- All Implemented Interfaces:
- CallbackHandler
public class SignatureProfile
extends WSSecurityToken
implements CallbackHandler
Signing a message is used to validate to the recipient that the message could
only have come from a certain sender, and that the message was not altered in
transit. It involves the sender encrypting a digest (hash) of the message
with its private key, and the recipient decrypting the hash with the sender's
public key, and recalculating the digest of the message to make sure the
message was not altered in transit (i.e., that the digest values calculated
by both the sender and recipient are the same). For this process to occur you
must ensure that the Client's public key has been imported into the server's
keystore using keytool. (taken CXF website)
The properties object format must be
org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
org.apache.ws.security.crypto.merlin.keystore.type=jks
org.apache.ws.security.crypto.merlin.keystore.password=keyStorePassword
org.apache.ws.security.crypto.merlin.keystore.alias=myAlias
org.apache.ws.security.crypto.merlin.keystore.file=client_keystore.jks