Mailing-List: contact users-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@cxf.apache.org
Received-SPF: pass (nike.apache.org: domain of vinay.penmatsa@sap.com
 designates 155.56.66.99 as permitted sender)
From: "Penmatsa, Vinay" <vinay.penmatsa@sap.com>
To: "users@cxf.apache.org" <users@cxf.apache.org>
Date: Tue, 27 Sep 2011 19:03:42 -0400
Subject: Signature only in policy for Username Token
Thread-Topic: Signature only in policy for Username Token
Thread-Index: Acx9abOWiWYkfkbXSYuMUJpEwkniMQ==
Message-ID: 
 <245BF775E6C4804FAAC40244D7A92A165DF70668FC@USPHLECCR02.phl.sap.corp>
Accept-Language: en-US
Content-Language: en-US
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0


Hi,
With the following policy definition, the header is sent encrypted. How can=
 I get the client to only sign and not encrypt?

------
	<wsp:Policy wsu:Id=3D"UsernameToken"
		xmlns:wsu=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wsse=
curity-utility-1.0.xsd"
		xmlns:wsp=3D"http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:sp=3D"ht=
tp://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
		<wsp:ExactlyOne>
			<wsp:All>
				<sp:AsymmetricBinding>
					<wsp:Policy>
						<sp:InitiatorToken>
							<wsp:Policy>
				              <sp:X509Token
				                  sp:IncludeToken=3D"http://docs.oasis-open.org/ws-sx/w=
s-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
				                <wsp:Policy>
				                  <sp:WssX509V3Token10/>
				                </wsp:Policy>
				              </sp:X509Token>
							 </wsp:Policy>			           =20
						</sp:InitiatorToken>
						<sp:RecipientToken>
				            <wsp:Policy>
				              <sp:X509Token
				                  sp:IncludeToken=3D"http://docs.oasis-open.org/ws-sx/w=
s-securitypolicy/200702/IncludeToken/Never">
				                <wsp:Policy>
				                  <sp:WssX509V3Token10/>
				                </wsp:Policy>
				              </sp:X509Token>
				            </wsp:Policy>
				          </sp:RecipientToken>=09
						<sp:Layout>
							<wsp:Policy>
								<sp:Lax />
							</wsp:Policy>
						</sp:Layout>
						<sp:AlgorithmSuite>
							<wsp:Policy>
								<sp:Basic128 />
								<!-- To use the export grade encryption that comes bundled in the=20
									JDK, comment out the above Basic256 algorithm and uncomment the be=
low Basic128. -->
								<!-- <sp:Basic128 /> -->
							</wsp:Policy>
						</sp:AlgorithmSuite>
					</wsp:Policy>
				</sp:AsymmetricBinding>
				<sp:Wss10 xmlns:sp=3D"http://schemas.xmlsoap.org/ws/2005/07/securitypol=
icy">
			        <wsp:Policy>
			          <sp:MustSupportRefKeyIdentifier/>
			        </wsp:Policy>
		      	</sp:Wss10>
				<sp:SignedSupportingTokens>
					<wsp:Policy>
						<sp:UsernameToken
							sp:IncludeToken=3D"http://docs.oasis-open.org/ws-sx/ws-securitypolic=
y/200702/IncludeToken/AlwaysToRecipient">
							<wsp:Policy>
								<sp:WssUsernameToken10/>
							</wsp:Policy>
						</sp:UsernameToken>
					</wsp:Policy>
				</sp:SignedSupportingTokens>		=09
			</wsp:All>		=09
		</wsp:ExactlyOne>
	</wsp:Policy>
---


Regards,
Vinay