Skip to content

Commit

Permalink
Easier adaptation of custom algorithm suite CXF-8971, which defaulrs …
Browse files Browse the repository at this point in the history 
…to FIPS
  • Loading branch information
@JiriOndrusek
JiriOndrusek committed Mar 7, 2024
1 parent e69b669 commit ad7b9d1
Show file tree
Hide file tree
Showing 12 changed files with 600 additions and 1 deletion.
76 changes: 76 additions & 0 deletions docs/modules/ROOT/examples/ws-security-policy/application.properties
View file
Original file line number Diff line number Diff line change
Expand Up @@ -225,3 +225,79 @@ quarkus.cxf.client.helloSaml2.security.signature.password = alice-keystore-passw
quarkus.cxf.client.helloSaml2.security.signature.crypto = #aliceCrypto
quarkus.cxf.client.helloSaml2.security.saml-callback-handler = #saml2CallbackHandler

#custom algorithm suite

quarkus.cxf.endpoint."/helloCustomEncryptSign".implementor = io.quarkiverse.cxf.it.security.policy.CustomEncryptSignPolicyHelloServiceImpl
quarkus.cxf.endpoint."/helloCustomEncryptSign".security.return.security.error = true
quarkus.cxf.endpoint."/helloCustomEncryptSign".security.signature.username = bob
quarkus.cxf.endpoint."/helloCustomEncryptSign".security.signature.password = bob-keystore-password
quarkus.cxf.endpoint."/helloCustomEncryptSign".security.signature.crypto = #bobCrypto
quarkus.cxf.endpoint."/helloCustomEncryptSign".security.encryption.username = alice
quarkus.cxf.endpoint."/helloCustomEncryptSign".security.encryption.crypto = #bobCrypto

quarkus.cxf.endpoint."/helloCustomizedEncryptSign".implementor = io.quarkiverse.cxf.it.security.policy.CustomizedEncryptSignPolicyHelloServiceImpl
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.return.security.error = true
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.signature.username = bob
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.signature.password = bob-keystore-password
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.signature.crypto = #bobCrypto
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.encryption.username = alice
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.encryption.crypto = #bobCrypto
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.custom.digest.algorithm = http://www.w3.org/2000/09/xmldsig#sha1
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.custom.encryption.algorithm = http://www.w3.org/2001/04/xmlenc#aes256-cbc
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.custom.asymmetric.key.encryption.algorithm = http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.custom.encryption.key.derivation = http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
quarkus.cxf.endpoint."/helloCustomizedEncryptSign".security.custom.signature.key.derivation = http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1

quarkus.cxf.client.helloCustomEncryptSign.client-endpoint-url = https://localhost:${quarkus.http.test-ssl-port}/services/helloCustomEncryptSign
quarkus.cxf.client.helloCustomEncryptSign.service-interface = io.quarkiverse.cxf.it.security.policy.CustomEncryptSignPolicyHelloService
quarkus.cxf.client.helloCustomEncryptSign.features = #messageCollector
quarkus.cxf.client.helloCustomEncryptSign.trust-store = client-truststore.${keystore.type}
quarkus.cxf.client.helloCustomEncryptSign.trust-store-password = client-truststore-password
quarkus.cxf.client.helloCustomEncryptSign.security.signature.username = alice
quarkus.cxf.client.helloCustomEncryptSign.security.signature.password = alice-keystore-password
quarkus.cxf.client.helloCustomEncryptSign.security.signature.crypto = #aliceCrypto
quarkus.cxf.client.helloCustomEncryptSign.security.encryption.username = bob
quarkus.cxf.client.helloCustomEncryptSign.security.encryption.crypto = #aliceCrypto

quarkus.cxf.client.helloCustomizedEncryptSign.client-endpoint-url = https://localhost:${quarkus.http.test-ssl-port}/services/helloCustomizedEncryptSign
quarkus.cxf.client.helloCustomizedEncryptSign.service-interface = io.quarkiverse.cxf.it.security.policy.CustomizedEncryptSignPolicyHelloService
quarkus.cxf.client.helloCustomizedEncryptSign.features = #messageCollector
quarkus.cxf.client.helloCustomizedEncryptSign.trust-store = client-truststore.${keystore.type}
quarkus.cxf.client.helloCustomizedEncryptSign.trust-store-password = client-truststore-password
quarkus.cxf.client.helloCustomizedEncryptSign.security.signature.username = alice
quarkus.cxf.client.helloCustomizedEncryptSign.security.signature.password = alice-keystore-password
quarkus.cxf.client.helloCustomizedEncryptSign.security.signature.crypto = #aliceCrypto
quarkus.cxf.client.helloCustomizedEncryptSign.security.encryption.username = bob
quarkus.cxf.client.helloCustomizedEncryptSign.security.encryption.crypto = #aliceCrypto
quarkus.cxf.client.helloCustomizedEncryptSign.security.custom.digest.algorithm = http://www.w3.org/2000/09/xmldsig#sha1
quarkus.cxf.client.helloCustomizedEncryptSign.security.custom.encryption.algorithm = http://www.w3.org/2001/04/xmlenc#aes256-cbc
quarkus.cxf.client.helloCustomizedEncryptSign.security.custom.asymmetric.key.encryption.algorithm = http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p
quarkus.cxf.client.helloCustomizedEncryptSign.security.custom.encryption.key.derivation = http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
quarkus.cxf.client.helloCustomizedEncryptSign.security.custom.signature.key.derivation = http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1

quarkus.cxf.client.helloCustomEncryptSignWrong01.client-endpoint-url = https://localhost:${quarkus.http.test-ssl-port}/services/helloCustomizedEncryptSign
quarkus.cxf.client.helloCustomEncryptSignWrong01.service-interface = io.quarkiverse.cxf.it.security.policy.CustomEncryptSignPolicyHelloService
quarkus.cxf.client.helloCustomEncryptSignWrong01.features = #messageCollector
quarkus.cxf.client.helloCustomEncryptSignWrong01.trust-store = client-truststore.${keystore.type}
quarkus.cxf.client.helloCustomEncryptSignWrong01.trust-store-password = client-truststore-password
quarkus.cxf.client.helloCustomEncryptSignWrong01.security.signature.username = alice
quarkus.cxf.client.helloCustomEncryptSignWrong01.security.signature.password = alice-keystore-password
quarkus.cxf.client.helloCustomEncryptSignWrong01.security.signature.crypto = #aliceCrypto
quarkus.cxf.client.helloCustomEncryptSignWrong01.security.encryption.username = bob
quarkus.cxf.client.helloCustomEncryptSignWrong01.security.encryption.crypto = #aliceCrypto

quarkus.cxf.client.helloCustomEncryptSignWrong02.client-endpoint-url = https://localhost:${quarkus.http.test-ssl-port}/services/helloCustomEncryptSign
quarkus.cxf.client.helloCustomEncryptSignWrong02.service-interface = io.quarkiverse.cxf.it.security.policy.CustomizedEncryptSignPolicyHelloService
quarkus.cxf.client.helloCustomEncryptSignWrong02.features = #messageCollector
quarkus.cxf.client.helloCustomEncryptSignWrong02.trust-store = client-truststore.${keystore.type}
quarkus.cxf.client.helloCustomEncryptSignWrong02.trust-store-password = client-truststore-password
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.signature.username = alice
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.signature.password = alice-keystore-password
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.signature.crypto = #aliceCrypto
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.encryption.username = bob
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.encryption.crypto = #aliceCrypto
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.custom.digest.algorithm = http://www.w3.org/2000/09/xmldsig#sha1
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.custom.encryption.algorithm = http://www.w3.org/2001/04/xmlenc#aes256-cbc
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.custom.asymmetric.key.encryption.algorithm = http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.custom.encryption.key.derivation = http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
quarkus.cxf.client.helloCustomEncryptSignWrong02.security.custom.signature.key.derivation = http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
Loading

0 comments on commit ad7b9d1

Please sign in to comment.