the 
+     * cipher suites to use from the set list or system defaults.
+     */
+    public FiltersType getCipherSuitesFilter() {
+        return cipherSuiteFilters;
+    }
+}

Propchange: incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSParameterBase.java
------------------------------------------------------------------------------
    svn:eol-style = native

Propchange: incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSParameterBase.java
------------------------------------------------------------------------------
    svn:keywords = Rev Date

Added: incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSServerParameters.java
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSServerParameters.java?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSServerParameters.java (added)
+++ incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSServerParameters.java Thu May 24 23:44:27 2007
@@ -0,0 +1,45 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.cxf.configuration.jsse;
+
+import javax.annotation.Resource;
+
+import org.apache.cxf.configuration.security.ClientAuthentication;
+
+public class TLSServerParameters extends TLSParameterBase {
+
+    ClientAuthentication clientAuthentication;
+    
+    /**
+     * This parameter configures the server side to request and/or
+     * require client authentication.
+     */
+    @Resource
+    public final void setClientAuthentication(ClientAuthentication clientAuth) {
+        clientAuthentication = clientAuth;
+    }
+
+    /**
+     * This parameter configures the server side to request and/or
+     * require client authentication.
+     */
+    public ClientAuthentication getClientAuthentication() {
+        return clientAuthentication;
+    }
+}

Propchange: incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSServerParameters.java
------------------------------------------------------------------------------
    svn:eol-style = native

Propchange: incubator/cxf/trunk/api/src/main/java/org/apache/cxf/configuration/jsse/TLSServerParameters.java
------------------------------------------------------------------------------
    svn:keywords = Rev Date

Modified: incubator/cxf/trunk/common/schemas/src/main/resources/schemas/configuration/security.xsd
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/common/schemas/src/main/resources/schemas/configuration/security.xsd?view=diff&rev=541568&r1=541567&r2=541568
==============================================================================
--- incubator/cxf/trunk/common/schemas/src/main/resources/schemas/configuration/security.xsd (original)
+++ incubator/cxf/trunk/common/schemas/src/main/resources/schemas/configuration/security.xsd Thu May 24 23:44:27 2007
@@ -24,8 +24,15 @@
            attributeFormDefault="unqualified"
            xmlns:jaxb="http://java.sun.com/xml/ns/jaxb"
            xmlns:tns="http://cxf.apache.org/configuration/security"
+           xmlns:beans="http://www.springframework.org/schema/beans"
+  		   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  		   xsi:schemaLocation="
+  		       http://www.springframework.org/schema/beans
+  		       http://www.springframework.org/schema/beans/spring-beans-2.0.xsd"
            jaxb:version="2.0">
 
+    <xs:import namespace="http://www.springframework.org/schema/beans"/>
+    
     <xs:complexType name="AuthorizationPolicy">
         <xs:annotation>
             <xs:documentation>
@@ -76,6 +83,12 @@
         </xs:sequence>
     </xs:complexType>
     <xs:element name="authorization" type="tns:AuthorizationPolicy"/>
+    
+    <xs:complexType name="ProxyAuthorizationPolicy">
+       <xs:complexContent>
+          <xs:extension base="tns:AuthorizationPolicy"/>
+       </xs:complexContent>
+    </xs:complexType>
 
     <xs:complexType name="FiltersType">
         <xs:sequence>
@@ -83,7 +96,78 @@
             <xs:element name="exclude" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
         </xs:sequence>
     </xs:complexType>
-            
+    
+    <xs:complexType name="ClientAuthentication">
+        <xs:attribute name="want"     type="xs:boolean"/>
+        <xs:attribute name="required" type="xs:boolean"/>
+    </xs:complexType>
+    
+    <xs:complexType name="KeyStoreType">
+        <xs:attribute name="type"     type="xs:string"/>
+        <xs:attribute name="password" type="xs:string"/>
+        <xs:attribute name="provider" type="xs:string"/>
+        <xs:attribute name="url"      type="xs:string"/>
+        <xs:attribute name="file"     type="xs:string"/>
+        <xs:attribute name="resource" type="xs:string"/>
+    </xs:complexType>
+    
+    <xs:complexType name="KeyManagersType">
+         <xs:sequence>
+            <xs:element name="keyStore"          type="tns:KeyStoreType" minOccurs="0"/>
+         </xs:sequence>
+            <xs:attribute name="keyPassword"       type="xs:string"/>
+            <xs:attribute name="provider"          type="xs:string"/>
+            <xs:attribute name="factoryAlgorithm"  type="xs:string"/>
+    </xs:complexType>
+    
+    <xs:complexType name="TrustManagersType">
+         <xs:sequence>
+            <xs:element name="keyStore"          type="tns:KeyStoreType" minOccurs="0"/>
+         </xs:sequence>
+            <xs:attribute name="provider"          type="xs:string"/>
+            <xs:attribute name="factoryAlgorithm"  type="xs:string"/>
+    </xs:complexType>
+    
+    <xs:complexType name="CipherSuites">
+        <xs:sequence>
+           <xs:element name="cipherSuite" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+    
+    <xs:complexType name="SecureRandomParameters">
+        <xs:attribute name="algorithm"/>
+        <xs:attribute name="provider"/>
+    </xs:complexType>
+    
+    <!-- Although there are common elements of TLSClientParametersType
+      ** and TLSServerParametersType they are listed separate so we
+      ** can use the xs:all element.
+      -->
+    <xs:complexType name="TLSClientParametersType">
+        <xs:all>
+           <xs:element name="keyManagers"           type="tns:KeyManagersType"     minOccurs="0"/>
+           <xs:element name="trustManagers"         type="tns:TrustManagersType"   minOccurs="0"/>
+           <xs:element name="cipherSuites"          type="tns:CipherSuites"        minOccurs="0"/>
+           <xs:element name="cipherSuitesFilter"    type="tns:FiltersType"         minOccurs="0"/>
+           <xs:element name="secureRandomParameters" type="tns:SecureRandomParameters" minOccurs="0"/>
+        </xs:all>
+           <xs:attribute name="jsseProvider"          type="xs:string"/>
+           <xs:attribute name="secureSocketProtocol"  type="xs:string"/>
+    </xs:complexType>
+    
+    <xs:complexType name="TLSServerParametersType">
+        <xs:all>
+           <xs:element name="keyManagers"           type="tns:KeyManagersType"     minOccurs="0"/>
+           <xs:element name="trustManagers"         type="tns:TrustManagersType"   minOccurs="0"/>
+           <xs:element name="cipherSuites"          type="tns:CipherSuites"        minOccurs="0"/>
+           <xs:element name="cipherSuitesFilter"    type="tns:FiltersType"         minOccurs="0"/>
+           <xs:element name="secureRandomParameters" type="tns:SecureRandomParameters" minOccurs="0"/>
+           <xs:element name="clientAuthentication"  type="tns:ClientAuthentication" minOccurs="0"/>
+        </xs:all>
+           <xs:attribute name="jsseProvider"          type="xs:string"/>
+           <xs:attribute name="secureSocketProtocol"  type="xs:string"/>
+    </xs:complexType>
+    
     <xs:complexType name="SSLServerPolicy">
         <xs:annotation>
             <xs:documentation>

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/CherryServer.cxf
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/CherryServer.cxf?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/CherryServer.cxf (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/CherryServer.cxf Thu May 24 23:44:27 2007
@@ -0,0 +1,63 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one
+  or more contributor license agreements. See the NOTICE file
+  distributed with this work for additional information
+  regarding copyright ownership. The ASF licenses this file
+  to you under the Apache License, Version 2.0 (the
+  "License"); you may not use this file except in compliance
+  with the License. You may obtain a copy of the License at
+  
+  http://www.apache.org/licenses/LICENSE-2.0
+  
+  Unless required by applicable law or agreed to in writing,
+  software distributed under the License is distributed on an
+  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+  KIND, either express or implied. See the License for the
+  specific language governing permissions and limitations
+  under the License.
+-->
+
+<!-- 
+  ** This file configures the Cherry Server.
+ -->
+
+<beans xmlns="http://www.springframework.org/schema/beans"
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xmlns:sec="http://cxf.apache.org/configuration/security"
+  xmlns:http="http://cxf.apache.org/transports/http/configuration"
+  xmlns:jaxws="http://java.sun.com/xml/ns/jaxws"
+  xsi:schemaLocation="
+       http://cxf.apache.org/transports/http/configuration
+           http://cxf.apache.org/schema/transports/http.xsd
+       http://www.springframework.org/schema/beans
+           http://www.springframework.org/schema/beans/spring-beans.xsd">
+
+  <http:destination id="{http://apache.org/hello_world_soap_http}GreeterPort.http-destination"> 
+    <http:tlsServerParameters>
+      <sec:keyManagers keyPassword="password">
+           <sec:keyStore type="JKS" password="password" 
+                file="certs/cherry.jks"/>
+      </sec:keyManagers>
+      <sec:trustManagers>
+          <sec:keyStore type="JKS" password="password"
+               file="certs/truststore.jks"/>
+      </sec:trustManagers>
+      <sec:cipherSuitesFilter>
+        <!-- these filters ensure that a ciphersuite with
+          export-suitable or null encryption is used,
+          but exclude anonymous Diffie-Hellman key change as
+          this is vulnerable to man-in-the-middle attacks -->
+        <sec:include>.*_EXPORT_.*</sec:include>
+        <sec:include>.*_EXPORT1024_.*</sec:include>
+        <sec:include>.*_WITH_DES_.*</sec:include>
+        <sec:include>.*_WITH_NULL_.*</sec:include>
+        <sec:exclude>.*_DH_anon_.*</sec:exclude>
+      </sec:cipherSuitesFilter>
+      <sec:clientAuthentication want="true" required="true"/>
+    </http:tlsServerParameters>
+  </http:destination>
+  
+  <!-- We need a bean named "cxf", or SpringBusFactory barfs -->
+  <bean id="cxf" class="org.apache.cxf.bus.CXFBusImpl"/>
+</beans>

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/InsecureClient.cxf
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/InsecureClient.cxf?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/InsecureClient.cxf (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/InsecureClient.cxf Thu May 24 23:44:27 2007
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one
+  or more contributor license agreements. See the NOTICE file
+  distributed with this work for additional information
+  regarding copyright ownership. The ASF licenses this file
+  to you under the Apache License, Version 2.0 (the
+  "License"); you may not use this file except in compliance
+  with the License. You may obtain a copy of the License at
+  
+  http://www.apache.org/licenses/LICENSE-2.0
+  
+  Unless required by applicable law or agreed to in writing,
+  software distributed under the License is distributed on an
+  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+  KIND, either express or implied. See the License for the
+  specific language governing permissions and limitations
+  under the License.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans"
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xmlns:http="http://cxf.apache.org/transports/http/configuration"
+  xsi:schemaLocation="
+http://cxf.apache.org/transports/http/configuration http://cxf.apache.org/schema/transports/http.xsd
+http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
+
+  <http:conduit id="{http://apache.org/hello_world_soap_http}SoapPort.http-conduit">
+  </http:conduit>
+
+</beans>

Modified: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/README.txt
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/README.txt?view=diff&rev=541568&r1=541567&r2=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/README.txt (original)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/README.txt Thu May 24 23:44:27 2007
@@ -43,14 +43,15 @@
 configuration using 2 different scenarios. The non-defaulted security
 policy values are be specified via configuration files.
 
-Scenario 1: A HTTPS listener is started up. The listener requires
-client authentication so the client must provide suitable
-credentials. The listener configuration is taken from the server.xml
-file located in this directory.  The client's security data is taken
-from from the secure_client.xml file in this directory,
-using the bean name:
-"{http://apache.org/hello_world_soap_http}SoapPort.http-conduit".
-The client does NOT provide the appropriate credentials and so the
+Scenario 1:
+
+A HTTPS listener is started up. The listener requires
+client authentication so the client must provide suitable credentials.
+The listener configuration is taken from the "CherryServer.cxf" file
+located in this directory.  The client's security data is taken from
+from the "InsecureClient.cxf" file in this directory, using the bean name:
+"{http://apache.org/hello_world_soap_http}SoapPort.http-conduit". The
+client does NOT provide the appropriate credentials and so the
 invocation on the server fails.
 
 To run:
@@ -58,27 +59,45 @@
   ant server
   ant insecure.client
 
-Scenario 2: The same HTTPS listener is used. The client's security
-data is taken from the client.xml file in this directory,
+Scenario 2: 
+The same HTTPS listener is used. The client's security data is taken
+from the "WibbleClient.cxf" configuration file in this directory, 
 using the bean name:
-"{http://apache.org/hello_world_soap_http}SoapPort.http-conduit".
-The client is configured to provide the certificate
-src/demo/hw_https/resources/celtix.p12 to the server and so the server
-authenticates the client's certificate using its trust store
-src/demo/hw_https/resources/abigcompany_ca.pem. Likewise the client
-authenticates the servers certificate against its CA
-src/demo/hw_https/resources/abigcompany_ca.pem. 
-Note also the usage of the CiphersuitesFilters configuration in
-the client.xml and server.xml, where each party imposes different
-ciphersuites contraints, so that the ciphersuite eventually
-negotiated during the TLS handshake is acceptable to both sides.
+"{http://apache.org/hello_world_soap_http}SoapPort.http-conduit". 
+
+The client is configured to provide its certificate "CN=Wibble" and
+chain stored in the Java KeyStore "certs/wibble.jks" to the server. The
+server authenticates the client's certificate using its trust store
+"certs/truststore.jks", which holds the Certificate Authorities'
+certificates.
+
+Likewise the client authenticates the server's certificate "CN=Cherry"
+and chain against the same trust store.  Note also the usage of the
+cipherSuitesFilter configuration in the configuration files,
+where each party imposes different ciphersuites contraints, so that the
+ciphersuite eventually negotiated during the TLS handshake is acceptable
+to both sides. This may be viewed by adding a -Djavax.net.debug=all 
+argument to the JVM.
 
 But please note that it is not adviseable to store sensitive data such
 as passwords stored in a clear text configuration file, unless the
-file is sufficiently protected by OS level permissions. The approach
-taken here is for demonstration reasons only.
+file is sufficiently protected by OS level permissions. The KeyStores
+may be configured programatically so using user interaction may be
+employed to keep passwords from being stored in configuration files.
+The approach taken here is for demonstration reasons only. 
+
 
 To run:
 
   ant server
   ant secure.client
+
+Certificates:
+If the certificates are expired for some reason, a shell script in 
+bin/gencerts.sh will generate the set of certificates needed for
+this sample. Just do the following:
+
+        cd certs
+        sh ../bin/gencerts.sh
+       
+   

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/WibbleClient.cxf
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/WibbleClient.cxf?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/WibbleClient.cxf (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/WibbleClient.cxf Thu May 24 23:44:27 2007
@@ -0,0 +1,63 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one
+  or more contributor license agreements. See the NOTICE file
+  distributed with this work for additional information
+  regarding copyright ownership. The ASF licenses this file
+  to you under the Apache License, Version 2.0 (the
+  "License"); you may not use this file except in compliance
+  with the License. You may obtain a copy of the License at
+  
+  http://www.apache.org/licenses/LICENSE-2.0
+  
+  Unless required by applicable law or agreed to in writing,
+  software distributed under the License is distributed on an
+  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+  KIND, either express or implied. See the License for the
+  specific language governing permissions and limitations
+  under the License.
+-->
+
+<!-- 
+  ** This file configures the Wibble Client
+  -->
+
+<beans xmlns="http://www.springframework.org/schema/beans"
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xmlns:sec="http://cxf.apache.org/configuration/security"
+  xmlns:http="http://cxf.apache.org/transports/http/configuration"
+  xmlns:jaxws="http://java.sun.com/xml/ns/jaxws"
+  xsi:schemaLocation="
+           http://cxf.apache.org/transports/http/configuration
+              http://cxf.apache.org/schema/transports/http.xsd
+           http://www.springframework.org/schema/beans
+              http://www.springframework.org/schema/beans/spring-beans.xsd">
+
+  <http:conduit id="{http://apache.org/hello_world_soap_http}SoapPort.http-conduit">
+    <http:tlsClientParameters>
+      <sec:trustManagers>
+          <sec:keyStore type="JKS" password="password"
+               file="certs/truststore.jks"/>
+      </sec:trustManagers>
+      <sec:keyManagers keyPassword="password">
+           <sec:keyStore type="JKS" password="password" 
+                file="certs/wibble.jks"/>
+      </sec:keyManagers>
+      <sec:cipherSuitesFilter>
+        <!-- these filters ensure that a ciphersuite with
+          export-suitable or null encryption is used,
+          but exclude anonymous Diffie-Hellman key change as
+          this is vulnerable to man-in-the-middle attacks -->
+        <sec:include>.*_EXPORT_.*</sec:include>
+        <sec:include>.*_EXPORT1024_.*</sec:include>
+        <sec:include>.*_WITH_DES_.*</sec:include>
+        <sec:include>.*_WITH_NULL_.*</sec:include>
+        <sec:exclude>.*_DH_anon_.*</sec:exclude>
+      </sec:cipherSuitesFilter>
+    </http:tlsClientParameters>
+   </http:conduit>
+  
+    <bean id="cxf" class="org.apache.cxf.bus.CXFBusImpl">
+    </bean> 
+
+</beans>

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/bin/gencerts.sh
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/bin/gencerts.sh?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/bin/gencerts.sh (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/bin/gencerts.sh Thu May 24 23:44:27 2007
@@ -0,0 +1,144 @@
+#!/bin/sh
+#
+# This file uses openssl and keytool to generate 2 chains of 3 certificates 
+# CN=Wibble             CN=Cherry
+#             CN=TheRA
+#             CN=TheCA
+# and generates a CRL to revoke the "CN=TheRA" certificate.
+#
+# This file also serves as a specification on what needs to be done to
+# get the underlying CXF to work correctly.
+# For the most part, you need to use only JKS (Java Key Store) formatted
+# keystores and truststores.
+
+
+# Initialize the default openssl DataBase.
+# According to a default /usr/lib/ssl/openssl.cnf file it is ./demoCA
+# Depending on the Openssl version, comment out "crlnumber" in config file.
+# We echo 1345 to start the certificate serial number counter.
+
+    rm -rf demoCA
+    mkdir -p demoCA/newcerts
+    cp /dev/null demoCA/index.txt
+    echo "1345" > demoCA/serial
+
+# This file makes sure that the certificate for CN=TheRA can be a Certificate
+# Authority, i.e. can sign the user certificates, e.g. "CN=Wibble".
+
+cat <<EOF > exts
+[x509_extensions]
+basicConstraints=CA:TRUE
+EOF
+
+# Create the CA's keypair and self-signed certificate
+#   -x509 means create self-sign cert
+#   -keyout means generate keypair
+#   -nodes means do not encrypt private key.
+#   -set_serial sets the serial number of the certificate
+
+    openssl req -verbose -x509 -new -nodes -set_serial 1234 \
+    -subj "/CN=TheCA/OU=NOT FOR PRODUCTION/O=Apache/ST=NY/C=US" \
+    -days 365 -out cacert.pem -keyout caprivkey.pem 
+
+# Create the RA's keypair and Certificate Request
+#    without -x509, we generate an x509 cert request.
+#   -keyout means generate keypair
+#   -nodes means do not encrypt private key.
+
+    openssl req -verbose -new -nodes \
+    -subj "/CN=TheRA/OU=NOT FOR PRODUCTION/O=Apache/ST=NY/C=US" \
+    -days 365 -out csrra.pem -keyout raprivkey.pem 
+
+# Have the CN=TheCA issue a certificate for the CN=TheRA
+# We need -extfile exts -extenstions x509_extensions to make sure 
+# CN=TheRA can be a Certificate Authority.
+
+    openssl ca -batch -days 364 -cert cacert.pem -keyfile caprivkey.pem \
+    -in csrra.pem -out ra-ca-cert.pem -extfile exts -extensions x509_extensions
+
+# Create keypairs and Cert Request for a certificate for CN=Wibble and CN=Cherry
+# This procedure must be done in JKS, because we need to use a JKS keystore.
+# The current version of CXF using PCKS12 will not work for a number of 
+# internal CXF reasons.
+
+    rm -f wibble.jks
+
+    keytool -genkey \
+    -dname "CN=Wibble, OU=NOT FOR PRODUCTION, O=Apache, ST=NY, C=US" \
+    -keystore wibble.jks -storetype jks -storepass password -keypass password
+
+    keytool -certreq -keystore wibble.jks -storetype jks -storepass password \
+    -keypass password -file csrwibble.pem
+
+
+    rm -f cherry.jks
+
+    keytool -genkey \
+    -dname "CN=Cherry, OU=NOT FOR PRODUCTION, O=Apache, ST=NY, C=US" \
+    -keystore cherry.jks -storetype jks -storepass password -keypass password
+
+    keytool -certreq -keystore cherry.jks -storetype jks -storepass password \
+    -keypass password -file csrcherry.pem
+
+
+# Have the CN=TheRA issue a certificate for CN=Wibble and CN=Cherry via
+# their Certificate Requests.
+
+   openssl ca -batch -days 364 -cert ra-ca-cert.pem -keyfile raprivkey.pem \
+   -in csrwibble.pem -out wibble-ra-cert.pem 
+   
+   openssl ca -batch -days 364 -cert ra-ca-cert.pem -keyfile raprivkey.pem \
+   -in csrcherry.pem -out cherry-ra-cert.pem
+
+
+# Rewrite the certificates in PEM only format. This allows us to concatenate
+# them into chains.
+
+    openssl x509 -in cacert.pem -out cacert.pem -outform PEM
+    openssl x509 -in ra-ca-cert.pem -out ra-ca-cert.pem -outform PEM
+    openssl x509 -in wibble-ra-cert.pem -out wibble-ra-cert.pem -outform PEM
+    openssl x509 -in cherry-ra-cert.pem -out cherry-ra-cert.pem -outform PEM
+
+# Create a chain readable by CertificateFactory.getCertificates.
+
+    cat wibble-ra-cert.pem ra-ca-cert.pem cacert.pem > wibble.chain
+    cat cherry-ra-cert.pem ra-ca-cert.pem cacert.pem > cherry.chain
+
+# Replace the certificate in the Wibble keystore with their respective
+# full chains.
+
+    keytool -import -file wibble.chain -keystore wibble.jks -storetype jks \
+    -storepass password -keypass password -noprompt
+
+    keytool -import -file cherry.chain -keystore cherry.jks -storetype jks \
+    -storepass password -keypass password -noprompt
+
+# Revoke the CN=TheRA certificate (happens in the Openssl DB)
+
+    openssl ca -verbose -cert cacert.pem -keyfile caprivkey.pem \
+    -revoke ra-ca-cert.pem -crl_reason keyCompromise 
+
+# Create the CRL from that revocation (from the Openssl DB)
+
+    openssl ca -verbose -gencrl -out ca.crl -cert cacert.pem \
+    -keyfile caprivkey.pem
+
+# Create the Truststore file containing the CA cert.
+
+    rm -f truststore.jks
+    
+    keytool -import -file cacert.pem -alias TheCA -keystore truststore.jks \
+    -storepass password -noprompt
+
+# Uncomment to see what's in the Keystores and CRL
+
+    keytool -v -list -keystore wibble.jks -storepass password
+    
+    keytool -v -list -keystore cherry.jks -storepass password
+    
+    keytool -v -list -keystore truststore.jks -storepass password
+    
+    openssl crl -in ca.crl -text -noout
+
+# Get rid of everything but wibble.chain and ra.crl
+#rm -rf *.pem exts demoCA *pk12

Propchange: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/bin/gencerts.sh
------------------------------------------------------------------------------
    svn:eol-style = native

Propchange: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/bin/gencerts.sh
------------------------------------------------------------------------------
    svn:executable = *

Modified: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/build.xml
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/build.xml?view=diff&rev=541568&r1=541567&r2=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/build.xml (original)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/build.xml Thu May 24 23:44:27 2007
@@ -24,7 +24,7 @@
     <target name="insecure.client" description="run demo insecure client" depends="build">
         <property name="param" value=""/>
         <cxfrun classname="demo.hw_https.client.Client"
-                jvmarg1="-Dcxf.config.file=insecure_client.xml"
+                jvmarg1="-Dcxf.config.file=InsecureClient.cxf"
                 param1="${basedir}/wsdl/hello_world.wsdl" 
                 param2="${user}"/>
     </target> 
@@ -32,14 +32,14 @@
     <target name="secure.client" description="run demo secure client" depends="build">
         <property name="param" value=""/>
         <cxfrun classname="demo.hw_https.client.Client"
-                jvmarg1="-Dcxf.config.file=client.xml"
+                jvmarg1="-Dcxf.config.file=WibbleClient.cxf"
                 param1="${basedir}/wsdl/hello_world.wsdl" 
                 param2="${user}"/>
     </target> 
         
     <target name="server" description="run demo server" depends="build">
         <cxfrun classname="demo.hw_https.server.Server" 
-                jvmarg1="-Dcxf.config.file=server.xml"/>
+                jvmarg1="-Dcxf.config.file=CherryServer.cxf"/>
     </target>
         
     <target name="generate.code">

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ca.crl
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ca.crl?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ca.crl (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ca.crl Thu May 24 23:44:27 2007
@@ -0,0 +1,9 @@
+-----BEGIN X509 CRL-----
+MIIBRTCBrwIBATANBgkqhkiG9w0BAQQFADBYMQ4wDAYDVQQDEwVUaGVDQTEbMBkG
+A1UECxMSTk9UIEZPUiBQUk9EVUNUSU9OMQ8wDQYDVQQKEwZBcGFjaGUxCzAJBgNV
+BAgTAk5ZMQswCQYDVQQGEwJVUxcNMDcwNTI1MDYwODI2WhcNMDcwNjI0MDYwODI2
+WjAjMCECAhNFFw0wNzA1MjUwNjA4MjZaMAwwCgYDVR0VBAMKAQEwDQYJKoZIhvcN
+AQEEBQADgYEAK8OzQ7XrcDkQkq6xTO0Rts64amO+awWDVaQtix1Ux2QDsd5vri6f
+qSkS6hIH+H6Rqr2xPTXDtb9JHbIpsf6DrF94ad92xx1SvcSi4TpxdN1Tn+pVjQvw
+EYldg+ksHmHJc9LpBBPX1VFS9wnT4gTkLA8HYV1O2fCbbhKJ07vNYuc=
+-----END X509 CRL-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cacert.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cacert.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cacert.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cacert.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/caprivkey.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/caprivkey.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/caprivkey.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/caprivkey.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry-ra-cert.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry-ra-cert.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry-ra-cert.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry-ra-cert.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry.chain
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry.chain?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry.chain (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry.chain Thu May 24 23:44:27 2007
@@ -0,0 +1,56 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIC3DCCAkWgAwIBAgICBNIwDQYJKoZIhvcNAQEEBQAwWDEOMAwGA1UEAxMFVGhl
+Q0ExGzAZBgNVBAsTEk5PVCBGT1IgUFJPRFVDVElPTjEPMA0GA1UEChMGQXBhY2hl
+MQswCQYDVQQIEwJOWTELMAkGA1UEBhMCVVMwHhcNMDcwNTI1MDYwODI0WhcNMDgw
+NTI0MDYwODI0WjBYMQ4wDAYDVQQDEwVUaGVDQTEbMBkGA1UECxMSTk9UIEZPUiBQ
+Uk9EVUNUSU9OMQ8wDQYDVQQKEwZBcGFjaGUxCzAJBgNVBAgTAk5ZMQswCQYDVQQG
+EwJVUzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAslkOm83+Ofgl4yJ3PAII
+aYEULJEOlElo9Rzr6e1iNdbGXncnRrfn3s3WqU4eWQpj417IpFvwXOjzsll2Gigk
+AAZgYrueUE/WmNDlcK0Ni7MRXpcGxyKJoeaXZyvfV5Wdmy9sCY7GoEGUBF7KOuUI
+nE3jT2wjME1Lko1ksBJNu80CAwEAAaOBtDCBsTAdBgNVHQ4EFgQUjiS4vGjDGQni
+HDhqYjlxtx+OcrIwgYEGA1UdIwR6MHiAFI4kuLxowxkJ4hw4amI5cbcfjnKyoVyk
+WjBYMQ4wDAYDVQQDEwVUaGVDQTEbMBkGA1UECxMSTk9UIEZPUiBQUk9EVUNUSU9O
+MQ8wDQYDVQQKEwZBcGFjaGUxCzAJBgNVBAgTAk5ZMQswCQYDVQQGEwJVU4ICBNIw
+DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQQFAAOBgQA0SQ4zV3AptrjBbj+J88xo
+ek4ir+B7hBHKaF4AWc+ex8Fi7z1fWesLwuYvzE81tdnTHA9Vef/lxXIEj8ld690e
+mlq3NVYrFVj4jgrQlzxh7Yfy1e4CQz8n+XWGT/mGLrwGDIZegA4qkE4bhR62FHFP
+cD5xmVCYkfYW9E8wqVNRSA==
+-----END CERTIFICATE-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry.jks
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry.jks?view=auto&rev=541568
==============================================================================
Binary file - no diff available.

Propchange: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/cherry.jks
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrcherry.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrcherry.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrcherry.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrcherry.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,13 @@
+-----BEGIN NEW CERTIFICATE REQUEST-----
+MIICXTCCAhsCAQAwWTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk5ZMQ8wDQYDVQQKEwZBcGFjaGUx
+GzAZBgNVBAsTEk5PVCBGT1IgUFJPRFVDVElPTjEPMA0GA1UEAxMGQ2hlcnJ5MIIBtzCCASwGByqG
+SM44BAEwggEfAoGBAP1/U4EddRIpUt9KnC7s5Of2EbdSPO9EAMMeP4C2USZpRV1AIlH7WT2NWPq/
+xfW6MPbLm1Vs14E7gB00b/JmYLdrmVClpJ+f6AR7ECLCT7up1/63xhv4O1fnxqimFQ8E+4P208Ue
+wwI1VBNaFpEy9nXzrith1yrv8iIDGZ3RSAHHAhUAl2BQjxUjC8yykrmCouuEC/BYHPUCgYEA9+Gg
+hdabPd7LvKtcNrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3zwky
+jMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/hWuWfBpKLZl6A
+e1UlZAFMO/7PSSoDgYQAAoGAdTWlN/anc4JFf/O3jLW5MigX+qHUXaVpoDCa9o08f+ugzCwc53o5
+0Rw3cVsTUFF5pp3da6j9UAIpi6whcMwTvm6Dlb1cHxgz7o2LSlBWo/SV+UeG5DUj40xhkATmHAIk
+0LZIKTcL2XsRsYGiyuB6YIpZK9wzz6yDCnY93K+Xqn2gADALBgcqhkjOOAQDBQADLwAwLAIUaxs1
+1fWsupiR2qg3z0jMLpf9XhoCFAKNGxHh/ERLveRH+U80TAJHos+X
+-----END NEW CERTIFICATE REQUEST-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrra.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrra.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrra.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrra.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBmDCCAQECAQAwWDEOMAwGA1UEAxMFVGhlUkExGzAZBgNVBAsTEk5PVCBGT1Ig
+UFJPRFVDVElPTjEPMA0GA1UEChMGQXBhY2hlMQswCQYDVQQIEwJOWTELMAkGA1UE
+BhMCVVMwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALImbgGYGKayj4sFL27M
+AHhB41Cwj9G3GCJ4uimwswWcDu+J7n8NI6QRPm/u8EhtHeQM7J+05fsWGE7R3Mqi
+zsx4tZHi1OaM0sKSMbzpbZBTEqk0us7CeJqXz0MVdv+iCY4I/Dg7Qn+Cp9bcnp0u
+NXRNg99XfItRnk3KTQ7QfUDVAgMBAAGgADANBgkqhkiG9w0BAQQFAAOBgQBMS/Xs
+jTmj9QXbmArPK0fQK3irxirKuwk/Rv0tQMPb/jBMMGUTYq2ryqOQJ7xh4JaUM9aA
+vEFp+43TImDypPCoNO4Y4fFZPHuRPUp3KGEyYfknefmDym8FGZFL5EH52NTtG4k7
+4ZAV9XJQcYSsnLqk/dGB/gawco9hSB9BHoEYfw==
+-----END CERTIFICATE REQUEST-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrwibble.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrwibble.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrwibble.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/csrwibble.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,13 @@
+-----BEGIN NEW CERTIFICATE REQUEST-----
+MIICXjCCAhsCAQAwWTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk5ZMQ8wDQYDVQQKEwZBcGFjaGUx
+GzAZBgNVBAsTEk5PVCBGT1IgUFJPRFVDVElPTjEPMA0GA1UEAxMGV2liYmxlMIIBtzCCASwGByqG
+SM44BAEwggEfAoGBAP1/U4EddRIpUt9KnC7s5Of2EbdSPO9EAMMeP4C2USZpRV1AIlH7WT2NWPq/
+xfW6MPbLm1Vs14E7gB00b/JmYLdrmVClpJ+f6AR7ECLCT7up1/63xhv4O1fnxqimFQ8E+4P208Ue
+wwI1VBNaFpEy9nXzrith1yrv8iIDGZ3RSAHHAhUAl2BQjxUjC8yykrmCouuEC/BYHPUCgYEA9+Gg
+hdabPd7LvKtcNrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3zwky
+jMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/hWuWfBpKLZl6A
+e1UlZAFMO/7PSSoDgYQAAoGANKoFSVHn9yJkrCT8IVK1ri0YrFxCzvPBpbiCt9gX9l8EQiIh280S
+7x9WN0K65rcKru1mweXI9duNhp/+XKFJfF+rPuoyQzqCYsiWRX24ke5eajpy+ECxr3FuujQ/AtVB
+U1P3TIRCNF3IKteefh0OKC5fQfWikN84LtCFej6yWjmgADALBgcqhkjOOAQDBQADMAAwLQIVAIAo
+23R658Bz3LkVTBp7kIJfAB83AhQpSbl+w0s7BWhJ//GejVtZtg6xPA==
+-----END NEW CERTIFICATE REQUEST-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt Thu May 24 23:44:27 2007
@@ -0,0 +1,3 @@
+R	080523060824Z	070525060826Z,keyCompromise	1345	unknown	/C=US/ST=NY/O=Apache/OU=NOT FOR PRODUCTION/CN=TheRA
+V	080523060825Z		1346	unknown	/C=US/ST=NY/O=Apache/OU=NOT FOR PRODUCTION/CN=Wibble
+V	080523060825Z		1347	unknown	/C=US/ST=NY/O=Apache/OU=NOT FOR PRODUCTION/CN=Cherry

Propchange: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt
------------------------------------------------------------------------------
    svn:eol-style = native

Propchange: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt
------------------------------------------------------------------------------
    svn:mime-type = text/plain

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt.old
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt.old?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt.old (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/index.txt.old Thu May 24 23:44:27 2007
@@ -0,0 +1,3 @@
+V	080523060824Z		1345	unknown	/C=US/ST=NY/O=Apache/OU=NOT FOR PRODUCTION/CN=TheRA
+V	080523060825Z		1346	unknown	/C=US/ST=NY/O=Apache/OU=NOT FOR PRODUCTION/CN=Wibble
+V	080523060825Z		1347	unknown	/C=US/ST=NY/O=Apache/OU=NOT FOR PRODUCTION/CN=Cherry

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1345.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1345.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1345.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1345.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,50 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 4933 (0x1345)
+        Signature Algorithm: md5WithRSAEncryption
+        Issuer: CN=TheCA, OU=NOT FOR PRODUCTION, O=Apache, ST=NY, C=US
+        Validity
+            Not Before: May 25 06:08:24 2007 GMT
+            Not After : May 23 06:08:24 2008 GMT
+        Subject: C=US, ST=NY, O=Apache, OU=NOT FOR PRODUCTION, CN=TheRA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (1024 bit)
+                Modulus (1024 bit):
+                    00:b2:26:6e:01:98:18:a6:b2:8f:8b:05:2f:6e:cc:
+                    00:78:41:e3:50:b0:8f:d1:b7:18:22:78:ba:29:b0:
+                    b3:05:9c:0e:ef:89:ee:7f:0d:23:a4:11:3e:6f:ee:
+                    f0:48:6d:1d:e4:0c:ec:9f:b4:e5:fb:16:18:4e:d1:
+                    dc:ca:a2:ce:cc:78:b5:91:e2:d4:e6:8c:d2:c2:92:
+                    31:bc:e9:6d:90:53:12:a9:34:ba:ce:c2:78:9a:97:
+                    cf:43:15:76:ff:a2:09:8e:08:fc:38:3b:42:7f:82:
+                    a7:d6:dc:9e:9d:2e:35:74:4d:83:df:57:7c:8b:51:
+                    9e:4d:ca:4d:0e:d0:7d:40:d5
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+            CA:TRUE
+    Signature Algorithm: md5WithRSAEncryption
+        29:87:e0:b0:13:25:1b:0d:ea:74:aa:15:2f:9e:f4:16:f4:eb:
+        c1:66:bd:14:ca:6c:46:92:22:61:14:b3:c5:f2:68:a5:00:8b:
+        26:6d:a7:d6:fb:0b:e3:6c:b9:a8:35:86:58:1f:9e:13:3f:de:
+        85:3d:19:04:1c:cb:dc:4e:44:20:9b:4c:46:3c:c4:4a:d6:d6:
+        66:01:1c:6c:95:d0:16:d0:47:56:13:ff:37:9f:45:c6:d5:06:
+        71:66:90:a4:e8:4b:01:6c:44:3b:8c:8b:df:f6:87:8b:05:47:
+        ec:9b:3c:fe:4b:4e:41:a4:45:77:b2:f5:da:d8:09:08:dd:9e:
+        bf:c0
+-----BEGIN CERTIFICATE-----
+MIICNzCCAaCgAwIBAgICE0UwDQYJKoZIhvcNAQEEBQAwWDEOMAwGA1UEAxMFVGhl
+Q0ExGzAZBgNVBAsTEk5PVCBGT1IgUFJPRFVDVElPTjEPMA0GA1UEChMGQXBhY2hl
+MQswCQYDVQQIEwJOWTELMAkGA1UEBhMCVVMwHhcNMDcwNTI1MDYwODI0WhcNMDgw
+NTIzMDYwODI0WjBYMQswCQYDVQQGEwJVUzELMAkGA1UECBMCTlkxDzANBgNVBAoT
+BkFwYWNoZTEbMBkGA1UECxMSTk9UIEZPUiBQUk9EVUNUSU9OMQ4wDAYDVQQDEwVU
+aGVSQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAsiZuAZgYprKPiwUvbswA
+eEHjULCP0bcYIni6KbCzBZwO74nufw0jpBE+b+7wSG0d5Azsn7Tl+xYYTtHcyqLO
+zHi1keLU5ozSwpIxvOltkFMSqTS6zsJ4mpfPQxV2/6IJjgj8ODtCf4Kn1tyenS41
+dE2D31d8i1GeTcpNDtB9QNUCAwEAAaMQMA4wDAYDVR0TBAUwAwEB/zANBgkqhkiG
+9w0BAQQFAAOBgQAph+CwEyUbDep0qhUvnvQW9OvBZr0UymxGkiJhFLPF8milAIsm
+bafW+wvjbLmoNYZYH54TP96FPRkEHMvcTkQgm0xGPMRK1tZmARxsldAW0EdWE/83
+n0XG1QZxZpCk6EsBbEQ7jIvf9oeLBUfsmzz+S05BpEV3svXa2AkI3Z6/wA==
+-----END CERTIFICATE-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1346.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1346.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1346.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1346.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,90 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 4934 (0x1346)
+        Signature Algorithm: md5WithRSAEncryption
+        Issuer: C=US, ST=NY, O=Apache, OU=NOT FOR PRODUCTION, CN=TheRA
+        Validity
+            Not Before: May 25 06:08:25 2007 GMT
+            Not After : May 23 06:08:25 2008 GMT
+        Subject: C=US, ST=NY, O=Apache, OU=NOT FOR PRODUCTION, CN=Wibble
+        Subject Public Key Info:
+            Public Key Algorithm: dsaEncryption
+            DSA Public Key:
+                pub: 
+                    34:aa:05:49:51:e7:f7:22:64:ac:24:fc:21:52:b5:
+                    ae:2d:18:ac:5c:42:ce:f3:c1:a5:b8:82:b7:d8:17:
+                    f6:5f:04:42:22:21:db:cd:12:ef:1f:56:37:42:ba:
+                    e6:b7:0a:ae:ed:66:c1:e5:c8:f5:db:8d:86:9f:fe:
+                    5c:a1:49:7c:5f:ab:3e:ea:32:43:3a:82:62:c8:96:
+                    45:7d:b8:91:ee:5e:6a:3a:72:f8:40:b1:af:71:6e:
+                    ba:34:3f:02:d5:41:53:53:f7:4c:84:42:34:5d:c8:
+                    2a:d7:9e:7e:1d:0e:28:2e:5f:41:f5:a2:90:df:38:
+                    2e:d0:85:7a:3e:b2:5a:39
+                P:   
+                    00:fd:7f:53:81:1d:75:12:29:52:df:4a:9c:2e:ec:
+                    e4:e7:f6:11:b7:52:3c:ef:44:00:c3:1e:3f:80:b6:
+                    51:26:69:45:5d:40:22:51:fb:59:3d:8d:58:fa:bf:
+                    c5:f5:ba:30:f6:cb:9b:55:6c:d7:81:3b:80:1d:34:
+                    6f:f2:66:60:b7:6b:99:50:a5:a4:9f:9f:e8:04:7b:
+                    10:22:c2:4f:bb:a9:d7:fe:b7:c6:1b:f8:3b:57:e7:
+                    c6:a8:a6:15:0f:04:fb:83:f6:d3:c5:1e:c3:02:35:
+                    54:13:5a:16:91:32:f6:75:f3:ae:2b:61:d7:2a:ef:
+                    f2:22:03:19:9d:d1:48:01:c7
+                Q:   
+                    00:97:60:50:8f:15:23:0b:cc:b2:92:b9:82:a2:eb:
+                    84:0b:f0:58:1c:f5
+                G:   
+                    00:f7:e1:a0:85:d6:9b:3d:de:cb:bc:ab:5c:36:b8:
+                    57:b9:79:94:af:bb:fa:3a:ea:82:f9:57:4c:0b:3d:
+                    07:82:67:51:59:57:8e:ba:d4:59:4f:e6:71:07:10:
+                    81:80:b4:49:16:71:23:e8:4c:28:16:13:b7:cf:09:
+                    32:8c:c8:a6:e1:3c:16:7a:8b:54:7c:8d:28:e0:a3:
+                    ae:1e:2b:b3:a6:75:91:6e:a3:7f:0b:fa:21:35:62:
+                    f1:fb:62:7a:01:24:3b:cc:a4:f1:be:a8:51:90:89:
+                    a8:83:df:e1:5a:e5:9f:06:92:8b:66:5e:80:7b:55:
+                    25:64:01:4c:3b:fe:cf:49:2a
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+            CA:FALSE
+            Netscape Comment: 
+            OpenSSL Generated Certificate
+            X509v3 Subject Key Identifier: 
+            1F:CC:F5:95:B6:FD:E4:B0:1C:88:B9:46:DD:5E:D8:E5:8A:42:6F:83
+            X509v3 Authority Key Identifier: 
+            DirName:/CN=TheCA/OU=NOT FOR PRODUCTION/O=Apache/ST=NY/C=US
+            serial:13:45
+
+    Signature Algorithm: md5WithRSAEncryption
+        08:67:bb:df:d2:ac:4a:b2:0c:bf:06:e1:68:f5:94:29:a5:33:
+        2b:01:d1:9f:04:75:26:82:44:9b:1b:3a:68:50:ab:c4:67:a0:
+        93:fa:5b:e2:a4:98:97:50:0c:64:d6:ed:d5:9b:31:dc:b1:4b:
+        07:c2:9c:eb:26:18:e3:29:2c:62:57:e8:ad:eb:3a:e9:d9:4c:
+        4f:f0:d0:63:fe:f9:e4:9b:5d:a6:6b:09:cb:7a:80:2e:da:a9:
+        3e:da:64:f6:70:4c:de:81:b8:de:94:6f:64:1b:4a:ee:b5:e5:
+        b9:2e:51:7b:96:2b:c1:e3:cf:20:d9:1d:69:66:11:5c:eb:54:
+        3a:ab
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1347.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1347.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1347.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/newcerts/1347.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,90 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 4935 (0x1347)
+        Signature Algorithm: md5WithRSAEncryption
+        Issuer: C=US, ST=NY, O=Apache, OU=NOT FOR PRODUCTION, CN=TheRA
+        Validity
+            Not Before: May 25 06:08:25 2007 GMT
+            Not After : May 23 06:08:25 2008 GMT
+        Subject: C=US, ST=NY, O=Apache, OU=NOT FOR PRODUCTION, CN=Cherry
+        Subject Public Key Info:
+            Public Key Algorithm: dsaEncryption
+            DSA Public Key:
+                pub: 
+                    75:35:a5:37:f6:a7:73:82:45:7f:f3:b7:8c:b5:b9:
+                    32:28:17:fa:a1:d4:5d:a5:69:a0:30:9a:f6:8d:3c:
+                    7f:eb:a0:cc:2c:1c:e7:7a:39:d1:1c:37:71:5b:13:
+                    50:51:79:a6:9d:dd:6b:a8:fd:50:02:29:8b:ac:21:
+                    70:cc:13:be:6e:83:95:bd:5c:1f:18:33:ee:8d:8b:
+                    4a:50:56:a3:f4:95:f9:47:86:e4:35:23:e3:4c:61:
+                    90:04:e6:1c:02:24:d0:b6:48:29:37:0b:d9:7b:11:
+                    b1:81:a2:ca:e0:7a:60:8a:59:2b:dc:33:cf:ac:83:
+                    0a:76:3d:dc:af:97:aa:7d
+                P:   
+                    00:fd:7f:53:81:1d:75:12:29:52:df:4a:9c:2e:ec:
+                    e4:e7:f6:11:b7:52:3c:ef:44:00:c3:1e:3f:80:b6:
+                    51:26:69:45:5d:40:22:51:fb:59:3d:8d:58:fa:bf:
+                    c5:f5:ba:30:f6:cb:9b:55:6c:d7:81:3b:80:1d:34:
+                    6f:f2:66:60:b7:6b:99:50:a5:a4:9f:9f:e8:04:7b:
+                    10:22:c2:4f:bb:a9:d7:fe:b7:c6:1b:f8:3b:57:e7:
+                    c6:a8:a6:15:0f:04:fb:83:f6:d3:c5:1e:c3:02:35:
+                    54:13:5a:16:91:32:f6:75:f3:ae:2b:61:d7:2a:ef:
+                    f2:22:03:19:9d:d1:48:01:c7
+                Q:   
+                    00:97:60:50:8f:15:23:0b:cc:b2:92:b9:82:a2:eb:
+                    84:0b:f0:58:1c:f5
+                G:   
+                    00:f7:e1:a0:85:d6:9b:3d:de:cb:bc:ab:5c:36:b8:
+                    57:b9:79:94:af:bb:fa:3a:ea:82:f9:57:4c:0b:3d:
+                    07:82:67:51:59:57:8e:ba:d4:59:4f:e6:71:07:10:
+                    81:80:b4:49:16:71:23:e8:4c:28:16:13:b7:cf:09:
+                    32:8c:c8:a6:e1:3c:16:7a:8b:54:7c:8d:28:e0:a3:
+                    ae:1e:2b:b3:a6:75:91:6e:a3:7f:0b:fa:21:35:62:
+                    f1:fb:62:7a:01:24:3b:cc:a4:f1:be:a8:51:90:89:
+                    a8:83:df:e1:5a:e5:9f:06:92:8b:66:5e:80:7b:55:
+                    25:64:01:4c:3b:fe:cf:49:2a
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+            CA:FALSE
+            Netscape Comment: 
+            OpenSSL Generated Certificate
+            X509v3 Subject Key Identifier: 
+            B2:F0:CA:05:22:E0:7F:9D:EE:59:01:AD:FA:45:5B:D2:1D:37:AE:92
+            X509v3 Authority Key Identifier: 
+            DirName:/CN=TheCA/OU=NOT FOR PRODUCTION/O=Apache/ST=NY/C=US
+            serial:13:45
+
+    Signature Algorithm: md5WithRSAEncryption
+        7e:c3:d0:ba:3d:a9:83:3e:5c:41:e5:35:d9:bf:44:cc:f2:57:
+        f8:30:d5:f7:60:ae:a6:8f:a6:ad:87:16:9e:58:ea:12:8e:2f:
+        71:4f:1b:65:ef:a2:2c:28:9c:c6:4b:8f:b2:c7:2a:57:ed:ef:
+        07:3c:f0:e9:d4:83:1e:b2:e9:7b:3f:e9:17:07:51:02:6f:49:
+        03:1f:84:4f:f3:26:cb:e5:e0:94:8d:c7:f2:28:64:65:56:8b:
+        65:15:2b:8e:1a:dc:99:a5:7f:0d:5c:dc:17:26:ea:2a:7f:9b:
+        3d:44:6c:08:80:7b:c5:af:e2:ae:20:88:11:88:de:60:19:3d:
+        57:fb
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial Thu May 24 23:44:27 2007
@@ -0,0 +1 @@
+1348

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial.old
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial.old?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial.old (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/demoCA/serial.old Thu May 24 23:44:27 2007
@@ -0,0 +1 @@
+1347

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/exts
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/exts?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/exts (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/exts Thu May 24 23:44:27 2007
@@ -0,0 +1,2 @@
+[x509_extensions]
+basicConstraints=CA:TRUE

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ra-ca-cert.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ra-ca-cert.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ra-ca-cert.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/ra-ca-cert.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/raprivkey.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/raprivkey.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/raprivkey.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/raprivkey.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/truststore.jks
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/truststore.jks?view=auto&rev=541568
==============================================================================
Binary file - no diff available.

Propchange: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/truststore.jks
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble-ra-cert.pem
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble-ra-cert.pem?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble-ra-cert.pem (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble-ra-cert.pem Thu May 24 23:44:27 2007
@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----
+MIIECjCCA3OgAwIBAgICE0YwDQYJKoZIhvcNAQEEBQAwWDELMAkGA1UEBhMCVVMx
+CzAJBgNVBAgTAk5ZMQ8wDQYDVQQKEwZBcGFjaGUxGzAZBgNVBAsTEk5PVCBGT1Ig
+UFJPRFVDVElPTjEOMAwGA1UEAxMFVGhlUkEwHhcNMDcwNTI1MDYwODI1WhcNMDgw
+NTIzMDYwODI1WjBZMQswCQYDVQQGEwJVUzELMAkGA1UECBMCTlkxDzANBgNVBAoT
+BkFwYWNoZTEbMBkGA1UECxMSTk9UIEZPUiBQUk9EVUNUSU9OMQ8wDQYDVQQDEwZX
+aWJibGUwggG3MIIBLAYHKoZIzjgEATCCAR8CgYEA/X9TgR11EilS30qcLuzk5/YR
+t1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuAHTRv8mZgt2uZ
+UKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOu
+K2HXKu/yIgMZndFIAccCFQCXYFCPFSMLzLKSuYKi64QL8Fgc9QKBgQD34aCF1ps9
+3su8q1w2uFe5eZSvu/o66oL5V0wLPQeCZ1FZV4661FlP5nEHEIGAtEkWcSPoTCgW
+E7fPCTKMyKbhPBZ6i1R8jSjgo64eK7OmdZFuo38L+iE1YvH7YnoBJDvMpPG+qFGQ
+iaiD3+Fa5Z8GkotmXoB7VSVkAUw7/s9JKgOBhAACgYA0qgVJUef3ImSsJPwhUrWu
+LRisXELO88GluIK32Bf2XwRCIiHbzRLvH1Y3Qrrmtwqu7WbB5cj1242Gn/5coUl8
+X6s+6jJDOoJiyJZFfbiR7l5qOnL4QLGvcW66ND8C1UFTU/dMhEI0Xcgq155+HQ4o
+Ll9B9aKQ3zgu0IV6PrJaOaOByDCBxTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQf
+Fh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUH8z1lbb9
+5LAciLlG3V7Y5YpCb4MwawYDVR0jBGQwYqFcpFowWDEOMAwGA1UEAxMFVGhlQ0Ex
+GzAZBgNVBAsTEk5PVCBGT1IgUFJPRFVDVElPTjEPMA0GA1UEChMGQXBhY2hlMQsw
+CQYDVQQIEwJOWTELMAkGA1UEBhMCVVOCAhNFMA0GCSqGSIb3DQEBBAUAA4GBAAhn
+u9/SrEqyDL8G4Wj1lCmlMysB0Z8EdSaCRJsbOmhQq8RnoJP6W+KkmJdQDGTW7dWb
+MdyxSwfCnOsmGOMpLGJX6K3rOunZTE/w0GP++eSbXaZrCct6gC7aqT7aZPZwTN6B
+uN6Ub2QbSu615bkuUXuWK8HjzyDZHWlmEVzrVDqr
+-----END CERTIFICATE-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble.chain
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble.chain?view=auto&rev=541568
==============================================================================
--- incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble.chain (added)
+++ incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble.chain Thu May 24 23:44:27 2007
@@ -0,0 +1,56 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Added: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble.jks
URL: http://svn.apache.org/viewvc/incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble.jks?view=auto&rev=541568
==============================================================================
Binary file - no diff available.

Propchange: incubator/cxf/trunk/distribution/src/main/release/samples/hello_world_https/certs/wibble.jks
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream



Mime
View raw message