Skip to Content
author's profile photo Former Member
0
Former Member

Web Service Security

Posted on Jul 12, 2004 at 07:14 PM 15 Views

Hi,

I am using SAP Web AS 6.40. I want to call a web service that is implemented by an EJB in the SAP J2EE engine.

I want this service to be secured by Digital Signatures (WS Security) .

The client of the Web Service is running on IBM Websphere.

In the documentation, I see that WS Security is only supported on deployable web service proxies. Does this mean that if I generate a client using IBM's web service tools and deploy it on websphere, it will not work ?

Do you have to enable HTTPS in order to use digital signatures to authenticate the client of a web service ?

Thank you.

Thierry

Message was edited by: Thierry Dagnino

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

1 Answer

  • author's profile photo Former Member
    Former Member
    Posted on Jul 21, 2004 at 09:17 PM
    0

    If you need to enable signature for a web service invocation, you need to do some security processing on the client side as well as server side. If you take deployable web service proxy (the corresponding app is deployed on J2EE engine), it can use the WS Security functionality on the J2EE engine itself. If you use standalone proxy, you are on your own to create signatures. So in your case, if you use websphere based web service client, you need to use the local WS Security functionality to create signature.

    On the Web service side, it should not matter, where the SOAP call is coming from given you have the correct configuration.

    HTTPS and digital signatures can be used independently.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.