<service name="SecureService14">

	<module ref="addressing"/>
	<module ref="rampart"/>

	<parameter locked="false" name="ServiceClass">org.apache.rampart.Service</parameter>

	<operation name="echo">
		<messageReceiver class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
		<actionMapping>urn:echo</actionMapping>
	</operation>

	<wsp:Policy wsu:Id="MutualCertificate11Sign_IPingService_policy"
	            xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
	            xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
	            xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing">
	    <wsp:ExactlyOne>
	        <wsp:All>
	                <sp:SymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
	                    <wsp:Policy>
	                        <sp:ProtectionToken>
	                            <wsp:Policy>
	                                <sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
	                                    <wsp:Policy>
	                                        <sp:RequireThumbprintReference/> 
	                                        <sp:WssX509V3Token10/>
	                                    </wsp:Policy>
	                                </sp:X509Token>
	                            </wsp:Policy>
	                        </sp:ProtectionToken>
	                        <sp:AlgorithmSuite>
	                            <wsp:Policy>
	                                <sp:Basic256/>
	                            </wsp:Policy>
	                        </sp:AlgorithmSuite>
	                        <sp:Layout>
	                            <wsp:Policy>
	                                <sp:Strict/>
	                            </wsp:Policy>
	                        </sp:Layout>
	                        <sp:IncludeTimestamp/>
	                        <sp:OnlySignEntireHeadersAndBody/>
	                    </wsp:Policy>
	                </sp:SymmetricBinding>
	                <sp:EndorsingSupportingTokens xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
	                    <wsp:Policy>
	                        <sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
	                            <wsp:Policy>
	                                <sp:RequireThumbprintReference/>
	                                <sp:WssX509V3Token10/>
	                            </wsp:Policy>
	                        </sp:X509Token>
	                    </wsp:Policy>
	                </sp:EndorsingSupportingTokens>
	                <sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
	                    <sp:Body/>
	                    <sp:Header Name="To" Namespace="http://schemas.xmlsoap.org/ws/2004/08/addressing"/>
	                    <sp:Header Name="From" Namespace="http://schemas.xmlsoap.org/ws/2004/08/addressing"/>
	                    <sp:Header Name="FaultTo" Namespace="http://schemas.xmlsoap.org/ws/2004/08/addressing"/>
	                    <sp:Header Name="ReplyTo" Namespace="http://schemas.xmlsoap.org/ws/2004/08/addressing"/>
	                    <sp:Header Name="MessageID" Namespace="http://schemas.xmlsoap.org/ws/2004/08/addressing"/>
	                    <sp:Header Name="RelatesTo" Namespace="http://schemas.xmlsoap.org/ws/2004/08/addressing"/>
	                    <sp:Header Name="Action" Namespace="http://schemas.xmlsoap.org/ws/2004/08/addressing"/>
	                </sp:SignedParts>
	               <sp:Wss11 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
	                    <wsp:Policy>
	                        <sp:MustSupportRefKeyIdentifier/>
	                        <sp:MustSupportRefIssuerSerial/>
	                        <sp:MustSupportRefThumbprint/>
	                        <sp:MustSupportRefEncryptedKey/>
	                        <sp:RequireSignatureConfirmation/>
	                    </wsp:Policy>
	                </sp:Wss11> 
	                <sp:Trust10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
	                    <wsp:Policy>
	                        <sp:MustSupportIssuedTokens/>
	                        <sp:RequireClientEntropy/>
	                        <sp:RequireServerEntropy/>
	                    </wsp:Policy>
	                </sp:Trust10>
					<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy"> 
						<ramp:user>alice</ramp:user>
						<ramp:encryptionUser>bob</ramp:encryptionUser>
						<ramp:passwordCallbackClass>org.apache.rampart.PWCallback</ramp:passwordCallbackClass>
						
						<ramp:signatureCrypto>
							<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
								<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
								<ramp:property name="org.apache.ws.security.crypto.merlin.file">rampart/store.jks</ramp:property>
								<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
							</ramp:crypto>
						</ramp:signatureCrypto>
						<ramp:encryptionCypto>
							<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
								<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
								<ramp:property name="org.apache.ws.security.crypto.merlin.file">rampart/store.jks</ramp:property>
								<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
							</ramp:crypto>
						</ramp:encryptionCypto>
					</ramp:RampartConfig>
	        </wsp:All>
	    </wsp:ExactlyOne>
	</wsp:Policy>

</service>