Win a copy of 97 Things Every Java Programmer Should Know this week in the Java in General forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Paul Clapham
  • Jeanne Boyarsky
  • Junilu Lacar
  • Henry Wong
Sheriffs:
  • Ron McLeod
  • Devaka Cooray
  • Tim Cooke
Saloon Keepers:
  • Tim Moores
  • Stephan van Hulst
  • Frits Walraven
  • Tim Holloway
  • Carey Brown
Bartenders:
  • Piet Souris
  • salvin francis
  • fred rosenberger

WSS in applet

 
Ranch Hand
Posts: 32
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Dear fellow ranchers,

For a particular use case where I need real end-to-end security I am calling an external webservice. I mocked the webservice on my machine on another port (without security requirements). I am able to call the webservice (without any web service security implemented) as I signed my jar.

The problem is that I need to implement WSS to get the request signed in order to call the 'real' webservice. I am wondering how this could be done, bearing in mind that my applet should not get too large as it is an applet - so preferably without using any frameworks. Any body has any resources or experience on this? I'm not really sure what would be the best approach to get this started.

Thanks a lot!
B.

 
Rancher
Posts: 1337
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
So this is a SOAP web service for which the XML is generated "by hand", meaning, without any framework? If you only want to use username/password authentication, then you can probably generate the appropriate SOAP headers in the same, but if you're talking about signature or encryption, then I can't imagine doing it without the help of the http://ws.apache.org/wss4j/ library.
 
Bram Maes
Ranch Hand
Posts: 32
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi Lester,

Thanks for the quick reply!

I actually do need a signature with the corresponding certificate added to the request. I already checked the wss4j lib, but the I also need xalan, log4j, ... and the appletsize would be at least about 10MB - I would like to avoid this if possible. I would need a very lightweight framework with no dependencies

 
Think of how stupid the average person is. And how half of them are stupider than that. But who reads this tiny ad?
Devious Experiments for a Truly Passive Greenhouse!
https://www.kickstarter.com/projects/paulwheaton/greenhouse-1
    Bookmark Topic Watch Topic
  • New Topic