Win a copy of Practical SVG this week in the HTML/CSS/JavaScript forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic

Security and Webservice

 
Volker Bohn
Greenhorn
Posts: 7
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi all,
I have develop a webservice which communicate sensitive data with the client.
So i need the posibility to secure the connection between the WS and the client.
Is it possible to use SSL to solve the problem??
Are there any "standarts" which I can use?
Best Regards
Volker
 
William Brogden
Author and all-around good cowpoke
Rancher
Posts: 13078
6
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
LOTS of work on SOAP / XML messaging security is underway - here are some references I have run into recently..
http://www-106.ibm.com/developerworks/webservices/library/ws-soapsec/
http://msdn.microsoft.com/ws/2001/10/Security/
http://www.w3.org/TR/xmldsig-core/ <- secure signing of mst
http://www.w3.org/TR/xmlenc-core/ <- encryption of XML msg
Bill
 
Will Peacock
Greenhorn
Posts: 4
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
hi volker,
i've just done the same thing.
[url]http://xml.apache.org/soap/docs/install/FAQ_Tomcat_SOAP_SSL.html[url]
this walks you through, so should get you up and running.
will
 
Kyle Brown
author
Ranch Hand
Posts: 3892
5
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Actually, Bill's reference to the SOAP-SEC proposal has been superceded by the WS-Security standard jointly proposed by Microsoft and IBM.
WS-Security is demonstrated in the latest version of the IBM Web Services Toolkit.
Kyle
 
Jim Baiter
Ranch Hand
Posts: 532
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
There are some java specific activities as well. See:
http://jcp.org/jsr/detail/155.jsp
&
http://jcp.org/jsr/detail/183.jsp
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!