package wssp12.wss10;

import weblogic.jws.WLHttpTransport;
import weblogic.jws.Policy;
import weblogic.jws.Policies;

import javax.jws.WebService;
import javax.jws.WebMethod;
import javax.jws.Oneway;

/**
 * この Web サービスでは、WS-SecurityPolicy 1.2 を使用して、WS-Security 1.0 で
 * 指定されているメッセージレベルのセキュリティを有効にする方法を示す。
 * 
 * サービスでは、ユーザ名トークンを使用してクライアントを認証する。 
 * リクエスト メッセージと応答メッセージの両方を、X509 証明書を使用して署名および
 * 暗号化する。
 *  
*/
@WebService(name="Simple", targetNamespace="http://example.org")
@WLHttpTransport(contextPath="/wssp12/wss10",
 serviceUri="UsernameTokenPlainX509SignAndEncrypt")
@Policy(uri="policy:Wssp1.2-2007-Wss1.0-UsernameToken-Plain-X509-Basic256.xml")
public class UsernameTokenPlainX509SignAndEncrypt {

  @WebMethod
  @Policies({
      @Policy(uri="policy:Wssp1.2-2007-SignBody.xml"),
      @Policy(uri="policy:Wssp1.2-2007-EncryptBody.xml")})
  public String echo(String s) {

    return s;
  }

  @WebMethod
  @Policies({
      @Policy(uri="policy:Wssp1.2-2007-SignBody.xml"),
      @Policy(uri="policy:Wssp1.2-2007-Sign-Wsa-Headers.xml")})
  public String echoWithWsa(String s) {
    return s;
  }

  @WebMethod
  @Policy(uri="policy:Wssp1.2-2007-SignBody.xml",
 direction=Policy.Direction.inbound)
  @Oneway
  public void echoOneway(String s) {
    System.out.println("s = " + s);
  }

  @WebMethod
  @Policies({
      @Policy(uri="policy:Wssp1.2-2007-Wss1.0-X509-Basic256.xml",
direction=Policy.Direction.inbound),
      @Policy(uri="policy:Wssp1.2-2007-SignBody.xml",
direction=Policy.Direction.inbound)
  })
  @Oneway
  public void echoOnewayX509(String s) {
    System.out.println("X509SignEncrypt.echoOneway: " + s);
  }
}

@WebService(name="Simple", targetNamespace="http://example.org")
@WLHttpTransport(contextPath="/wssp12/wss10",
 serviceUri="UsernameTokenPlainX509SignAndEncrypt")
@Policy(uri="policy:Wssp1.2-2007-Wss1.0-UsernameToken-Plain-X509-Basic256.xml")

package examples.webservices.security_jws.client;

import weblogic.security.SSL.TrustManager;

import weblogic.xml.crypto.wss.provider.CredentialProvider;
import weblogic.xml.crypto.wss.WSSecurityContext;
import weblogic.wsee.security.bst.ClientBSTCredentialProvider;
import weblogic.wsee.security.unt.ClientUNTCredentialProvider;

import javax.xml.rpc.Stub;
import java.util.List;
import java.util.ArrayList;

import java.security.cert.X509Certificate;

/**
 *  Copyright © 1996, 2008, Oracle and/or its affiliates. 
 *  All rights reserved.
 */
public class SecureHelloWorldClient {
  public static void main(String[] args) throws Throwable {

    //ユーザ名トークンのユーザ名またはパスワード
    String username = args[0];
    String password = args[1];

    //クライアントのプライベート キー ファイル
    String keyFile = args[2];

    //クライアントの証明書
    String clientCertFile = args[3];

    String wsdl = args[4];

    SecureHelloWorldService service = new SecureHelloWorldService_Impl(wsdl + "?WSDL" );

    SecureHelloWorldPortType port = service.getSecureHelloWorldServicePort();

    //資格プロバイダを作成し、それをスタブに設定する
    List credProviders = new ArrayList();

    //クライアントサイドの BinarySecurityToken 資格プロバイダ -- x509
    CredentialProvider cp = new ClientBSTCredentialProvider(clientCertFile, keyFile);
    credProviders.add(cp);

    //クライアントサイドの UsernameToken 資格プロバイダ
    cp = new ClientUNTCredentialProvider(username, password);
    credProviders.add(cp);

    Stub stub = (Stub)port;
    stub._setProperty(WSSecurityContext.CREDENTIAL_PROVIDER_LIST, credProviders);

    stub._setProperty(WSSecurityContext.TRUST_MANAGER,
      new TrustManager(){
         public boolean certificateCallback(X509Certificate[] chain, int validateErr){
           return true;
         }
       } );

    String response = port.sayHello("World");
    System.out.println("response = " + response);
  }
}

  xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"

  http://www.w3.org/ns/ws-policy

  xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512"

  http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702

String wsdl = "http://myserver/wsscsecuredservice?wsdl";
WsscSecuredService service = new WsscSecuredService_Impl(wsdl);
WsscSecured port = service.getWsscSecuredSoapPort(); 
Stub stub = (Stub) port; 
String sts = "https://stsserver/standaloneSTS/wssc13/STS";
stub._setProperty("weblogic.wsee.wst.sts_endpoint_uri", sts); 

String wsdl = "http://myserver/samlsecuredservice?wsdl";

SamlSecuredService service = new SamlSecuredService_Impl(wsdl);

SamlSecured port = service.getSamlSecuredSoapPort(); 

Stub stub = (Stub)port; 

InputStream policy = loadPolicy();

stub._setProperty("weblogic.wsee.security.wst_bootstrap_policy", policy); 

userName = sys.argv[1]
passWord = sys.argv[2]
host = sys.argv[3]+":"+sys.argv[4]
sslhost = sys.argv[3]+":"+sys.argv[5]
samlstsurl = sys.argv[6]
url="t3://"+ host

print "Connect to the running adminSever"
connect(userName, passWord, url)
edit()
startEdit()

defaultWss = cmo.lookupWebserviceSecurity('default_wss')

# SAML 信頼クライアントの資格プロバイダを作成

wtm = defaultWss.createWebserviceCredentialProvider('trust_client_saml_cp')
wtm.setClassName('weblogic.wsee.security.saml.SAMLTrustCredentialProvider')
wtm.setTokenType('saml_trust')
cpm = wtm.createConfigurationProperty('StsUri')
cpm.setValue(samlstsurl) 

cpm = wtm.createConfigurationProperty('StsPolicy')
cpm.setValue("Wssp1.2-2007-Https-UsernameToken-Plain")

save()
activate(block="true")
disconnect()
exit() 

// WS-Trust のバージョンを設定

stub._setProperty(WSEESecurityConstants.TRUST_VERSION, "http://docs.oasis-open.org/ws-sx/ws-trust/200512");

// SOAP のバージョンを設定

stub._setProperty(WSEESecurityConstants.TRUST_SOAP_VERSION, SOAPConstants.URI_NS_SOAP_1_1_ENVELOPE);

package examples.webservices.wssc.client;
import weblogic.security.SSL.TrustManager;
import weblogic.xml.crypto.wss.provider.CredentialProvider;
import weblogic.xml.crypto.wss.WSSecurityContext;
import weblogic.wsee.security.bst.ClientBSTCredentialProvider;
import weblogic.wsee.security.bst.StubPropertyBSTCredProv;
import weblogic.wsee.security.wssc.utils.WSSCClientUtil;
import weblogic.wsee.security.util.CertUtils;

import javax.xml.rpc.Stub;
import java.util.List;
import java.util.ArrayList;
import java.security.cert.X509Certificate;

/**
 * Copyright © 1996, 2008, Oracle and/or its affiliates. 
 * All rights reserved.
 */
public class WSSecureConvClient {
  public static void main(String[] args) throws Throwable {

    String clientKeyStore = args[0];
    String clientKeyStorePass = args[1];
    String clientKeyAlias = args[2];
    String clientKeyPass = args[3];
    String serverCert = args[4];
    String wsdl = args[5];

    WSSecureConvService service = new WSSecureConvService_Impl(wsdl);
    WSSecureConvPortType port = service.getWSSecureConvServicePort();

    // 資格プロバイダを作成し、それをスタブに設定する
    List credProviders = new ArrayList();

    // x509 を使用して wssc ハンドシェークを保護する
    credProviders.add(new ClientBSTCredentialProvider(clientKeyStore, clientKeyStorePass, clientKeyAlias, clientKeyPass));

    Stub stub = (Stub)port;

    stub._setProperty(WSSecurityContext.CREDENTIAL_PROVIDER_LIST, credProviders);
    stub._setProperty(StubPropertyBSTCredProv.SERVER_ENCRYPT_CERT, CertUtils.getCertificate(serverCert));

    stub._setProperty(WSSecurityContext.TRUST_MANAGER,
        new TrustManager(){
          public boolean certificateCallback(X509Certificate[] chain, int validateErr){
            // サーバの証明書を信頼できるかどうかの検証に必要
            return true;
          }
        }
    );

    System.out.println (port.sayHelloWithWSSC("Hello World, once"));
    System.out.println (port.sayHelloWithWSSC("Hello World, twice"));
    System.out.println (port.sayHelloWithWSSC("Hello World, thrice"));

    //呼び出しの終了後に SecureContextToken をキャンセルする
    WSSCClientUtil.terminateWssc(stub);
    System.out.println("WSSC terminated!");

  }
}

    <clientgen
      wsdl="http://ariel:7001/policy/ClientPolicyService?WSDL"
      destDir="${clientclass-dir}"
      generatePolicyMethods="true"
      packageName="examples.webservices.client_policy.client"/>

package examples.webservices.client_policy.client;

import java.rmi.RemoteException;

import javax.xml.rpc.ServiceException;
import javax.xml.rpc.Stub;

import java.io.FileInputStream;
import java.io.IOException;

/**
 * ClientPolicyService Web サービスの <code>sayHello</code> オペレーションを呼び出す
 * 簡単なスタンドアロンのクライアント アプリケーション
 *
 * @author Copyright © 1996, 2008, Oracle and/or its affiliates. 
 * All rights reserved.
 */

public class Main {

  public static void main(String[] args)
      throws ServiceException, RemoteException, IOException {

      FileInputStream [] inbound_policy_array = new FileInputStream[2];
      inbound_policy_array[0] = new FileInputStream(args[1]);
      inbound_policy_array[1] = new FileInputStream(args[2]);

      FileInputStream [] outbound_policy_array = new FileInputStream[2];
      outbound_policy_array[0] = new FileInputStream(args[1]);
      outbound_policy_array[1] = new FileInputStream(args[2]);

      ClientPolicyService service = new ClientPolicyService_Impl(args[0] + "?WSDL");

      // Web サービスのポートを取得する標準的な方法
      ClientPolicyPortType normal_port = service.getClientPolicyPort();

      // 特定のオペレーションのリクエストと応答のためのポリシー ファイル
      // の配列を指定する
      ClientPolicyPortType array_of_policy_port = service.getClientPolicyPort("sayHello", inbound_policy_array, outbound_policy_array);

    try {
      String result = null;
      result = normal_port.sayHello("Hi there!");
      result = array_of_policy_port.sayHello("Hi there!");
      System.out.println( "Got result: " + result );
    } catch (RemoteException e) {
      throw e;
    }
  }
}

      ClientPolicyPortType array_of_policy_port =  service.getClientPolicyPort("sayHello", inbound_policy_array, outbound_policy_array);

<wsp:Policy
  xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
  xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512"
  >

<sp:SignedEncryptedSupportingTokens>
    <wsp:Policy>
     <sp:UsernameToken
      sp:IncludeToken="…/IncludeToken/AlwaysToRecipient" wsp:Optional="true" >
      <wsp:Policy>
        <sp:WssUsernameToken10/>
      </wsp:Policy>
     </sp:UsernameToken>
    </wsp:Policy>
</sp:SignedEncryptedSupportingTokens> 

<env:Envelope 

        xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">

  <env:Header/>

  <env:Body>

    <ns1:submitOrderRequest

            xmlns:ns1="http://www.bea.com/OrderService">

      <ns1:OrderRequest>

        <ns1:orderNumber>4815162342</ns1:orderNumber>

        <ns1:creditCard>

          <ns1:cctype>MasterCard</ns1:cctype>

          <ns1:expires>12-01-2020</ns1:expires>

          <ns1:ccn>1234-567890-4444</ns1:ccn>

        </ns1:creditCard>

      </ns1:OrderRequest>

    </ns1:submitOrderRequest>

  </env:Body>

</env:Envelope>

<?xml version="1.0"?>

<wsp:Policy 
    xmlns:wsp=”http://schemas.xmlsoap.org/ws/2004/09/policy”
    xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512”>

  <sp:EncryptedElements xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/”>

    <sp:XPath xmlns:myns="http://www.bea.com/OrderService”>
/soapenv:Envelope/soapenv:Body/myns:submitOrderRequest/myns:OrderRequest/myns:creditCard

    </sp:XPath>

  </sp:EncryptedElements>

</wsp:Policy>

@WebMethod

@Policies({

  @Policy(uri=”policy:Wssp1.2-2007-Wss1.1-UsernameToken-Plan-X509-Basic256.xml”),
  @Policy(uri=”../policies/EncryptCreditCard.xml”,
         direction=Policy.Direction.inbound)})

public String submitOrderRequest (OrderRequest orderRequest) {

    return orderService.processOrder(orderRequest);
}

<?xml version="1.0"?>
<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512">
<wsp:ExactlyOne>
  <wsp:All>
    <sp:AsymmetricBinding>
      <wsp:Policy>
        <sp:InitiatorToken>
          <wsp:Policy>
             <sp:X509Token
sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512/IncludeToken/AlwaysToRecipient">
               <wsp:Policy>
                 <sp:WssX509V3Token10/>
               </wsp:Policy>
             </sp:X509Token>
          </wsp:Policy>
        </sp:InitiatorToken>
        <sp:RecipientToken>
          <wsp:Policy>
             <sp:X509Token
             sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512/IncludeToken/Never">
               <wsp:Policy>
                 <sp:WssX509V3Token10/>
               </wsp:Policy>
             </sp:X509Token>
          </wsp:Policy>
        </sp:RecipientToken>
        <sp:AlgorithmSuite>
          <wsp:Policy>
            <sp:Basic256/>
          </wsp:Policy>
        </sp:AlgorithmSuite>
        <sp:Layout>
          <wsp:Policy>
            <sp:Lax/>
          </wsp:Policy>
        </sp:Layout>
        <sp:IncludeTimestamp/>
        <sp:ProtectTokens/>
        <sp:OnlySignEntireHeadersAndBody/>
      </wsp:Policy>
    </sp:AsymmetricBinding>
    <sp:SignedParts>
      <sp:Body/>
    </sp:SignedParts>
    <sp:Wss10>
      <wsp:Policy>
        <sp:MustSupportRefKeyIdentifier/>
        <sp:MustSupportRefIssuerSerial/>
      </wsp:Policy>
    </sp:Wss10>
  </wsp:All>
  <wsp:All>
    <sp:AsymmetricBinding>
      <wsp:Policy>
        <sp:InitiatorToken>
          <wsp:Policy>
            <sp:X509Token
sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512/IncludeToken/AlwaysToRecipient">
              <wsp:Policy>
                <sp:RequireThumbprintReference/>
                <sp:WssX509V3Token11/>
              </wsp:Policy>
            </sp:X509Token>
          </wsp:Policy>
        </sp:InitiatorToken>
        <sp:RecipientToken>
          <wsp:Policy>
            <sp:X509Token
            sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512/IncludeToken/Never">
              <wsp:Policy>
                <sp:RequireThumbprintReference/>
                <sp:WssX509V3Token11/>
              </wsp:Policy>
            </sp:X509Token>
          </wsp:Policy>
        </sp:RecipientToken>
        <sp:AlgorithmSuite>
          <wsp:Policy>
            <sp:Basic256/>
          </wsp:Policy>
        </sp:AlgorithmSuite>
        <sp:Layout>
          <wsp:Policy>
            <sp:Lax/>
          </wsp:Policy>
        </sp:Layout>
        <sp:IncludeTimestamp/>
        <sp:ProtectTokens/>
          <sp:OnlySignEntireHeadersAndBody/>
        </wsp:Policy>
      </sp:AsymmetricBinding>
      <sp:SignedParts>
        <sp:Body/>
      </sp:SignedParts>
      <sp:Wss11>
        <wsp:Policy>
          <sp:MustSupportRefKeyIdentifier/>
          <sp:MustSupportRefIssuerSerial/>
          <sp:MustSupportRefThumbprint/>
          <sp:MustSupportRefEncryptedKey/>
          <sp:RequireSignatureConfirmation/>
        </wsp:Policy>
      </sp:Wss11>
    </wsp:All>
  </wsp:ExactlyOne>
</wsp:Policy>

<?xml version="1.0"?>
<wsp:Policy
xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702"

>

<wsp:ExactlyOne>
<sp:EncryptedParts>
<sp:Body/>
</sp:EncryptedParts>
<sp:EncryptedParts/>
</wsp:ExactlyOne>
</wsp:Policy>

<?xml version="1.0"?>
<wsp:Policy
xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702"

>
<wsp:ExactlyOne>
<sp:EncryptedParts/>
<sp:EncryptedParts>
<sp:Body/>
</sp:EncryptedParts>
</wsp:ExactlyOne>
</wsp:Policy>

package examples.webservices.security_mtom;

import weblogic.jws.Binding;

import weblogic.jws.Policy;

import weblogic.jws.Policies;

import weblogic.jws.Context;

import weblogic.jws.WLDeployment;

import weblogic.wsee.jws.JwsContext;

import weblogic.wsee.mtom.api.MtomPolicyInfo;

import weblogic.wsee.mtom.api.MtomPolicyInfoFactory;

import weblogic.wsee.policy.framework.PolicyException;

import javax.jws.WebService;

import javax.jws.WebMethod;

import java.rmi.RemoteException;

/**

 * JAX-RPC での MTOM のサンプル

 *

 * @author Copyright © 1996, 2008, Oracle and/or its affiliates. 
 * All rights reserved.

 */

@WebService

@Binding(Binding.Type.SOAP12)

// 提供されている以下のポリシー ファイルを追加して、この Web サービスで WSS + MTOM を有効にする

@Policies({

    @Policy(uri = "policy:Mtom.xml"),

    @Policy(uri = "policy:Wssp1.2-2007-SignBody.xml"), 

    @Policy(uri = "policy:Wssp1.2-2007-EncryptBody.xml"),

	@Policy(uri = "policy:Wssp1.2-Wss1.1-EncryptedKey.xml")

})

public class SecurityMtomService {

  public SecurityMtomService() {

  }

  /**

   * 入力は XOP 処理されたバイナリ オクテット ストリームとして送信される

   *

   * @param bytes 入力バイト

   * @return 単純な String

   */

  @WebMethod

  public String echoBinaryAsString(byte[] bytes) {

    return new String(bytes);

  }

  /**

   * 出力は XOP 処理されたバイナリ オクテット ストリームとして送信される

   *

   * @param s 単純な String

   * @return byte[]

   */

  @WebMethod

  public byte[] echoStringAsBinary(String s) {

    return s.getBytes();

  }

  /**

   * 入力 byte[] は XOP 処理されたバイナリ オクテット ストリームとして送信される

   *

   * @param array 入力 byte[] 配列

   * @return String[]

   */

  @WebMethod

  public String[] echoBinaryArrayAsStringArray(byte[] array) {

    String[] strings = new String[1];

    strings[0] = new String(array);

    return strings;

  }

}

package examples.webservices.security_mtom.client;

import java.rmi.RemoteException;

import java.security.cert.X509Certificate;

import java.util.ArrayList;

import java.util.List;

import javax.xml.rpc.Stub;

import weblogic.security.SSL.TrustManager;

// バイナリおよびユーザ名トークンを作成するクラスをインポート

import weblogic.wsee.security.bst.ClientBSTCredentialProvider;

import weblogic.wsee.security.unt.ClientUNTCredentialProvider;

// クライアントサイドの資格プロバイダを作成するクラスをインポート

import weblogic.xml.crypto.wss.WSSecurityContext;

import weblogic.xml.crypto.wss.provider.CredentialProvider;

import weblogic.wsee.security.util.CertUtils;

/**

 * @author Copyright © 1996, 2008, Oracle and/or its affiliates. 
 * All rights reserved. 

 */

public class MtomClient {

  private static final String FOO = "FOO";

  private static SecurityMtomService port;

  public MtomClient(String args[]) throws Exception {

    // クライアント キーストア ファイル

    String clientKeyStore = args[0];

    String clientKeyStorePass = args[1];

    String clientKeyAlias = args[2];

    String clientKeyPass = args[3];

    // サーバ証明書

    String serverCertFile = args[4];

    String wsdl = args[5];

    SecurityMtomServiceService service = new SecurityMtomServiceService_Impl(wsdl);

    port = service.getSecurityMtomServiceSoapPort();

	X509Certificate serverCert = (X509Certificate) CertUtils.getCertificate(serverCertFile);

    // 資格プロバイダの空のリストを作成

    List credProviders = new ArrayList();

    // 証明書とキーのパラメータに基づいて、ID として X.509 を使用する

    // クライアントサイドの BinarySecurityToken 資格プロバイダを作成

    CredentialProvider cp = new ClientBSTCredentialProvider(clientKeyStore, clientKeyStorePass, clientKeyAlias, clientKeyPass, "JKS", serverCert);

    credProviders.add(cp);

    Stub stub = (Stub)port;

    // 資格プロバイダのリストを指すスタブ プロパティを設定

    stub._setProperty(WSSecurityContext.CREDENTIAL_PROVIDER_LIST, credProviders);

    // TrustManager を設定

    stub._setProperty(WSSecurityContext.TRUST_MANAGER,

        new TrustManager() {

          public boolean certificateCallback(X509Certificate[] chain, int validateErr) {

            // 実際のアプリケーションでは通常、証明書を実際に検証する

            // Java コードがここに入る。簡素化するため、このサンプルでは

            // 証明書が有効であると仮定し、単に true を返す

            return true;

          }

        });	

  }

  public static void main(String[] args) throws Exception {

    MtomClient client = new MtomClient(args);

    client.invokeEchoBinaryAsString();

    client.invokeEchoStringAsBinary();

    client.invokeEchoBinaryArrayAsStringArray();

  }

  public void invokeEchoBinaryArrayAsStringArray() throws RemoteException {

    System.out.println("sending a String '" + FOO + "' as a byte array.");

    String result = port.echoBinaryArrayAsStringArray(FOO.getBytes()).getJavaLangstring()[0];

    System.out.println("echoing '" + result + "' as a String array.");

  }

  public void invokeEchoStringAsBinary() throws RemoteException {

    System.out.println("sending a String '" + FOO + "'");

    String result = new String(port.echoStringAsBinary(FOO));

    System.out.println("echoing '" + result + "' as a byte array.");

  }

  public void invokeEchoBinaryAsString() throws RemoteException {

    System.out.println("sending a String '" + FOO + "' as a byte array.");

    String result = port.echoBinaryAsString(FOO.getBytes());

    System.out.println("echoing '" + result + "' as a String.");

  }

}

userName = sys.argv[1]

passWord = sys.argv[2]

url="t3://"+sys.argv[3]+":"+sys.argv[4]

print "Connect to the running adminSever"

connect(userName, passWord, url)

edit()

startEdit()

# SecurityConfiguration で x509 のアサーションを有効にする

rlm = cmo.getSecurityConfiguration().getDefaultRealm()

ia = rlm.lookupAuthenticationProvider("DefaultIdentityAsserter")

activeTypesValue = list(ia.getActiveTypes())

existed = "X.509" in activeTypesValue

if existed == 1:

  print 'assert x509 is aleady enabled'

else:

  activeTypesValue.append("X.509")

ia.setActiveTypes(array(activeTypesValue,java.lang.String))

ia.setDefaultUserNameMapperAttributeType('CN');

ia.setUseDefaultUserNameMapper(Boolean('true'));

# デフォルト WebServcieSecurity を作成

securityName='default_wss'

defaultWss=cmo.lookupWebserviceSecurity(securityName)

if defaultWss == None:

  print 'creating new webservice security bean for: ' + securityName

  defaultWss = cmo.createWebserviceSecurity(securityName)

else:

  print 'found exsiting bean for: ' + securityName

# DK の資格プロバイダを作成

cpName='default_dk_cp'

wtm=defaultWss.lookupWebserviceCredentialProvider(cpName)

if wtm == None:

	wtm = defaultWss.createWebserviceCredentialProvider(cpName)

	wtm.setClassName('weblogic.wsee.security.wssc.v200502.dk.DKCredentialProvider')

	wtm.setTokenType('dk')

	cpm = wtm.createConfigurationProperty('Label')

	cpm.setValue('WS-SecureConversationWS-SecureConversation')

	cpm = wtm.createConfigurationProperty('Length')

	cpm.setValue('16')

else:

  print 'found exsiting bean for: DK ' + cpName

# x.509 の資格プロバイダを作成

cpName='default_x509_cp'

wtm=defaultWss.lookupWebserviceCredentialProvider(cpName)

if wtm == None:

	wtm = defaultWss.createWebserviceCredentialProvider(cpName)

	wtm.setClassName('weblogic.wsee.security.bst.ServerBSTCredentialProvider')

	wtm.setTokenType('x509')

else:

  print 'found exsiting bean for: x.509 ' + cpName

# XML 暗号化のカスタム キーストア

cpName='ConfidentialityKeyStore'

cpm=wtm.lookupConfigurationProperty(cpName)

if cpm == None:

	cpm = wtm.createConfigurationProperty(cpName)

keyStoreName=sys.argv[5]

cpm.setValue(keyStoreName)

cpName='ConfidentialityKeyStorePassword'

cpm=wtm.lookupConfigurationProperty(cpName)

if cpm == None:

	cpm = wtm.createConfigurationProperty(cpName)

cpm.setEncryptValueRequired(Boolean('true'))

KeyStorePasswd=sys.argv[6]

cpm.setEncryptedValue(KeyStorePasswd)

cpName='ConfidentialityKeyAlias'

cpm=wtm.lookupConfigurationProperty(cpName)

if cpm == None:

	cpm = wtm.createConfigurationProperty(cpName)

keyAlias=sys.argv[7]

cpm.setValue(keyAlias)

cpName='ConfidentialityKeyPassword'

cpm=wtm.lookupConfigurationProperty(cpName)

if cpm == None:

	cpm = wtm.createConfigurationProperty('ConfidentialityKeyPassword')

cpm.setEncryptValueRequired(Boolean('true'))

keyPass=sys.argv[8]

cpm.setEncryptedValue(keyPass)

# XML デジタル署名のカスタム キーストア

cpName='IntegrityKeyStore'

cpm=wtm.lookupConfigurationProperty(cpName)

if cpm == None:

	cpm = wtm.createConfigurationProperty(cpName)

keyStoreName=sys.argv[5]

cpm.setValue(keyStoreName)

cpName='IntegrityKeyStorePassword'

cpm=wtm.lookupConfigurationProperty(cpName)

if cpm == None:

	cpm = wtm.createConfigurationProperty(cpName)

cpm.setEncryptValueRequired(Boolean('true'))

KeyStorePasswd=sys.argv[6]

cpm.setEncryptedValue(KeyStorePasswd)

cpName='IntegrityKeyAlias'

cpm=wtm.lookupConfigurationProperty(cpName)

if cpm == None:

	cpm = wtm.createConfigurationProperty(cpName)

keyAlias=sys.argv[7]

cpm.setValue(keyAlias)

cpName='IntegrityKeyPassword'

cpm=wtm.lookupConfigurationProperty(cpName)

if cpm == None:

	cpm = wtm.createConfigurationProperty(cpName)

cpm.setEncryptValueRequired(Boolean('true'))

keyPass=sys.argv[8]

cpm.setEncryptedValue(keyPass)

#x509 トークンのトークン ハンドラを作成

#cpName='default_x509_handler'

th=defaultWss.lookupWebserviceTokenHandler(cpName)

if th == None:

	th = defaultWss.createWebserviceTokenHandler(cpName)  

	th.setClassName('weblogic.xml.crypto.wss.BinarySecurityTokenHandler')

	th.setTokenType('x509')

	cpm = th.createConfigurationProperty('UseX509ForIdentity')

	cpm.setValue('true')

save()

activate(block="true")

disconnect()

exit()

<?xml version="1.0" encoding="ISO-8859-1"?>

<project name="webservices.security_mtom" default="all" basedir=".">

  <!-- このビルドのグローバルなプロパティを設定 -->

  <property file="../../../examples.properties"/>

  <property name="client.dir" value="${client.classes.dir}/webservicesSecurityMtom_Client" />

  <property name="package.dir" value="examples/webservices/security_mtom"/>

  <property name="package" value="examples.webservices.security_mtom"/>

  <property name="ws.file" value="SecurityMtomService" />

  <property name="ear.dir" value="${examples.build.dir}/webservicesSecurityMtomEar" />

  <property name="cert.dir" value="${basedir}/certs" />

  <property name="certs.dir" value="${basedir}/certs" />

  <!-- クライアント キーストア -->

  <property name="client-keystore-name" value="clientKeyStore.jks"/>

  <property name="client-keystore-pass" value="keystorepw"/>  

  <property name="client-cert" value="ClientCert"/>

  <property name="client-key" value="ClientKey"/>

  <property name="client-key-pass" value="ClientKeyPass"/>

  <property name="client-cert-alias" value="testClientCert"/>

  <!--サーバ キーストア -->

  <property name="server-keystore-name" value="serverKeyStore.jks"/>

  <property name="server-keystore-pass" value="keystorepw"/>

  <property name="server-cert" value="ServerCert"/>

  <property name="server-key" value="ServerKey"/>

  <property name="server-key-pass" value="ServerKeyPass"/>

  <property name="server-cert-alias" value="testServerCert"/>

  <path id="client.class.path">

    <pathelement path="${client.dir}"/>

    <pathelement path="${java.class.path}"/>

  </path>

  <!-- Web サービス WLS Ant タスク定義 -->

  <taskdef name="jwsc"

    classname="weblogic.wsee.tools.anttasks.JwscTask" />

  <taskdef name="clientgen"

      classname="weblogic.wsee.tools.anttasks.ClientGenTask" />

  <target name="all" depends="build, deploy"/>

  <target name="build" depends="clean,server,client"/>

  <target name="clean">

    <delete dir="${ear.dir}"/>

    <delete dir="${client.dir}"/>

  </target>

  <!-- MTOM Web サービスをビルドするターゲット -->

  <target name="server" description="Target that builds the MTOM Web Service">

    <jwsc

      srcdir="${examples.src.dir}/${package.dir}"

      sourcepath="${examples.src.dir}"

      destdir="${ear.dir}"

      classpath="${java.class.path}"

      fork="true"

      keepGenerated="true"

      deprecation="${deprecation}"

      debug="${debug}">

        <jws file="SecurityMtomService.java" explode="true"/>

    </jwsc>

  </target>

  <!-- MTOM Web サービス クライアントをビルドするターゲット -->

  <target name="client" description="Target that builds the source Web Service">

    <mkdir dir="${client.dir}/${package.dir}/client/"/>

    <clientgen

      wsdl="${ear.dir}/${ws.file}/WEB-INF/${ws.file}Service.wsdl"

      destDir="${client.dir}"

      classpath="${java.class.path}"

      packageName="${package}.client"/>

    <copy file="MtomClient.java" todir="${client.dir}/${package.dir}/client/"/>

    <javac

      srcdir="${client.dir}" destdir="${client.dir}"

      classpath="${java.class.path}"

      includes="${package.dir}/client/**/*.java"/>

  </target>

  <!-- MTOM Web サービスをデプロイするターゲット -->

  <target name="deploy" description="Target that deploys the reliable destination Web Service">

    <wldeploy

      action="deploy"

      source="${ear.dir}"

      user="${wls.username}"

      password="${wls.password}"

      verbose="true"

      adminurl="t3://${wls.hostname}:${wls.port}"

      targets="${wls.server.name}"

      failonerror="${failondeploy}"/>

  </target>

  <!-- MTOM Web サービス クライアントを実行するターゲット -->

  <target name="run" >

    <java fork="true"

      classname="examples.webservices.security_mtom.client.MtomClient"

      failonerror="true" >

	  <jvmarg line="-Dweblogic.wsee.verbose=*"/>

      <classpath refid="client.class.path"/>

      <arg line=	"  

      ${basedir}/certs/${client-keystore-name}

      ${client-keystore-pass}

      ${client-cert-alias}

      ${client-key-pass}    

      ${basedir}/certs/testServerCertTempCert.der

      http://${wls.hostname}:${wls.port}/SecurityMtomService/SecurityMtomService?WSDL" />

    </java>

  </target>

    <!-- Web サービス セキュリティをコンフィグレーションするターゲット -->

  <target name="config.server.security" description="Target the configure the web service security">

    <copy todir="${examples.domain.dir}" overwrite="true">

      <fileset dir="${certs.dir}" includes="${server-keystore-name}"/>

    </copy>

    <java classname="weblogic.WLST" fork="true" failonerror="true">

      <arg line="configWss.py ${wls.username} ${wls.password} ${wls.hostname} ${wls.port}

      ${server-keystore-name} ${server-keystore-pass} ${server-cert-alias} ${server-key-pass}" />

    </java>

  </target>

</project>

<?xml version="1.0" encoding="UTF-8"?> 

- <s1:definitions name="SecurityMtomServiceServiceDefinitions" targetNamespace="http://examples/webservices/security_mtom" xmlns="" xmlns:s0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:s1="http://schemas.xmlsoap.org/wsdl/" xmlns:s2="http://examples/webservices/security_mtom" xmlns:s3="http://schemas.xmlsoap.org/wsdl/soap12/" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">

  <wsp:UsingPolicy s1:Required="true" /> 

- <wsp:Policy s0:Id="Mtom.xml">

  <wsoma:OptimizedMimeSerialization xmlns:wsoma="http://schemas.xmlsoap.org/ws/2004/09/policy/optimizedmimeserialization" /> 

  </wsp:Policy>

- <wsp:Policy s0:Id="Wssp1.2-Wss1.1-EncryptedKey.xml">

- <sp:SymmetricBinding xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512">

- <wsp:Policy>

- <sp:ProtectionToken>

- <wsp:Policy>

- <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512/IncludeToken/Never">

- <wsp:Policy>

  <sp:RequireThumbprintReference /> 

  <sp:WssX509V3Token11 /> 

  </wsp:Policy>

  </sp:X509Token>

  </wsp:Policy>

  </sp:ProtectionToken>

- <sp:AlgorithmSuite>

- <wsp:Policy>

  <sp:Basic256 /> 

  </wsp:Policy>

  </sp:AlgorithmSuite>

- <sp:Layout>

- <wsp:Policy>

  <sp:Lax /> 

  </wsp:Policy>

  </sp:Layout>

  <sp:IncludeTimestamp /> 

  <sp:OnlySignEntireHeadersAndBody /> 

  </wsp:Policy>

  </sp:SymmetricBinding>

- <sp:Wss11 xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512">

- <wsp:Policy>

  <sp:MustSupportRefKeyIdentifier /> 

  <sp:MustSupportRefIssuerSerial /> 

  <sp:MustSupportRefThumbprint /> 

  <sp:MustSupportRefEncryptedKey /> 

  <sp:RequireSignatureConfirmation /> 

  </wsp:Policy>

  </sp:Wss11>

  </wsp:Policy>

- <wsp:Policy s0:Id="Wssp1.2-2007-EncryptBody.xml">

- <sp:EncryptedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">

  <sp:Body /> 

  </sp:EncryptedParts>

  </wsp:Policy>

- <wsp:Policy s0:Id="Wssp1.2-2007-SignBody.xml">

- <sp:SignedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">

  <sp:Body /> 

  </sp:SignedParts>

  </wsp:Policy>

- <s1:types>

- <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="java:examples.webservices.security_mtom" xmlns:s0="http://schemas.xmlsoap.org/wsdl/" xmlns:s1="http://examples/webservices/security_mtom" xmlns:s2="http://schemas.xmlsoap.org/wsdl/soap12/" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:xs="http://www.w3.org/2001/XMLSchema">

- <xs:complexType name="ArrayOfJavaLangstring_literal">

- <xs:sequence>

  <xs:element maxOccurs="unbounded" minOccurs="0" name="JavaLangstring" nillable="true" type="xs:string" /> 

  </xs:sequence>

  </xs:complexType>

  <xs:element name="ArrayOfJavaLangstring_literal" type="java:ArrayOfJavaLangstring_literal" xmlns:java="java:examples.webservices.security_mtom" /> 

  <xs:element name="base64Binary_literal" type="xs:base64Binary" /> 

  </xs:schema>

- <xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="http://examples/webservices/security_mtom" xmlns:s0="http://schemas.xmlsoap.org/wsdl/" xmlns:s1="http://examples/webservices/security_mtom" xmlns:s2="http://schemas.xmlsoap.org/wsdl/soap12/" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:xs="http://www.w3.org/2001/XMLSchema">

  <xs:import namespace="java:examples.webservices.security_mtom" /> 

- <xs:element name="echoBinaryAsString">

- <xs:complexType>

- <xs:sequence>

  <xs:element name="bytes" type="xs:base64Binary" /> 

  </xs:sequence>

  </xs:complexType>

  </xs:element>

- <xs:element name="echoBinaryAsStringResponse">

- <xs:complexType>

- <xs:sequence>

  <xs:element name="return" type="xs:string" /> 

  </xs:sequence>

  </xs:complexType>

  </xs:element>

- <xs:element name="echoBinaryArrayAsStringArray">

- <xs:complexType>

- <xs:sequence>

  <xs:element name="array" type="xs:base64Binary" /> 

  </xs:sequence>

  </xs:complexType>

  </xs:element>

- <xs:element name="echoBinaryArrayAsStringArrayResponse">

- <xs:complexType>

- <xs:sequence>

  <xs:element name="return" type="java:ArrayOfJavaLangstring_literal" xmlns:java="java:examples.webservices.security_mtom" /> 

  </xs:sequence>

  </xs:complexType>

  </xs:element>

- <xs:element name="echoStringAsBinary">

- <xs:complexType>

- <xs:sequence>

  <xs:element name="s" type="xs:string" /> 

  </xs:sequence>

  </xs:complexType>

  </xs:element>

- <xs:element name="echoStringAsBinaryResponse">

- <xs:complexType>

- <xs:sequence>

  <xs:element name="return" type="xs:base64Binary" /> 

  </xs:sequence>

  </xs:complexType>

  </xs:element>

  </xs:schema>

  </s1:types>

- <s1:message name="echoBinaryAsString">

  <s1:part element="s2:echoBinaryAsString" name="parameters" /> 

  </s1:message>

- <s1:message name="echoBinaryAsStringResponse">

  <s1:part element="s2:echoBinaryAsStringResponse" name="parameters" /> 

  </s1:message>

- <s1:message name="echoBinaryArrayAsStringArray">

  <s1:part element="s2:echoBinaryArrayAsStringArray" name="parameters" /> 

  </s1:message>

- <s1:message name="echoBinaryArrayAsStringArrayResponse">

  <s1:part element="s2:echoBinaryArrayAsStringArrayResponse" name="parameters" /> 

  </s1:message>

- <s1:message name="echoStringAsBinary">

  <s1:part element="s2:echoStringAsBinary" name="parameters" /> 

  </s1:message>

- <s1:message name="echoStringAsBinaryResponse">

  <s1:part element="s2:echoStringAsBinaryResponse" name="parameters" /> 

  </s1:message>

- <s1:portType name="SecurityMtomService" wsp:PolicyURIs="#Wssp1.2-2007-SignBody.xml #Wssp1.2-2007-EncryptBody.xml #Wssp1.2-Wss1.1-EncryptedKey.xml">

- <s1:operation name="echoBinaryAsString" parameterOrder="parameters">

  <s1:input message="s2:echoBinaryAsString" /> 

  <s1:output message="s2:echoBinaryAsStringResponse" /> 

  </s1:operation>

- <s1:operation name="echoBinaryArrayAsStringArray" parameterOrder="parameters">

  <s1:input message="s2:echoBinaryArrayAsStringArray" /> 

  <s1:output message="s2:echoBinaryArrayAsStringArrayResponse" /> 

  </s1:operation>

- <s1:operation name="echoStringAsBinary" parameterOrder="parameters">

  <s1:input message="s2:echoStringAsBinary" /> 

  <s1:output message="s2:echoStringAsBinaryResponse" /> 

  </s1:operation>

  </s1:portType>

- <s1:binding name="SecurityMtomServiceServiceSoapBinding" type="s2:SecurityMtomService">

  <s3:binding style="document" transport="http://schemas.xmlsoap.org/soap/http" /> 

- <wsp:Policy>

  <wsp:PolicyReference URI="#Mtom.xml" /> 

  </wsp:Policy>

- <s1:operation name="echoBinaryAsString">

  <s3:operation style="document" /> 

- <s1:input>

  <s3:body parts="parameters" use="literal" /> 

  </s1:input>

- <s1:output>

  <s3:body parts="parameters" use="literal" /> 

  </s1:output>

  </s1:operation>

- <s1:operation name="echoBinaryArrayAsStringArray">

  <s3:operation style="document" /> 

- <s1:input>

  <s3:body parts="parameters" use="literal" /> 

  </s1:input>

- <s1:output>

  <s3:body parts="parameters" use="literal" /> 

  </s1:output>

  </s1:operation>

- <s1:operation name="echoStringAsBinary">

  <s3:operation style="document" /> 

- <s1:input>

  <s3:body parts="parameters" use="literal" /> 

  </s1:input>

- <s1:output>

  <s3:body parts="parameters" use="literal" /> 

  </s1:output>

  </s1:operation>

  </s1:binding>

- <s1:service name="SecurityMtomServiceService">

- <s1:port binding="s2:SecurityMtomServiceServiceSoapBinding" name="SecurityMtomServiceSoapPort">

  <s3:address location="http://localhost:7001/SecurityMtomService/SecurityMtomService" /> 

  </s1:port>

  </s1:service>

  </s1:definitions>

@WebService(name = "ReliableEchoPort",

    serviceName = "ReliableEchoService")

@WLHttpTransport(contextPath = "WsrmSecurity", serviceUri = "ReliableEchoService")

@Policies({

  @Policy(uri="policy:Wssp1.2-2007-Wssc1.3-Bootstrap-Wss1.0.xml"),

  @Policy(uri="policy:Reliability1.1_SequenceSTR")}

)