<service name="SecureService17">

	<module ref="addressing"/>
	<module ref="rampart"/>

	<parameter locked="false" name="ServiceClass">org.apache.rampart.Service</parameter>

	<operation name="echo">
		<messageReceiver class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
		<actionMapping>urn:echo</actionMapping>
	</operation>

	<wsp:Policy wsu:Id="EncrSupTokens"
	        xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
	        xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
	        xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing"
	        xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
	    <wsp:ExactlyOne>
	        <wsp:All>
	            <sp:SymmetricBinding>
	                <wsp:Policy>
	                    <sp:ProtectionToken>
	                        <wsp:Policy>
	                            <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
	                                <wsp:Policy>
	                                    <sp:RequireThumbprintReference/>
	                                    <sp:WssX509V3Token10/>
	                                </wsp:Policy>
	                            </sp:X509Token>
	                        </wsp:Policy>
	                    </sp:ProtectionToken>
	                    <sp:AlgorithmSuite>
	                        <wsp:Policy>
	                            <sp:Basic256/>
	                        </wsp:Policy>
	                    </sp:AlgorithmSuite>
	                    <sp:Layout>
	                        <wsp:Policy>
	                            <sp:Lax/>
	                        </wsp:Policy>
	                    </sp:Layout>
	                    <sp:OnlySignEntireHeadersAndBody/>
	                </wsp:Policy>
	            </sp:SymmetricBinding>
	            <sp:EncryptedParts>
	                <sp:Body />
	            </sp:EncryptedParts> 
	            <sp:SignedParts>
                    <sp:Body />
                </sp:SignedParts> 
	            <sp:EncryptedSupportingTokens
	                    xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
	                <wsp:Policy>
	                    <sp:UsernameToken
	                            sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient"/>
	                </wsp:Policy>
	            </sp:EncryptedSupportingTokens>
	            <ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy"> 
	                    <ramp:user>bob</ramp:user>
	                    <ramp:encryptionUser>alice</ramp:encryptionUser>
	                    <ramp:passwordCallbackClass>org.apache.rampart.PWCallback</ramp:passwordCallbackClass>
	                    
	                    <ramp:signatureCrypto>
	                        <ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
	                            <ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
	                            <ramp:property name="org.apache.ws.security.crypto.merlin.file">rampart/store.jks</ramp:property>
	                            <ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
	                        </ramp:crypto>
	                    </ramp:signatureCrypto>
	                    <ramp:encryptionCypto>
	                        <ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
	                            <ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</ramp:property>
	                            <ramp:property name="org.apache.ws.security.crypto.merlin.file">rampart/store.jks</ramp:property>
	                            <ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
	                        </ramp:crypto>
	                    </ramp:encryptionCypto>
	               </ramp:RampartConfig>
	        </wsp:All>
	    </wsp:ExactlyOne>
	</wsp:Policy>

</service>