RE: BounsyCastle implementation for JDK 1.3

Thanks so much, Dims.

I got more than just wss4j from here! Now I can start to use WSS4J...

Best Regards,
Tao 

-----Original Message-----
From: Davanum Srinivas [mailto:davanum-Re5JQEeQqe8AvxtiuMwx3w@xxxxxxxxxxxxxxxx] 
Sent: Thursday, September 29, 2005 5:34 PM
To: Liu, Tao
Cc: wss4j-dev-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx
Subject: Re: BounsyCastle implementation for JDK 1.3

These are standard implementations of the algorithms...if someone is relying
on a bad ibm implemented crypto they are in for trouble :) should be ok as
far as i can tell :)

-- dims

On 9/29/05, Liu, Tao <Tao.Liu-J6WHdtdaXGY@xxxxxxxxxxxxxxxx> wrote:
> Fantastic! It works after I copies bcprov-jdk13-130.jar to jre/lib/ext 
> and added a line in java.security.
>
> The only concern: I must put bc provider above ibm provider, 
> otherwise, it fails in the same way.
> Does it have impact on WebSphere or other apps running in WebSphere?
>
> Thanks,
> Tao
>
> #
> # List of providers and their preference orders (see above):
> #
> security.provider.1=sun.security.provider.Sun
> security.provider.2=org.bouncycastle.jce.provider.BouncyCastleProvider
> security.provider.3=com.ibm.crypto.provider.IBMJCE
> security.provider.4=com.ibm.jsse.IBMJSSEProvider
> security.provider.5=com.ibm.security.cert.IBMCertPath
> security.provider.6=com.ibm.crypto.pkcs11.provider.IBMPKCS11
>
>
> -----Original Message-----
> From: Davanum Srinivas 
> [mailto:davanum-Re5JQEeQqe8AvxtiuMwx3w@xxxxxxxxxxxxxxxx]
> Sent: Thursday, September 29, 2005 4:43 PM
> To: Liu, Tao
> Cc: wss4j-dev-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx
> Subject: Re: BounsyCastle implementation for JDK 1.3
>
> Please install the bouncy castle provider in your JDK1.3
>
> See tip from Vishal here:
> http://www.mail-archive.com/fx-dev-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx/msg00980.html
>
> See following for install instructions:
> http://www.bouncycastle.org/specifications.html#install
> http://www.bouncycastle.org/documentation.html
>
> On 9/29/05, Liu, Tao <Tao.Liu-J6WHdtdaXGY@xxxxxxxxxxxxxxxx> wrote:
> > Dims,
> >
> > This one seems different. NoSuchPaddingException is thrown.
> >
> > Test cases TestWSSecurity2,6-9 failed. The messages are almost the 
> > same. I pasted one as follows.
> >
> > Thanks,
> > tao
> >
> >
> > =====================
> > <testcase classname="wssec.TestWSSecurity2"
> > name="testEncryptionDecryptionOAEP" time="0.21">
> >   <error message="An unsupported signature or encryption algorithm 
> > was used; nested exception is:
> > org.apache.xml.security.encryption.XMLEncryptionException: Paddding:
> > ISO10126Padding not implemented Original Exception was
> > javax.crypto.NoSuchPaddingException: Paddding: ISO10126Padding not 
> > implemented"
> > type="org.apache.ws.security.WSSecurityException">org.apache.ws.secu
> > ri
> > ty.WSS
> > ecurityException: An unsupported signature or encryption algorithm 
> > was used; nested exception is:
> > org.apache.xml.security.encryption.XMLEncryptionException: Paddding:
> > ISO10126Padding not implemented Original Exception was
> > javax.crypto.NoSuchPaddingException: Paddding: ISO10126Padding not 
> > implemented org.apache.xml.security.encryption.XMLEncryptionException:
> > Paddding: ISO10126Padding not implemented Original Exception was
> > javax.crypto.NoSuchPaddingException: Paddding: ISO10126Padding not 
> > implemented at 
> > org.apache.xml.security.encryption.XMLCipher.getInstance(Unknown
> > Source) at
> > org.apache.ws.security.message.WSEncryptBody.doEncryption(WSEncryptB
> > od
> > y.java
> > :469) at
> > org.apache.ws.security.message.WSEncryptBody.doEncryption(WSEncryptB
> > od
> > y.java
> > :450) at
> > org.apache.ws.security.message.WSEncryptBody.build(WSEncryptBody.java:
> > 292)
> > at
> > wssec.TestWSSecurity2.testEncryptionDecryptionOAEP(TestWSSecurity2.j
> > av
> > a:210)
> > javax.crypto.NoSuchPaddingException: Paddding: ISO10126Padding not 
> > implemented at 
> > com.ibm.crypto.provider.DESedeCipher.engineSetPadding(Unknown
> > Source) at javax.crypto.Cipher.getInstance(Unknown Source) at 
> > org.apache.xml.security.encryption.XMLCipher.getInstance(Unknown
> > Source) at
> > org.apache.ws.security.message.WSEncryptBody.doEncryption(WSEncryptB
> > od
> > y.java
> > :469) at
> > org.apache.ws.security.message.WSEncryptBody.doEncryption(WSEncryptB
> > od
> > y.java
> > :450) at
> > org.apache.ws.security.message.WSEncryptBody.build(WSEncryptBody.java:
> > 292)
> > at
> > wssec.TestWSSecurity2.testEncryptionDecryptionOAEP(TestWSSecurity2.j
> > av
> > a:210)
> > </error>
> > </testcase>
> >
> >
> > -----Original Message-----
> > From: Davanum Srinivas 
> > [mailto:davanum-Re5JQEeQqe8AvxtiuMwx3w@xxxxxxxxxxxxxxxx]
> > Sent: Thursday, September 29, 2005 4:05 PM
> > To: Liu, Tao
> > Cc: wss4j-dev-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx
> > Subject: Re: BounsyCastle implementation for JDK 1.3
> >
> > Tao,
> >
> > What's the exception? (see build/test-reports) i remember the 
> > earlier problem we had
> > (http://www.mail-archive.com/fx-dev-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx/msg00765.html)
> > is this a different one?
> >
> > -- dims
> >
> > On 9/29/05, Liu, Tao <Tao.Liu-J6WHdtdaXGY@xxxxxxxxxxxxxxxx> wrote:
> > > Hi, Dims
> > >
> > > I downloaded the latest SVN today. The code can be compiled, but 
> > > it throws an error during unitTest when I run command: "ant clean
test".
> > > Could you please tell me how To make wss4j running on JDK1.3 or 
> > > WebSphere 5?
> > >
> > > ==================================
> > > .......
> > > compile.tests:
> > >     [javac] Compiling 40 source files to
> > D:\MyWorkspace\wss4j\build\classes
> > >      [copy] Copying 1 file to D:\MyWorkspace\wss4j\build\classes
> > >
> > > fix.properties:
> > >
> > > compile:
> > >
> > > unitTests:
> > >     [junit] Running components.PackageTests
> > >     [junit] Tests run: 1, Failures: 0, Errors: 0, Time elapsed: 
> > > 2.784
> sec
> > >     [junit] Running wssec.PackageTests
> > >     [junit] Tests run: 25, Failures: 0, Errors: 6, Time elapsed:
> > > 8.923 sec
> > >
> > > BUILD FAILED
> > > D:\MyWorkspace\wss4j\build.xml:500: Test wssec.PackageTests failed
> > >
> > > Total time: 29 seconds
> > > D:\MyWorkspace\wss4j>
> > > ==================================
> > >
> > > I'm using ANT 1.6.5 and IBM JDK 1.3(shipped with WebSphere 5.0).
> > >
> > > "ant clean test" runs successfully if I change JAVA_HOME to Sun 
> > > JDK
> 1.4.2.
> > >
> > > Thanks,
> > > Tao
> > >
> > >
> > >
> > > Please get latest SVN (NOT CVS).
> > >
> > > "svn co http://svn.apache.org/repos/asf/webservices/wss4j/trunk/";
> > >
> > > thanks,
> > > dims
> > >
> > > On 9/22/05, Sumanta poria 
> > > <psumanta-PkbjNfxxIARBDgjK7y7TUQ@xxxxxxxxxxxxxxxx> wrote:
> > > > Davanum,
> > > > davanum-Re5JQEeQqe8AvxtiuMwx3w@xxxxxxxxxxxxxxxx
> > > >
> > > > I am trying to make the WSS4J work with JDK 1.3 and had run into 
> > > > issues
> > > with
> > > > Merlin's dependency on JDK1.4. The followin posting from you was 
> > > > very encouraging but I have not been able to locate the 
> > > > mentioned BounsyCastle implementation in CVS repository @ 
> > > > http://cvs.apache.org/viewcvs.cgi/ws-wss4j/
> > > > Can you please suggest where should I look for this file?
> > > >
> > > > Thanks and Regards
> > > > Sumanta
> > > >
> > > > Newsgroup wss4j-dev-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx Subject 
> > > > JDK1.3 support in 
> > > > WSS4J Time Thu 15 Sep 2005 11:02 PM GMT +0800 Sender Davanum 
> > > > Srinivas
> > > >
> > > > Folks,
> > > >
> > > > I've added a BouncyCastle based crypto (similar to Merlin) that 
> > > > works with JDK1.3. Basically got "ant clean test" working by 
> > > > modifing all the properties files (change Merlin->BouncyCastle).
> > > > You will need the jaas.jar from
> > > > http://java.sun.com/products/jaas/index-10.html. Drop that into 
> > > > the lib directory.  we need to clean up code in Sandbox to get 
> > > > things to compile under JDK1.3 till then please uncomment the 
> > > > exclude in build.xml
> > for all classes in sandbox.
> > > >
> > > > thanks,
> > > > dims
> > > >
> > > > ________________________________________________________________
> > > > _ Win 5 Gold Coins & prizes worth Lakhs on eBay.
> > > > http://adfarm.mediaplex.com/ad/ck/4686-26272-10936-630?ck=GoldRu
> > > > sh
> > > Register
> > > > Now!
> > > >
> > > >
> > >
> > >
> > > --
> > > Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service 
> > > Platform
> > >
> > > ------------------------------------------------------------------
> > > --
> > > - To unsubscribe, e-mail: 
> > > wss4j-dev-unsubscribe-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx
> > > For additional commands, e-mail: 
> > > wss4j-dev-help-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------------------
> > > --
> > > - To unsubscribe, e-mail: 
> > > wss4j-dev-unsubscribe-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx
> > > For additional commands, e-mail: 
> > > wss4j-dev-help-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx
> > >
> > >
> >
> >
> > --
> > Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service 
> > Platform
> >
> > --------------------------------------------------------------------
> > - To unsubscribe, e-mail: 
> > wss4j-dev-unsubscribe-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx
> > For additional commands, e-mail: 
> > wss4j-dev-help-28n8OjmUYWfNLxjTenLetw@xxxxxxxxxxxxxxxx
> >
> >
>
>
> --
> Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service 
> Platform
>


--
Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service Platform