Forum Discussion

Mark_E's avatar
Mark_E
Occasional Contributor
16 years ago

WSS signing with symmetric key -- secret key

I'm trying to sign three parts in a SOAP message, using the following algorithms:



I understand that this alg requires a secret key as an input, which in my case will be from a WS-Trust token:
Fr2YXrFAZ+1/ESGQN0+j/w9C5kQve2KmVr/SfbCth60=

Is there a way that I can provide this key to the WSS outgoing signature interface, preferably without using a keystore.

3 Replies

  • SmartBear_Suppo's avatar
    SmartBear_Suppo
    SmartBear Alumni (Retired)
    Hello,

    Atm there is no way you can do it a way you desire, but we'll fix it.

    robert
  • Mark_E's avatar
    Mark_E
    Occasional Contributor
    Thank you for the quick response.

    Do you have an estimation when this would be fixed?

    Alternately, is it possible to extend this functionality with a java custom built plug-in or groovy script? I haven't had much time to delve into the extendability of soapUI.
  • SmartBear_Suppo's avatar
    SmartBear_Suppo
    SmartBear Alumni (Retired)
    Hi Mark,


    We have this feature on our TO DO list. It requires that the underlying WSS4J library supports secret key signing (at least it didn't the last time we've checked).

    We do not have a time estimate on when this feature will be ready.


    Cheers!
    /Nenad Nikolic a.k.a. Shonzilla