Mantis Bugtracker
Main | My View | View Issues | Change Log | Docs
  

Viewing Issue Advanced Details [ Jump to Notes ] [ View Simple ] [ Issue History ] [ Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0001793 [Resin] minor always 06-11-07 09:48 06-17-07 17:37
Reporter ferg View Status public  
Assigned To ferg
Priority normal Resolution fixed Platform
Status closed   OS
Projection none   OS Version
ETA none Fixed in Version 3.1.2 Product Version
  Product Build
Summary 0001793: Hessian security
Description (rep by Serge Merzliakov)

     As a newcomer, I don't know much about Hessian (my day job requires WS-Security, SOAP and the orthodox SOA stack...) but I have got the samples working and like the simplicity very much. Are there any plans to encrypt messages or some other message level security (this excludes SSL) ? I know this strays into the WS-Security space (and we don't wan't to reinvent the WS-* wheel) but it would be a compelling argument for serious evaluation in most firms considering SOA.
Steps To Reproduce
Additional Information
Attached Files

- Relationships

- Notes
(0002055)
ferg
06-17-07 17:37

 hessian/3c{20,21,30,31,32}

A) Encryption:

X509Encryption envelope = new com.caucho.hessian.security.X509Encryption();
X509Certificate cert = ...;
envelope.setCertificate(cert);

OutputStream out = ...;
Hessian2Output out = new Hessian2Output(out);

out = envelope.wrap(out);

// use normal Hessian2Output methods to write data

out.close();


B) Decryption:

X509Encryption envelope = new com.caucho.hessian.security.X509Encryption();
X509Certificate cert = ...;
envelope.setCertificate(cert);
PrivateKey key = ...;
envelope.setPrivateKey(key);

InputStream is = ...;
Hessian2Input in = new Hessian2Input(in);

in = envelope.unwrap(in);

// use normal Hessian2Input methods to read data

in.close();


C) Signature:

X509Signature envelope = new com.caucho.hessian.security.X509Signature();
X509Certificate cert = ...;
envelope.setCertificate(cert);
PrivateKey key = ...;
envelope.setPrivateKey(key);

OutputStream out = ...;
Hessian2Output out = new Hessian2Output(out);

out = envelope.wrap(out);

// use normal Hessian2Output methods to write data

out.close();


D) Signature Validation:

X509Signature envelope = new com.caucho.hessian.security.X509Signature();
X509Certificate cert = ...;
envelope.setCertificate(cert);

InputStream is = ...;
Hessian2Input in = new Hessian2Input(in);

in = envelope.unwrap(in);

// use normal Hessian2Input methods to read data

in.close(); // validation occurs during the close()
 

- Issue History
Date Modified Username Field Change
06-11-07 09:48 ferg New Issue
06-17-07 17:37 ferg Note Added: 0002055
06-17-07 17:37 ferg Assigned To  => ferg
06-17-07 17:37 ferg Status new => closed
06-17-07 17:37 ferg Resolution open => fixed
06-17-07 17:37 ferg Fixed in Version  => 3.1.2

Mantis 1.0.0rc3[^]
Copyright © 2000 - 2005 Mantis Group
28 total queries executed.
25 unique queries executed.
Powered by Mantis Bugtracker