<service name="SecureService7">

	<module ref="addressing"></module>
	<module ref="rampart"></module>

	<parameter locked="false" name="ServiceClass">org.apache.rampart.Service</parameter>

	<operation name="echo">
		<messageReceiver class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"></messageReceiver>
		<actionMapping>urn:echo</actionMapping>
	</operation>
	
	<wsp:Policy wsu:Id="SigEncrTripleDesRSA15DK">
	<wsp:ExactlyOne>
		<wsp:All>
			<sp:AsymmetricBinding>
				<wsp:Policy>
					<sp:InitiatorToken>
						<wsp:Policy>
							<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
								<wsp:Policy>
									<sp:RequireDerivedKeys></sp:RequireDerivedKeys>
									<sp:WssX509V3Token10></sp:WssX509V3Token10>
								</wsp:Policy>
							</sp:X509Token>
						</wsp:Policy>
					</sp:InitiatorToken>
					<sp:RecipientToken>
						<wsp:Policy>
							<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
								<wsp:Policy>
									<sp:RequireDerivedKeys></sp:RequireDerivedKeys>
									<sp:WssX509V3Token10></sp:WssX509V3Token10>
								</wsp:Policy>
							</sp:X509Token>
						</wsp:Policy>
					</sp:RecipientToken>
					<sp:AlgorithmSuite>
						<wsp:Policy>
							<sp:TripleDesRsa15></sp:TripleDesRsa15>
						</wsp:Policy>
					</sp:AlgorithmSuite>
					<sp:Layout>
						<wsp:Policy>
							<sp:Strict></sp:Strict>
						</wsp:Policy>
					</sp:Layout>
					<sp:IncludeTimestamp></sp:IncludeTimestamp>
					<sp:OnlySignEntireHeadersAndBody></sp:OnlySignEntireHeadersAndBody>
				</wsp:Policy>
			</sp:AsymmetricBinding>
			<sp:Wss10>
				<wsp:Policy>
					<sp:MustSupportRefKeyIdentifier></sp:MustSupportRefKeyIdentifier>
					<sp:MustSupportRefIssuerSerial></sp:MustSupportRefIssuerSerial>
				</wsp:Policy>
			</sp:Wss10>
			<sp:SignedParts>
				<sp:Body></sp:Body>
			</sp:SignedParts>
			<sp:EncryptedParts>
				<sp:Body></sp:Body>
			</sp:EncryptedParts>

			<ramp:RampartConfig> 
				<ramp:user>alice</ramp:user>
				<ramp:encryptionUser>bob</ramp:encryptionUser>
				<ramp:passwordCallbackClass>org.apache.rampart.PWCallback</ramp:passwordCallbackClass>
				
				<ramp:signatureCrypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">store.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
					</ramp:crypto>
				</ramp:signatureCrypto>
				<ramp:encryptionCypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">store.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
					</ramp:crypto>
				</ramp:encryptionCypto>
			</ramp:RampartConfig>

		</wsp:All>
	</wsp:ExactlyOne>
	</wsp:Policy>
</service>