ntuario.xmlsec.2.0.0.source-code.security-config.xml Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of xmlsec Show documentation
Show all versions of xmlsec Show documentation
Apache XML Security for Java supports XML-Signature Syntax and Processing,
W3C Recommendation 12 February 2002, and XML Encryption Syntax and
Processing, W3C Recommendation 10 December 2002. As of version 1.4,
the library supports the standard Java API JSR-105: XML Digital Signature APIs.
<?xml version="1.0"?> <!-- This configuration file is used for configuration of the org.apache.xml.security --> <Configuration target="org.apache.xml.security" xmlns="http://www.xmlsecurity.org/NS/configuration"> <Properties> <Property NAME="securityTokenFactory" VAL="org.apache.xml.security.stax.impl.securityToken.SecurityTokenFactoryImpl"/> <Property NAME="CACertKeyStorePassword" VAL="changeit"/> <Property NAME="MaximumAllowedTransformsPerReference" VAL="5"/> <Property NAME="MaximumAllowedReferencesPerManifest" VAL="30"/> <Property NAME="DoNotThrowExceptionForManifests" VAL="false"/> <Property NAME="AllowMD5Algorithm" VAL="false"/> <Property NAME="AllowNotSameDocumentReferences" VAL="false"/> <Property NAME="MaximumAllowedXMLStructureDepth" VAL="100"/> <Property NAME="MaximumAllowedEncryptedDataEvents" VAL="200"/> <Property NAME="DefaultLanguageCode" VAL="en"/> <Property NAME="DefaultCountryCode" VAL="US"/> </Properties> <SecurityHeaderHandlers> </SecurityHeaderHandlers> <TransformAlgorithms> <!-- c14n omitting comments --> <TransformAlgorithm URI="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" JAVACLASS="org.apache.xml.security.stax.impl.transformer.canonicalizer.Canonicalizer20010315_OmitCommentsTransformer" /> <!-- c14n with comments --> <TransformAlgorithm URI="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" JAVACLASS="org.apache.xml.security.stax.impl.transformer.canonicalizer.Canonicalizer20010315_WithCommentsTransformer" /> <!-- c14n 1.1 omitting comments --> <TransformAlgorithm URI="http://www.w3.org/2006/12/xml-c14n11" JAVACLASS="org.apache.xml.security.stax.impl.transformer.canonicalizer.Canonicalizer11_OmitCommentsTransformer" /> <!-- c14n 1.1 with comments --> <TransformAlgorithm URI="http://www.w3.org/2006/12/xml-c14n11#WithComments" JAVACLASS="org.apache.xml.security.stax.impl.transformer.canonicalizer.Canonicalizer11_WithCommentsTransformer" /> <!-- exclusive c14n omitting comments --> <TransformAlgorithm URI="http://www.w3.org/2001/10/xml-exc-c14n#" JAVACLASS="org.apache.xml.security.stax.impl.transformer.canonicalizer.Canonicalizer20010315_ExclOmitCommentsTransformer" /> <!-- exclusive c14n with comments --> <TransformAlgorithm URI="http://www.w3.org/2001/10/xml-exc-c14n#WithComments" JAVACLASS="org.apache.xml.security.stax.impl.transformer.canonicalizer.Canonicalizer20010315_ExclWithCommentsTransformer" /> <!-- Base64 --> <TransformAlgorithm URI="http://www.w3.org/2000/09/xmldsig#base64" JAVACLASS="org.apache.xml.security.stax.impl.transformer.TransformBase64Decode" /> <!-- enveloped signature --> <TransformAlgorithm URI="http://www.w3.org/2000/09/xmldsig#enveloped-signature" JAVACLASS="org.apache.xml.security.stax.impl.transformer.TransformEnvelopedSignature" /> <!-- XPath transform --> <!-- XSLT --> <!-- XPath version 2 --> <!-- XPath version 2b --> </TransformAlgorithms> <JCEAlgorithmMappings> <!-- MessageDigest Algorithms --> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#md5" Description="MD5 message digest from RFC 1321" AlgorithmClass="MessageDigest" RequirementLevel="NOT RECOMMENDED" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="128" JCEName="MD5"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#ripemd160" Description="RIPEMD-160 message digest" AlgorithmClass="MessageDigest" RequirementLevel="OPTIONAL" KeyLength="160" JCEName="RIPEMD160"/> <Algorithm URI="http://www.w3.org/2000/09/xmldsig#sha1" Description="SHA-1 message digest" AlgorithmClass="MessageDigest" RequirementLevel="REQUIRED" KeyLength="160" JCEName="SHA-1"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#sha256" Description="SHA-1 message digest with 256 bit" AlgorithmClass="MessageDigest" RequirementLevel="RECOMMENDED" KeyLength="256" JCEName="SHA-256"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#sha384" Description="SHA message digest with 384 bit" AlgorithmClass="MessageDigest" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="384" JCEName="SHA-384"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#sha512" Description="SHA-1 message digest with 512 bit" AlgorithmClass="MessageDigest" RequirementLevel="OPTIONAL" KeyLength="512" JCEName="SHA-512"/> <Algorithm URI="http://www.w3.org/2009/xmlenc11#mgf1sha1" Description="Mask Generation Function with SHA-1 used with the RSA-OAEP key transport algorithm" AlgorithmClass="MessageDigest" RequirementLevel="OPTIONAL" KeyLength="160" JCEName="SHA-1"/> <Algorithm URI="http://www.w3.org/2009/xmlenc11#mgf1sha224" Description="Mask Generation Function with SHA-224 used with the RSA-OAEP key transport algorithm" AlgorithmClass="MessageDigest" RequirementLevel="OPTIONAL" KeyLength="224" JCEName="SHA-224"/> <Algorithm URI="http://www.w3.org/2009/xmlenc11#mgf1sha256" Description="Mask Generation Function with SHA-256 used with the RSA-OAEP key transport algorithm" AlgorithmClass="MessageDigest" RequirementLevel="OPTIONAL" KeyLength="256" JCEName="SHA-256"/> <Algorithm URI="http://www.w3.org/2009/xmlenc11#mgf1sha384" Description="Mask Generation Function with SHA-384 used with the RSA-OAEP key transport algorithm" AlgorithmClass="MessageDigest" RequirementLevel="OPTIONAL" KeyLength="384" JCEName="SHA-384"/> <Algorithm URI="http://www.w3.org/2009/xmlenc11#mgf1sha512" Description="Mask Generation Function with SHA-512 used with the RSA-OAEP key transport algorithm" AlgorithmClass="MessageDigest" RequirementLevel="OPTIONAL" KeyLength="512" JCEName="SHA-512"/> <!-- Signature Algorithms --> <Algorithm URI="http://www.w3.org/2000/09/xmldsig#dsa-sha1" Description="Digital Signature Algorithm with SHA-1 message digest" AlgorithmClass="Signature" RequirementLevel="REQUIRED" KeyLength="160" RequiredKey="SHA1withDSA" JCEName="SHA1withDSA"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-md5" Description="RSA Signature with MD5 message digest" AlgorithmClass="Signature" RequirementLevel="NOT RECOMMENDED" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="128" RequiredKey="MD5withRSA" JCEName="MD5withRSA"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160" Description="RSA Signature with RIPEMD-160 message digest" AlgorithmClass="Signature" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="160" RequiredKey="RIPEMD160withRSA" JCEName="RIPEMD160withRSA"/> <Algorithm URI="http://www.w3.org/2000/09/xmldsig#rsa-sha1" Description="RSA Signature with SHA-1 message digest" AlgorithmClass="Signature" RequirementLevel="RECOMMENDED" KeyLength="160" RequiredKey="SHA1withRSA" JCEName="SHA1withRSA"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" Description="RSA Signature with SHA-256 message digest" AlgorithmClass="Signature" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="256" RequiredKey="SHA256withRSA" JCEName="SHA256withRSA"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" Description="RSA Signature with SHA-384 message digest" AlgorithmClass="Signature" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="384" RequiredKey="SHA384withRSA" JCEName="SHA384withRSA"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" Description="RSA Signature with SHA-512 message digest" AlgorithmClass="Signature" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="512" RequiredKey="SHA512withRSA" JCEName="SHA512withRSA"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" Description="ECDSA Signature with SHA-1 message digest" AlgorithmClass="Signature" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/rfc/rfc4051.txt" RequiredKey="SHA1withECDSA" JCEName="SHA1withECDSA"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" Description="ECDSA Signature with SHA-256 message digest" AlgorithmClass="Signature" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/rfc/rfc4051.txt" RequiredKey="SHA256withECDSA" JCEName="SHA256withECDSA"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" Description="ECDSA Signature with SHA-384 message digest" AlgorithmClass="Signature" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/rfc/rfc4051.txt" RequiredKey="SHA384withECDSA" JCEName="SHA384withECDSA"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" Description="ECDSA Signature with SHA-512 message digest" AlgorithmClass="Signature" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/rfc/rfc4051.txt" RequiredKey="SHA512withECDSA" JCEName="SHA512withECDSA"/> <!-- MAC Algorithms --> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-md5" Description="Message Authentication code using MD5" AlgorithmClass="Mac" RequirementLevel="NOT RECOMMENDED" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="128" RequiredKey="HmacMD5" JCEName="HmacMD5"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160" Description="Message Authentication code using RIPEMD-160" AlgorithmClass="Mac" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="160" RequiredKey="HMACRIPEMD160" JCEName="HMACRIPEMD160"/> <Algorithm URI="http://www.w3.org/2000/09/xmldsig#hmac-sha1" Description="Message Authentication code using SHA1" AlgorithmClass="Mac" RequirementLevel="REQUIRED" KeyLength="160" RequiredKey="HmacSHA1" JCEName="HmacSHA1"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256" Description="Message Authentication code using SHA-256" AlgorithmClass="Mac" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="256" RequiredKey="HmacSHA256" JCEName="HmacSHA256"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-sha384" Description="Message Authentication code using SHA-384" AlgorithmClass="Mac" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="384" RequiredKey="HmacSHA384" JCEName="HmacSHA384"/> <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-sha512" Description="Message Authentication code using SHA-512" AlgorithmClass="Mac" RequirementLevel="OPTIONAL" SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt" KeyLength="512" RequiredKey="HmacSHA512" JCEName="HmacSHA512"/> <!-- Block encryption Algorithms --> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" Description="Block encryption using Triple-DES" AlgorithmClass="BlockEncryption" RequirementLevel="REQUIRED" KeyLength="192" IVLength="64" RequiredKey="DESede" JCEName="DESede/CBC/ISO10126Padding"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#aes128-cbc" Description="Block encryption using AES with a key length of 128 bit" AlgorithmClass="BlockEncryption" RequirementLevel="REQUIRED" KeyLength="128" IVLength="128" RequiredKey="AES" JCEName="AES/CBC/ISO10126Padding"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#aes192-cbc" Description="Block encryption using AES with a key length of 192 bit" AlgorithmClass="BlockEncryption" RequirementLevel="OPTIONAL" KeyLength="192" IVLength="128" RequiredKey="AES" JCEName="AES/CBC/ISO10126Padding"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#aes256-cbc" Description="Block encryption using AES with a key length of 256 bit" AlgorithmClass="BlockEncryption" RequirementLevel="REQUIRED" KeyLength="256" IVLength="128" RequiredKey="AES" JCEName="AES/CBC/ISO10126Padding"/> <Algorithm URI="http://www.w3.org/2009/xmlenc11#aes128-gcm" Description="Block encryption using AES with a key length of 128 bit in GCM" AlgorithmClass="BlockEncryption" RequirementLevel="OPTIONAL" KeyLength="128" IVLength="96" RequiredKey="AES" JCEName="AES/GCM/NoPadding"/> <Algorithm URI="http://www.w3.org/2009/xmlenc11#aes192-gcm" Description="Block encryption using AES with a key length of 192 bit in GCM" AlgorithmClass="BlockEncryption" RequirementLevel="OPTIONAL" KeyLength="192" IVLength="96" RequiredKey="AES" JCEName="AES/GCM/NoPadding"/> <Algorithm URI="http://www.w3.org/2009/xmlenc11#aes256-gcm" Description="Block encryption using AES with a key length of 256 bit in GCM" AlgorithmClass="BlockEncryption" RequirementLevel="OPTIONAL" KeyLength="256" IVLength="96" RequiredKey="AES" JCEName="AES/GCM/NoPadding"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#rsa-1_5" Description="Key Transport RSA-v1.5" AlgorithmClass="KeyTransport" RequirementLevel="REQUIRED" RequiredKey="RSA" JCEName="RSA/ECB/PKCS1Padding"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" Description="Key Transport RSA-OAEP" AlgorithmClass="KeyTransport" RequirementLevel="REQUIRED" RequiredKey="RSA" JCEName="RSA/ECB/OAEPWithSHA1AndMGF1Padding"/> <Algorithm URI="http://www.w3.org/2009/xmlenc11#rsa-oaep" Description="Key Transport RSA-OAEP" AlgorithmClass="KeyTransport" RequirementLevel="OPTIONAL" RequiredKey="RSA" JCEName="RSA/ECB/OAEPPadding"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#dh" Description="Key Agreement Diffie-Hellman" AlgorithmClass="KeyAgreement" RequirementLevel="OPTIONAL" RequiredKey="DH" JCEName="DH"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#kw-tripledes" Description="Symmetric Key Wrap using Triple DES" AlgorithmClass="SymmetricKeyWrap" RequirementLevel="REQUIRED" KeyLength="192" RequiredKey="DESede" JCEName="DESedeWrap"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#kw-aes128" Description="Symmetric Key Wrap using AES with a key length of 128 bit" AlgorithmClass="SymmetricKeyWrap" RequirementLevel="REQUIRED" KeyLength="128" RequiredKey="AES" JCEName="AESWrap"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#kw-aes192" Description="Symmetric Key Wrap using AES with a key length of 192 bit" AlgorithmClass="SymmetricKeyWrap" RequirementLevel="OPTIONAL" KeyLength="192" RequiredKey="AES" JCEName="AESWrap"/> <Algorithm URI="http://www.w3.org/2001/04/xmlenc#kw-aes256" Description="Symmetric Key Wrap using AES with a key length of 256 bit" AlgorithmClass="SymmetricKeyWrap" RequirementLevel="REQUIRED" KeyLength="256" RequiredKey="AES" JCEName="AESWrap"/> </JCEAlgorithmMappings> <ResourceResolvers> <Resolver JAVACLASS="org.apache.xml.security.stax.impl.resourceResolvers.ResolverSameDocument" DESCRIPTION="A simple resolver for requests of same-document URIs"/> <Resolver JAVACLASS="org.apache.xml.security.stax.impl.resourceResolvers.ResolverFilesystem" DESCRIPTION="A simple resolver for requests to the local file system"/> <Resolver JAVACLASS="org.apache.xml.security.stax.impl.resourceResolvers.ResolverHttp" DESCRIPTION="A simple resolver for requests to HTTP space"/> <Resolver JAVACLASS="org.apache.xml.security.stax.impl.resourceResolvers.ResolverXPointer" DESCRIPTION="A simple resolver for requests of XPointer fragments"/> </ResourceResolvers> </Configuration>