cxf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "rahul.soa" <rahul....@googlemail.com>
Subject Re: Nonce at Server Side
Date Mon, 06 Jul 2009 21:59:41 GMT
Many Thanks Colm for the updated information about Nonce. Perhaps, in near
future I might have some questions regarding this as I am working on
configuring ws-security in geronimo.

Thanks again.
Rahul

On Mon, Jul 6, 2009 at 4:23 PM, Colm O hEigeartaigh
<coheigea@progress.com>wrote:

>
> It's supported in so far as it'll get processed correctly to create the
> nonce+created+password digest. But nonce-caching for replay detection
> isn't supported as of yet...there's a jira open in WSS4J for it.
>
> Feel free to submit a patch :-)
>
> https://issues.apache.org/jira/browse/WSS-187
>
> Colm.
>
> -----Original Message-----
> From: rahul.soa [mailto:rahul.soa@googlemail.com]
> Sent: 06 July 2009 11:56
> To: dev@cxf.apache.org
> Cc: Jarek Gawor
> Subject: Nonce at Server Side
>
> Hello CXF Devs,
>
> Does CXF have the support for processing nonce at *server* side?
>
> As I understand from some posts CXF creates the nonce automatically when
> password digest is used at client side.
>
> If it does not have support yet at server side so does that mean we
> cannot
> use "password digest" at server side as combination of timestamp,
> *nonce*
> and password text are used to calculate the password digest. May be I
> read
> some old post or I am wrong. Kindly correct me.
>
> Thanks in advance.
>
> Best Regards,
> Rahul
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message