<?xml version="1.0" encoding="ASCII"?>
<!--
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 * 
 *   http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.    
-->
<sca:definitions xmlns="http://www.osoa.org/xmlns/sca/1.0"
 			targetNamespace="http://www.osoa.org/xmlns/sca/1.0"
 			xmlns:sca="http://www.osoa.org/xmlns/sca/1.0"
 			xmlns:tuscany="http://tuscany.apache.org/xmlns/sca/1.0">

 <sca:intent name="soap"  
 			 constrains="sca:binding.ws">
 			 <sca:description>
 			 Communitcation thro this binding requires SOAP 
 			 </sca:description>
 </sca:intent>

 <sca:intent name="soap11"  
 			 constrains="sca:binding.ws">
 			 <sca:description>
 			 Communitcation thro this binding requires SOAP 1.1
 			 </sca:description>
 </sca:intent>

 <sca:intent name="soap12"  
 			 constrains="sca:binding.ws">
 			 <sca:description>
 			 Communitcation thro this binding requires SOAP 1.2
 			 </sca:description>
 </sca:intent>
 
 <sca:intent name="authentication" 
 			 constrains="sca:binding.ws">
 			 <description>
 			 Communitcation thro this binding required Authentication.
 			 </description>
 </sca:intent>
 
 <sca:intent name="wsAuthentication" 
 			 constrains="sca:binding.ws">
 			 <description>
 			 Communitcation thro this binding required Authentication.
 			 </description>
 </sca:intent>	
 
 <sca:intent name="integrity" 
 			 constrains="sca:binding.ws">
 			 <description>
 			 	Protect messages from unauthorized reading or modification
 			 </description>
 </sca:intent>
 
  <sca:intent name="confidentiality" 
 			 constrains="sca:binding.ws">
 			 <description>
 			 	Communitcation thro this binding must prevent
	 			 unauthorized users from reading the messages.
 			 </description>
 </sca:intent>
 
 <!-- WS Security POLICY SETS -->
  <sca:policySet name="wsAuthenticationPolicy"
 	provides="authentication"
 	appliesTo="sca:binding.ws"
 	>
 	<tuscany:wsConfigParam>
 		<parameter name="InflowSecurity">
 			<action>
 				<items>UsernameToken</items>
 				<passwordCallbackClass>org.apache.tuscany.sca.binding.ws.axis2.itests.policy.configparams.ServerPWCBHandler</passwordCallbackClass>
       		</action>
      	</parameter>
 	</tuscany:wsConfigParam>
 </sca:policySet>
 
 <sca:policySet name="wsClientAuthenticationPolicy"
 	provides="wsAuthentication"
 	appliesTo="sca:binding.ws">
 	<tuscany:wsConfigParam>
 		<parameter name="OutflowSecurity">
 			<action>
 				<items>UsernameToken</items>
 				<user>TuscanyWsUser</user>
				<passwordCallbackClass>org.apache.tuscany.sca.binding.ws.axis2.itests.policy.configparams.ClientPWCBHandler</passwordCallbackClass>" +
                <passwordType>PasswordText</passwordType>
               </action>
    	</parameter>
 	</tuscany:wsConfigParam>
 </sca:policySet>
 
 <!-- A policyset that uses WS Policy -->
 <sca:policySet name="wsSecurityPolicyForAuthentication"
 	provides="authentication"
 	appliesTo="sca:binding.ws"
 	>
 	<wsp:Policy wsu:Id="UTOverTransport" 
 		xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" 
 		xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
		<wsp:ExactlyOne>
		  <wsp:All>
 		 	<sp:SignedSupportingTokens xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
				<wsp:Policy>
					<sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient" />
				</wsp:Policy>
			</sp:SignedSupportingTokens>
			
			<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy"> 
				<ramp:user>TuscanyWsUser</ramp:user>
				<ramp:passwordType>PasswordText</ramp:passwordType>
				<ramp:passwordCallbackClass>org.apache.tuscany.sca.binding.ws.axis2.itests.policy.wspolicy.ClientPWCBHandler</ramp:passwordCallbackClass>
			</ramp:RampartConfig>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
 </sca:policySet>
 
 <sca:policySet name="wsIntegrityPolicy"
 	provides="integrity"
 	appliesTo="sca:binding.ws">
 	<tuscany:wsConfigParam>
 		<parameter name="InflowSecurity">
		    <action>
		        <items>Timestamp Signature</items>
		        <signaturePropFile>org/apache/tuscany/sca/binding/ws/axis2/itests/policy/configparams/security.properties</signaturePropFile>
		    </action>
		</parameter>
 		<parameter name="OutflowSecurity">
      		<action>
        		<items>Timestamp Signature</items>
        		<user>TuscanyWsUser</user>
        		<signaturePropFile>org/apache/tuscany/sca/binding/ws/axis2/itests/policy/configparams/security.properties</signaturePropFile>
        		<passwordCallbackClass>org.apache.tuscany.sca.binding.ws.axis2.itests.policy.configparams.IntegrityPWCBHandler</passwordCallbackClass>" +
        		<signatureKeyIdentifier>DirectReference</signatureKeyIdentifier>
      		</action>
    	</parameter>
 	</tuscany:wsConfigParam>
 </sca:policySet>

 <!-- A policyset that uses WS Policy --> 
 <sca:policySet name="wsSecurityPolicyForIntegrity"
 	provides="integrity"
 	appliesTo="sca:binding.ws">
 	<wsp:Policy wsu:Id="SignOnly" 
 		xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" 
 		xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
		<wsp:ExactlyOne>
			<wsp:All>
				<sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
					<wsp:Policy>
						<sp:InitiatorToken>
							<wsp:Policy>
								<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
									<wsp:Policy>
										<sp:WssX509V3Token10/>
									</wsp:Policy>
								</sp:X509Token>
							</wsp:Policy>
						</sp:InitiatorToken>
						<sp:RecipientToken>
							<wsp:Policy>
								<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
									<wsp:Policy>
										<sp:WssX509V3Token10/>
									</wsp:Policy>
								</sp:X509Token>
							</wsp:Policy>
						</sp:RecipientToken>
						<sp:AlgorithmSuite>
							<wsp:Policy>
								<sp:TripleDesRsa15/>
							</wsp:Policy>
						</sp:AlgorithmSuite>
						<sp:Layout>
							<wsp:Policy>
								<sp:Strict/>
							</wsp:Policy>
						</sp:Layout>
						<sp:IncludeTimestamp/>
						<sp:OnlySignEntireHeadersAndBody/>
					</wsp:Policy>
				</sp:AsymmetricBinding>
				<sp:Wss10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
					<wsp:Policy>
						<sp:MustSupportRefKeyIdentifier/>
						<sp:MustSupportRefIssuerSerial/>
					</wsp:Policy>
				</sp:Wss10>
				<sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
					<sp:Body/>
				</sp:SignedParts>
	
				<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy"> 
					<ramp:user>TuscanyWsUser</ramp:user>
					<ramp:encryptionUser>TuscanyWsUser</ramp:encryptionUser>
					<ramp:passwordCallbackClass>org.apache.tuscany.sca.binding.ws.axis2.itests.policy.wspolicy.IntegrityPWCBHandler</ramp:passwordCallbackClass>
					
					<ramp:signatureCrypto>
						<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
							<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
							<ramp:property name="org.apache.ws.security.crypto.merlin.file">org/apache/tuscany/sca/binding/ws/axis2/itests/policy/wspolicy/tuscanyKeys.jks</ramp:property>
							<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">TuscanyWsUserPasswd</ramp:property>
						</ramp:crypto>
					</ramp:signatureCrypto>
				</ramp:RampartConfig>
	
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
 </sca:policySet>
 
 <sca:policySet name="wsConfidentialityPolicy"
 	provides="confidentiality"
 	appliesTo="sca:binding.ws">
 	<tuscany:wsConfigParam>
 		<parameter name="InflowSecurity">
      		<action>
        		<items>Timestamp Signature Encrypt</items>
        		<passwordCallbackClass>org.apache.tuscany.sca.binding.ws.axis2.itests.policy.configparams.IntegrityPWCBHandler</passwordCallbackClass>
        		<signaturePropFile>org/apache/tuscany/sca/binding/ws/axis2/itests/policy/configparams/security.properties</signaturePropFile>
      		</action>
    	</parameter>
 		<parameter name="OutflowSecurity">
      		<action>
        		<items>Timestamp Signature Encrypt</items>
        		<user>TuscanyWsUser</user>
        		<encryptionUser>TuscanyWsUser</encryptionUser>
        		<passwordCallbackClass>org.apache.tuscany.sca.binding.ws.axis2.itests.policy.configparams.IntegrityPWCBHandler</passwordCallbackClass>
        		<signaturePropFile>org/apache/tuscany/sca/binding/ws/axis2/itests/policy/configparams/security.properties</signaturePropFile>
      			<signatureKeyIdentifier>DirectReference</signatureKeyIdentifier>
      			<encryptionKeyIdentifier>SKIKeyIdentifier</encryptionKeyIdentifier>
	      </action>
    	</parameter>
 	</tuscany:wsConfigParam>
 </sca:policySet>
 
  <!-- A policyset that uses WS Policy -->
 <sca:policySet name="wsSecurityPolicyForConfidentiality"
 	provides="confidentiality"
 	appliesTo="sca:binding.ws">
 	<wsp:Policy wsu:Id="SigEncr" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
	<wsp:ExactlyOne>
		<wsp:All>
			<sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
				<wsp:Policy>
					<sp:InitiatorToken>
						<wsp:Policy>
							<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
								<wsp:Policy>
									<sp:WssX509V3Token10/>
								</wsp:Policy>
							</sp:X509Token>
						</wsp:Policy>
					</sp:InitiatorToken>
					<sp:RecipientToken>
						<wsp:Policy>
							<sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
								<wsp:Policy>
									<sp:WssX509V3Token10/>
								</wsp:Policy>
							</sp:X509Token>
						</wsp:Policy>
					</sp:RecipientToken>
					<sp:AlgorithmSuite>
						<wsp:Policy>
							<sp:TripleDesRsa15/>
						</wsp:Policy>
					</sp:AlgorithmSuite>
					<sp:Layout>
						<wsp:Policy>
							<sp:Strict/>
						</wsp:Policy>
					</sp:Layout>
					<sp:IncludeTimestamp/>
					<sp:OnlySignEntireHeadersAndBody/>
				</wsp:Policy>
			</sp:AsymmetricBinding>
			<sp:Wss10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
				<wsp:Policy>
					<sp:MustSupportRefKeyIdentifier/>
					<sp:MustSupportRefIssuerSerial/>
				</wsp:Policy>
			</sp:Wss10>
			<sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
				<sp:Body/>
			</sp:SignedParts>
			<sp:EncryptedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
				<sp:Body/>
			</sp:EncryptedParts>

			<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy"> 
				<ramp:user>TuscanyWsUser</ramp:user>
				<ramp:encryptionUser>TuscanyWsUser</ramp:encryptionUser>
				<ramp:passwordCallbackClass>org.apache.tuscany.sca.binding.ws.axis2.itests.policy.wspolicy.IntegrityPWCBHandler</ramp:passwordCallbackClass>
				<ramp:signatureCrypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">org/apache/tuscany/sca/binding/ws/axis2/itests/policy/wspolicy/tuscanyKeys.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">TuscanyWsUserPasswd</ramp:property>
					</ramp:crypto>
				</ramp:signatureCrypto>
				
				<ramp:encryptionCypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">org/apache/tuscany/sca/binding/ws/axis2/itests/policy/wspolicy/tuscanyKeys.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">TuscanyWsUserPasswd</ramp:property>
					</ramp:crypto>
				</ramp:encryptionCypto>
			</ramp:RampartConfig>

		</wsp:All>
	</wsp:ExactlyOne>
</wsp:Policy>
 </sca:policySet>
 
 </sca:definitions>