WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.
WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.
Questions tagged [ws-security]
922 questions
9
votes
1 answer
how to implement ws-security 1.1 in php5
I'm trying to call a webservice with Soap in PHP5, for this, I need to use WS-Security 1.1.
(In java and .NET this is all generated automatically.)
Are there any frameworks available to generate the security headers easily in PHP? Or do I have to…
Sam Segers
- 1,811
- 2
- 21
- 24
8
votes
1 answer
User authentication in SOAP Webservices
I made a question about JAX-WS, Authentication and Authorization - How to?; there was a discussion about security levels, and where to store user credentials.
Now after some conclusions, I want to try one of those scenarios:
SOAP web services -…
lpinto.eu
- 2,047
- 4
- 21
- 45
8
votes
5 answers
How do I build a secure webservice with .Net?
I need to build a simple webservice to get data in and out of a HR System over the Internet (it's a hosted solution). I am using IIS and ASP.Net with .Net 2.0.
Having looked into it, there are several ways of making the webservice secure - I am…
Frans
- 6,818
- 5
- 33
- 53
8
votes
2 answers
load balancing WCF with wsHttpBinding and Message Security with client credentials type windows
We have got a normal WCF service which has a binding that looks like this:
Bravo11
- 848
- 2
- 10
- 23
8
votes
2 answers
Adding SOAP:HEADER username and password with WSE 3.0
I have successfully created a WS client that works correctly when NOT using authentication.
However, the server (WebSphere) now requires adding a ws-security username token, and I'm having a hard time doing this. The resulting SOAP message is…
csl
- 10,108
- 5
- 51
- 86
8
votes
2 answers
With C#, WCF SOAP consumer that uses WSSE plain text authentication?
I have a WCF SOAP consumer that is implemented by Visual Studio 2012 from a WSDL. The WSDL was generated by PeopleTools. The base object is of type System.ServiceModel.ClientBase.
I need the SOAP request to resemble:
Aren Cambre
- 6,027
- 9
- 27
- 33
8
votes
2 answers
Looking for java Library/API for implementing WS-Security for SOAP messages with Attachment(SwA)
I am implementing ebXML3.0 in java and looking for a java library/API I can use for Signing and Encryption of SOAP messages with attachment. Earlier I was using "Apache wss4j" but this seems to only support signing/encryption of SOAP Body (No…
user1842997
- 99
- 4
7
votes
3 answers
Validating a Signature of a SOAP Message
Everybody, Hello!
This is my request message:
Dmitry
- 2,878
- 5
- 41
- 63
7
votes
2 answers
WS-security (usernametoken) for CXF - encrypted passwords possible?
I'm trying to get together with CXF's WS-security implementation(usernametoken). I've done everything as said at http://cxf.apache.org/docs/ws-security.html. My PasswordCallbackHandler seems to be working, but what bothers me is a part:
if…
Jan
- 138
- 1
- 8
7
votes
1 answer
WS-Security not working with CXF
I' am trying to develop a WS-security enabled web service with Apache CXF. Tutorial that I am following is here. Unfortunately I am continuously getting the following error much to chagrin. I' am using Spring framework 3.0.5 and CXF 2.3.3 and also…
nash
- 635
- 4
- 12
- 21
7
votes
1 answer
How to get WS-Security certificate to be accepted by Java application
So I've been struggling with WS-Security for some time now, slowly making progress. First let me briefly describe my setup. I have Java application running in a tomcat, which offers a webservice endpoint (using Spring). I want incoming messages to…
VHristov
- 969
- 1
- 11
- 23
7
votes
1 answer
Creating secure web services with ColdFusion
I created an existing API with web services using ColdFusion that uses inline authentication but I'd like to secure it using some sort of authentication but I'm clueless where to start.
The web services are auto generated by ColdFusion by adding…
petron
- 81
- 6
7
votes
2 answers
Using WSSE plugin for Gsoap in C++/Linux
How can we implement WSSE plugin for Gsoap in C++/Linux ?
This link doesn't give all the information.
The problem is what do I have to include in my header file generated by WSDL , to make it wsse compatible so that soapcpp2 header.h generates…
Aditya Arora
- 79
- 1
- 3
7
votes
2 answers
How to enable debug logging in Apache CXF before encrypting
I already have enabled debug logs for my WS-Client like this
Client client = ClientProxy.getClient(port);
LoggingInInterceptor loggingInInterceptor = new LoggingInInterceptor();
loggingInInterceptor.setPrettyLogging(true);
LoggingOutInterceptor…
Martin Fernau
- 679
- 1
- 5
- 15
7
votes
0 answers
How to consume a Web Service (SOAP 1.1, WS-Security) from C# based on a WSDL?
I have a WSDL for a Web Service (https://facturaelectronica.dian.gov.co/habilitacion/B2BIntegrationEngine/FacturaElectronica/facturaElectronica.wsdl) which specifies that it's SOAP 1.1 and should use WS-Security.
The resulting SOAP Header should be…
Luis Londono
- 71
- 2