Sun Microsystems 820433510 Actions of Request and Response Policy Congurations

Actions of Request and Response Policy
Congurations
Thefollowing table shows message protection policy congurations and the resulting message
securityoperations performed by the WS-Security SOAP message security providers for that
conguration.
TABLE10–1 Messageprotection policy to WS-Security SOAP message security operation mapping
MessageProtectionPolicy ResultingWS-SecuritySOAP message protection operations
auth-source="sender"Themessage contains a wsse:Security header that
containsa wsse:UsernameToken (with password).
auth-source="content"Thecontent of the SOAP message Body is signed. The
messagecontains a wsse:Security header that contains
themessage Body signature represented as a
ds:Signature.
auth-source="sender"
auth-recipient="before-content"
OR
auth-recipient="after-content"
Thecontent of the SOAP message Body is encrypted and
replacedwith the resulting xend:EncryptedData. The
messagecontains a wsse:Security header that contains
awsse:UsernameToken(with password) and an
xenc:EncryptedKey.The xenc:EncryptedKey contains
thekey used to encrypt the SOAP message body. The key
isencrypted in the public key of the recipient.
auth-source="content"
auth-recipient="before-content"
Thecontent of the SOAP message Body is encrypted and
replacedwith the resulting xend:EncryptedData. The
xenc:EncryptedDatais signed. The message contains a
wsse:Securityheader that contains an
xenc:EncryptedKeyand a ds:Signature. The
xenc:EncryptedKeycontains the key used to encrypt the
SOAPmessage body. The key is encrypted in the public
keyof the recipient.
auth-source="content"
auth-recipient="after-content"
Thecontent of the SOAP message Body is signed, then
encrypted,and then replaced with the resulting
xend:EncryptedData.The message contains a
wsse:Securityheader that contains an
xenc:EncryptedKeyand a ds:Signature. The
xenc:EncryptedKeycontains the key used to encrypt the
SOAPmessage body. The key is encrypted in the public
keyof the recipient.
ConguringtheEnterprise Ser ver forMessage S ecurity
SunGlassFishEnterprise Ser ver2.1 Administration Guide • December 2008134