OSCARS Configuration
You will need to modify
the files that are located in conf/axis-tomcat for your
users. Once you have modified them you should copy them to a domain
specific directory, and set the environment variable DOMAIN_HOME to
point to them. If $DOMAIN_HOME is set, the ant task setupServer will
copy the files from there rather than the conf/axis-tomcat. Also when you
update to a newer distribution of OSCARS your changes won't be lost.
Server
- OSCARS-services.xml,notify-services.xml
are generated by WSDL2Java and specify all the methods and their
parameters of the respective service.
The ws-security-policy specification for message security is included
in this file. It also imports rampConfig.xml for the Rampart specific parts of
the security policy. Located
in the distribution at conf/axis-tomcat. Copied to OSCARS.aar/META-INF/.
- rampConfig.xml names the keystore file and has its
password. Located in the distribution in conf/axis-tomcat. Copied
to $CATALINA_HOME/shared/server/classes/repo.
- OSCARS.jks
is the keystore that is used to
verify signed messages. It needs to contain the trustedCACerts for
the issuers of any user who will submit a signed message and a keyEntry
for the server to sign responses and forward messages to other
IDCs. Located in
the distribution in conf/axis-tomcat. Copied to
$CATALINA_HOME/shared/server/classes/repo.
- ssl-keystore.jks - has
the trustedCACert for the ssl
certificate of the Tomcat server that hosts the oscars services to which this service may
forward messages. Located in the distribution in conf/axis-tomcat. Copied to
$CATALINA_HOME/shared/server/classes/repo.
- Files copied from OSCARS to axis2
- conf/logging/axis2.log4j.properties is copied to
webapps/axis2/classes/log4j.properties
- classes/net/es/oscars/client/security/PWCallback.class copied
to webapps/axis2/WEB-INF/net/es/oscars/client/security/PWCallback.class
Client
See Security
Reference for more
details about these files.
- axis2.xml - needed when
signing messages. It contains:
- InFlow and OutFlow parameters
- Imports rampConfig.xml
The axis2.xml file can be found by the client code from a
javavm flag -daxis2.xml=<filename>
or can be set programatically by
ConfigurationContext configContext =
ConfigurationContextFactory.createConfigurationContextFromFileSystem(repo, null);
ServiceClient serviceClient = new ServiceClient(configContext, null)
Where repo is a directory on the classpath that contains an
axis2.xml file.
The repo directory also contains: rampConfig.xml contains:
- alias for the user who is sending the messages
- org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
- org.apache.ws.security.crypto.merlin.keystore.type=jks
- org.apache.ws.security.crypto.merlin.keystore.password=password
- org.apache.ws.security.crypto.merlin.file=OSCARS.jks (name
of keystore file)
OSCARS.jks contains
- keyEntry for the user specified in axis2.xml to be signing the outgoing messages
- trustedCACerts for the issuer of this user's certificate
ssl-keystore.jks - has
the TrustedCACert for the ssl
certificate of the Tomcat server that hosts the oscars services to which the client will be
connecting