|
|
|||||
|---|---|---|---|---|---|
|
PROTOCOL: Symmetric Key Services (SKS) response with a KeyCachePolicy (KCP) |
|||||
|
A successful response to a KCP request (without the WSS overlay) resembles the following: |
|||||
|
|
<kcp:KeyCachePolicy xmlns:kcp="http://www.strongauth.com/2006/01/symkey#KeyCachePolicy"> |
||||
|
|
|
<kcp:kcpid>2</kcp:kcpid> <kcp:name>Active KeyCachePolicy for all devices</kcp:name> <kcp:description>This is a modified description for KCPID 2</kcp:description> <kcp:start_date>2006-08-02 11:49:13.0</kcp:start_date> <kcp:end_date>2010-10-12 12:31:35.0</kcp:end_date> <kcp:maxnewkeys>0</kcp:maxnewkeys> <kcp:maxnewdays>0</kcp:maxnewdays> <kcp:maxusedkeys>5</kcp:maxusedkeys> <kcp:maxuseddays>60</kcp:maxuseddays> <kcp:usefirst>Cache</kcp:usefirst> <kcp:status>Active</kcp:status> |
|||
|
|
</kcp:KeyCachePolicy> |
||||
|
|
|
|
|
|
|
|
The same response when wrapped within the OASIS WSS protocol: |
|||||
|
|
|||||
|
|
<?xml version="1.0" encoding="UTF-8"?> <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"> <SOAP-ENV:Header> <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" SOAP-ENV:mustUnderstand="1"> <wsse:BinarySecurityToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" wsu:Id="XWSSGID-1154643601188487838158">MIIEJTCCAw2gAwIBAgIIK8YzLjBJ0qswDQYJKoZIhvcNAQELBQAwZzEmMCQGA1UEAxMdU3Ryb25n S2V5IERFTU8gU3Vib3JkaW5hdGUgQ0ExJDAiBgNVBAsTG0ZvciBTdHJvbmdLZXkgREVNTyBVc2Ug T25seTEXMBUGA1UEChMOU3Ryb25nQXV0aCBJbmMwHhcNMDYwNzI1MTYzODE4WhcNMDcwNzI1MTY0 ODE4WjBqMRIwEAYKCZImiZPyLGQBARMCMTAxFTATBgNVBAMTDFNLUyBTZXJ2ZXItMjEkMCIGA1UE CxMbRm9yIFN0cm9uZ0tleSBERU1PIFVzZSBPbmx5MRcwFQYDVQQKEw5TdHJvbmdBdXRoIEluYzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ2Kge/hQG7b7Tv7vWzt+phYWQxGsurJ0fUM ILXJ+BfY7INZ7g9K9ZuqjE62Vds6odX2C91Wk0vIPeeyl10EQ6u2LsYi0qswlydrW4Qbt6zR8376 NuQdhGtyNsboeG7UDzFDJDIu8NxO6tE72t5nFdtTIbM6O11mZ43KZxhUizst8qGR1cpnU7bhTuRm Ud737tLvowe4ubYRk8n/9DDTG1MR3BhKD9ylqW7j1+9nAG9JUshIbNoZZ6Z0aCxp7QvpiOjLnkIq znwq50gWEyZYJSVu5W++XCORIIGjEiRJqHKblwjHF3HXCGQqIuzGnFf275sOi9qO3ALtNpS75li4 bF0CAwEAAaOB0TCBzjAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0OBBYEFB7F74j+RVORjhNyCeaLcGpR GhFiMB8GA1UdIwQYMBaAFPTYwEHoJG4iFVHRnt2EWxGluAQVMCYGA1UdEQQfMB2BG3NlcnZlci5h ZG1pbkBzdHJvbmdhdXRoLmNvbTAYBgNVHSAEETAPMA0GCysGBAHSEoN9AQQBMDoGA1UdHwQzMDEw L6AtoCuGKWh0dHA6Ly9kZW1vLnN0cm9uZ2tleS5vcmcvZGVtby1zdWItY2EuY3JsMA0GCSqGSIb3 DQEBCwUAA4IBAQAkhGJr1wg/Qt6JKnxvWKK/0fOlguSRRQl1in37MTtnqot7H8ahkaDP2sVXNW1V LrEeXyNfHE4vTAoP5VIiT8nXlsvdujqRAsY0gigJ5VJ/D990DBqKN2kotvZMvbAY4mcDdU+TaX4z k/oetZqrAYX7Szs3NUgxopd8K+GzdR+b1FzlAhvf39zqrCjEGYjJyxfPQruWKPmdvRO1ccIxvQlG kMP9nDOKbnRNTmS1ZOJqktytFAjAlfEVoaV5/mACOZOYKpUJsOHm+TwSyR9373kMjIWh8oCpiFYf 2kQKk66f86UazwChKnDQn1THnFFBukr6VRw50AaIaXVTauCM+R1X</wsse:BinarySecurityToken> <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:SignedInfo> <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"> <InclusiveNamespaces xmlns="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="wsse SOAP-ENV"/> </ds:CanonicalizationMethod> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> <ds:Reference URI="#XWSSGID-1154643528345-183864812"> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> <ds:DigestValue>JWAIjBcvriJGGfaPp4gKvoc8kdw=</ds:DigestValue> </ds:Reference> <ds:Reference URI="#XWSSGID-11546435283461063250055"> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> <ds:DigestValue>fN74wtJOaVfSgSEe3zyBooVjEc8=</ds:DigestValue> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue>H7adGcmI7Lu5kdlNLpibhkoLTCEJDThoM9JHx1IbFazfgzewvwu7RVVqNxcTbBM/ixJq2b7I0MZk RjQk9jDG+L+mCSLsolk6NSCkrHbRroajgrMuT3oErKekbYaECm++5wPBpNdubAqt7A0/QXgLYmRn naDuK1pMNxi/7GRK9YJWZZ1BHBKASOgKbzuBooiXK4fZFVfP5S4k1RjxGODxudZ9NEY4AxUCB3xK O/VoHqKL8O2nGmmB1AsdpY0Qccze1T/MsOs83ufrLbPcIOG0rNBmiAMiHPtM8FQD/GmQXcnWhyb0 knezpftaZqw1i/tTFQENMFcmJga89UIMLkYrKA==</ds:SignatureValue> <ds:KeyInfo> <wsse:SecurityTokenReference xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="XWSSGID-1154643528342-2073946234"> <wsse:Reference URI="#XWSSGID-1154643601188487838158" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/> </wsse:SecurityTokenReference> </ds:KeyInfo> </ds:Signature> <wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="XWSSGID-11546435283461063250055"> <wsu:Created>2006-08-03T22:18:48Z</wsu:Created> <wsu:Expires>2006-09-02T22:18:48Z</wsu:Expires> </wsu:Timestamp> </wsse:Security> </SOAP-ENV:Header> <SOAP-ENV:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="XWSSGID-1154643528345-183864812"> <kcp:KeyCachePolicy xmlns:kcp="http://www.strongauth.com/2006/01/symkey#KeyCachePolicy"> <kcp:kcpid>2</kcp:kcpid> <kcp:name>Active KeyCachePolicy for all devices</kcp:name> <kcp:description>This is a modified description for KCPID 2</kcp:description> <kcp:start_date>2006-08-02 11:49:13.0</kcp:start_date> <kcp:end_date>2010-10-12 12:31:35.0</kcp:end_date> <kcp:maxnewkeys>0</kcp:maxnewkeys> <kcp:maxnewdays>0</kcp:maxnewdays> <kcp:maxusedkeys>5</kcp:maxusedkeys> <kcp:maxuseddays>60</kcp:maxuseddays> <kcp:usefirst>Cache</kcp:usefirst> <kcp:status>Active</kcp:status> </kcp:KeyCachePolicy> </SOAP-ENV:Body> </SOAP-ENV:Envelope> |
||||
|
|
|
|
|||