Apache WSS4J

Contents

• What is WSS4J?
• Where can I download WSS4J?
• WS-Security Features
• WSS4J Use Cases
• WSS4J API
• WSS4J on Axis
• Rampart: WS-Security Implementation module for Axis2
• WSS4J Configuration

What is WSS4J?

Apache WSS4J is an implementation of the OASIS Web Services Security (WS-Security) from OASIS Web Services Security TC . WSS4J is primarily a Java library that can be used to sign and verify SOAP Messages with WS-Security information. WSS4J will use Apache Axis and Apache XML-Security projects and will be interoperable with JAX-RPC based server/clients and .NET server/clients.

WSS4J implements

• Web Services Security: SOAP Message Security 1.1
• Username Token Profile 1.1
• X.509 Certificate Token Profile 1.1

Where can I download WSS4J

You can download the latest version of WSS4J at the following URL:
http://www.apache.org/dyn/closer.cgi/ws/wss4j/

The latest release of WSS4J is version 1.5.7.

WS-Security Features

WSS4J can generate and process the following SOAP Bindings:

• XML Security
  
• XML Signature
• XML Encryption
• Tokens
• Username Tokens
• Timestamps
• SAML Tokens

WSS4J supports X.509 binary certificates and certificate paths.

WSS4J API

Please refer to the API Overview or online javadocs for details.

WSS4J on Axis

Please refer to the Axis Deployment Tutorial for a short tutorial and Axis Deployment Examples for more details.

Rampart: WS-Security Implementation module for Axis2

Please refer to the Rampart configuration guide for configuration information.

WSS4J Configuration

Difference between issuer-serial (WSS4J default) and direct-reference modes