cxf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh" <>
Subject RE: Nonce at Server Side
Date Mon, 06 Jul 2009 14:23:08 GMT

It's supported in so far as it'll get processed correctly to create the
nonce+created+password digest. But nonce-caching for replay detection
isn't supported as of yet...there's a jira open in WSS4J for it. 

Feel free to submit a patch :-)


-----Original Message-----
From: rahul.soa [] 
Sent: 06 July 2009 11:56
Cc: Jarek Gawor
Subject: Nonce at Server Side

Hello CXF Devs,

Does CXF have the support for processing nonce at *server* side?

As I understand from some posts CXF creates the nonce automatically when
password digest is used at client side.

If it does not have support yet at server side so does that mean we
use "password digest" at server side as combination of timestamp,
and password text are used to calculate the password digest. May be I
some old post or I am wrong. Kindly correct me.

Thanks in advance.

Best Regards,

View raw message