Download xmlsec 1.4 1 jar

CertificateException java. CertificateExpiredException java. CertificateFactory java. CertificateNotYetValidException java. XCRL java. XCertificate java. DSAParams java. DSAPublicKey java. RSAPublicKey java. AlgorithmParameterSpec java. InvalidKeySpecException java. KeySpec java. MessageFormat java. AbstractSet java. ArrayList java.

Arrays java. Collection java. Collections java. Comparator java. Enumeration java. HashMap java. HashSet java. Iterator java. LinkedHashSet java. LinkedList java. List java. ListIterator java. Locale java. Map java. NoSuchElementException java. ResourceBundle java.

Set java. SortedSet java. StringTokenizer java. TreeSet java. Vector java. WeakHashMap java. Level java. Logger javax. BadPaddingException javax. Cipher javax. IllegalBlockSizeException javax. Mac javax. NoSuchPaddingException javax. These releases contain a fix for a new CVE: CVE - Bypass of the secureValidation property Please refer to the security advisories page for further information.

November Version 2. Older News See here for old news. All other marks mentioned may be trademarks or registered trademarks of their respective owners. I'll want to add that code in to the helper object at GitHub once you've got it, so feel free to fork it and put in a pull request. If I am able to find some time, I'll dig in as well. Hey so I found the following code which uses java to sign a soap message.

It's a test to send an encrpyted soap message to amazon. Thanks for the link. That looks like it could solve my problem. I've been pulled into some other work for the moment, but I'll give it a try when I can.

Steve and Anthony I finally got this working after several days and figured I'd share my results. Early on, I abandoned the notion of getting this working in CF, and pushed it all to a custom Java class that just takes strings from CF as arguments. I used Axis2 with Rampart, following their normal instructions, I created a stub and got my web service working from a standalone file.

I setup the constructor to create a static ConfigurationContext with my endpoint. I then created a call function that creates a new Axis2 stub and actually performs the sendReceive and returns the result to CF as a string.

Here is where I hit issues. This would work perfectly once, then randomly after that. I kept getting an "Object not instantiated" error. I was able to track it down to a bug in an older version of xml-security which is even included in the most up to date version of wss4j.

You will need to download the latest wss4j source and the latest xml-security libraries. Update the xml-security libraries in wss4j and compile. I had to remove an "init ;" line from one of the wss4j source files because the newer xml-security no longer requires or even has that function. Now you should be able to copy in all of your Axis2 and rampart libraries into the CF classpath and be good to go. Thanks K. This is really excellent stuff. I appreciate your contribution - I'm sure it will be invaluable to others doing integration work.

Anthony, Thanks for your tips and providing this forum for discussion. As portal native, cfusion. Class not found: org. We're stumped. We've put them in every lib dir we can find, tried adding them to the java class path outside cfusion. The statements that are calling the classes are in our WSAuthenticator. WSConstants" ; variables. WSSecUsernameToken" ; variables.

WSSecHeader" ; variables. Chris, I this looks an awful lot like a classpath issue to me. I haven't worked with portlets, so I don't have any experience in that regard, so I'm just guessing. I would probably try to see if the ws. I don't think this a bug issue with the jars, although it's quite likely newer versions are out pretty sure XMLSec is updated , so you could pull those to see if those work better. I haven't had a chance to play with it yet and it's not really a solution for you, but it's worth tucking away for later.

If you do find a solution, let us know, I'm curious to know what the issue is and I'm sure you'll help someone else out there with the same problem! Hey Anthony, love your work. With your paths set up to compile Java code, go into the local java directory and issue these two commands: build clean build. The build. See the section Using ant for more information.

Other useful targets may be xsltc. The second target, smoketest , runs the Xalan-J intepretive smoketest. Running the build smoketest or other targets in the test directory automatically looks for the jars in the directory..

The end of the console output should look like this:. The Minitest passed! The Smoketest passed! Apache Ant is a flexible, powerful, and easy-to-use Java build tool that we include with the Xalan-Java distribution.

The build file defines the "targets" that you can use Ant to build. The batch and shell files set up the classpath and launch Ant with the target and any other arguments you provide.

You can also set up your classpath manually see build. Main target where target is nothing for the default target or one of the following. If you build a target that depends on other targets, Ant creates those other targets in the correct order. If you modify a sample and want to recompile it, you can run the Java compiler in the directory containing the example. Be sure xalan.

To recompile and run the class files in the servlet subdirectory, the javax.