第二步 服務端配置
1.放置證書的位置和屬性配置
將上面生成的檔案以Server開頭的檔案放置在src的cert包下
配置Server_Decrypt.properties,內容如下
org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
org.apache.ws.security.crypto.merlin.keystore.type=jks
org.apache.ws.security.crypto.merlin.keystore.password=storepass
org.apache.ws.security.crypto.merlin.keystore.alias=serverprivatekey
org.apache.ws.security.crypto.merlin.file=cert/Server_KeyStore.jks
這裡有個問題要注意，要注意去除空格，否則會報org.apache.ws.security.components.crypto.Merlin Not Found的error
配置Server_Verf.properties,內容如下
org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
org.apache.ws.security.crypto.merlin.keystore.type=jks 
org.apache.ws.security.crypto.merlin.keystore.password=storepass
org.apache.ws.security.crypto.merlin.keystore.alias=clientpublickey
org.apache.ws.security.crypto.merlin.file=cert/Server_TrustStore.jks
2.設定配置檔案(由於在上一篇文章已經有了基本的配置，這裡直接給出WSS4JInInterceptor的配置)
<bean id="WSS4JInInterceptorCert"  class="org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor">
        <constructor-arg>  
            <map>  
                <entry key="action" value="Signature Encrypt" />   
                <entry key="signaturePropFile" value="Server_SignVerf.properties"/>
                <entry key="decryptionPropFile" value="Server_Decrypt.properties"/>
                <entry key="passwordCallbackClass" value="ws.interceptor.UTPasswordServerCallBack"/>      
            </map>  
        </constructor-arg>  
    </bean>
3.UTPasswordServerCallBack類
?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

import java.io.IOException;   import javax.security.auth.callback.Callback;   import javax.security.auth.callback.CallbackHandler;   import javax.security.auth.callback.UnsupportedCallbackException;   import org.apache.ws.security.WSPasswordCallback;   public class UTPasswordServerCallBack implements CallbackHandler {   public void handle(Callback[] callbacks) throws IOException,   UnsupportedCallbackException {   WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];   pc.setPassword("keypass");   System.out.println("Server Identifier=" + pc.getIdentifier());   System.out.println("Server Password=" + pc.getPassword());   }   }

第三部 客戶端配置
1.放置證書的位置和屬性配置
將上面生成的檔案以Client開頭的檔案放置在src的cert包下
配置Client_Encrypt.properties,內容如下
org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
org.apache.ws.security.crypto.merlin.keystore.type=jks
org.apache.ws.security.crypto.merlin.keystore.password=storepass
org.apache.ws.security.crypto.merlin.keystore.alias=serverpublickey 
org.apache.ws.security.crypto.merlin.file=cert/Client_TrustStore.jks
配置Client_Sign.properties,內容如下
org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
org.apache.ws.security.crypto.merlin.keystore.type=jks
org.apache.ws.security.crypto.merlin.keystore.password=storepass
org.apache.ws.security.crypto.merlin.keystore.alias=clientprivatekey
org.apache.ws.security.crypto.merlin.file=cert/Client_KeyStore.jks
2.設定配置檔案(由於在上一篇文章已經有了基本的配置，這裡直接給出WSS4JOutInterceptor的配置)
<bean id="WSS4JOutInterceptorCert" class="org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor">
         <constructor-arg>  
            <map>  
              <entry key="action" value="Signature Encrypt"/>
              <entry key="user" value="clientprivatekey"/>
              <entry key="signaturePropFile" value="Client_Sign.properties"/>
              <entry key="encryptionUser" value="serverpublickey"/>
                <entry key="encryptionPropFile" value="Client_Encrypt.properties"/>
                <entry key="passwordCallbackClass" value="ws.erp.UTPasswordClientCallBack"/>
              </map>  
          </constructor-arg>    
    </bean>    
3.UTPasswordClientCallBack類
?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

import java.io.IOException;   import javax.security.auth.callback.Callback;   import javax.security.auth.callback.CallbackHandler;   import javax.security.auth.callback.UnsupportedCallbackException;   import org.apache.ws.security.WSPasswordCallback;   public class UTPasswordClientCallBack implements CallbackHandler {   public void handle(Callback[] callbacks) throws IOException,   UnsupportedCallbackException {   WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];   pc.setPassword("keypass");   System.out.println("Client Identifier=" + pc.getIdentifier());   System.out.println("Client Password=" + pc.getPassword());   }   }