Forum Discussion

DSturm's avatar
DSturm
Occasional Contributor
17 years ago

WS-Security: Shared symmetric key for encryption and signature

Hello,
we use SOAPUI to test mechanisms of WS-Security.
A typical scenario is, that the client generate a new symmetric key (session key), that use for encrytpion and(!) for signature. After that the symmetric key will also encrypt and send as to the recipient.

In the current version of Soapui (v2.0.2) it is possible to generate and use a symmetric key during the encryption process of Outgoing Configurations for WS-Security. This works fine. But how can I use the same symmetric Key for a signature?  Or is it possible to generate a symmetric key in a signature, that can be reuse in a encryption?

This scenario is a widespread use case (e.g. it corresponds to symmetric binding in WS-SecuriyPolicy), so the support with Soapui is (for us) very important.


Thanks for your help and kind regards.
Detlef