Questions tagged [ws-security]

WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.

WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.

939 questions
6
votes
0 answers

Sign SOAP call with X509Certificate in .Net Core

Help sign the SOAP call. Connected Service (wsdl) was added to the project. There is a pfx certificate available. In the old implementation of the .Net Framework, this worked as (Microsoft.Web.Services3): var svc = new…
6
votes
2 answers

How to add ws-security header in .net core?

I'm trying to make a call to a webservice and want to manually add the ws-security headers into the request because .net core 2.2 currently does not support ws-security. I have created my custom security header class: public class SoapSecurityHeader…
Ricardo Reais
  • 61
  • 1
  • 1
  • 5
6
votes
2 answers

Apache CXF WS Security WebService from NET Client - Cannot resolve KeyInfo for unwrapping key

I need to connect my NET Framework 4 Client App, to a Webservice, deployed on a Apache CXF, with WS Security. That service is out of my control. The service is added to the project as a "Service Reference". This is the…
Morcilla de Arroz
  • 2,104
  • 22
  • 29
6
votes
2 answers

How can I add namespace declarations in a SOAPEnvelope

In my soap application, I'm using apache cxf. Here's my code which will submit data to the server. import org.apache.cxf.Bus; import org.apache.cxf.BusFactory; import org.apache.cxf.bus.spring.SpringBusFactory; import…
The Coder
  • 2,562
  • 5
  • 33
  • 62
6
votes
2 answers

Calling a soap webservice from java with nonce in security headers

I am trying to call a webservice from java. This is basically not that difficult, except that the webservice expects some security in the form of a username and password and a nonce. When I try to call the webservice from SoapUi, I see that the raw…
ErikL
  • 2,031
  • 6
  • 34
  • 57
6
votes
1 answer

UsernameToken WS-Security with Apache CXF Annotations (WSS4J)

I'm trying to create a "java first" webservice that will use plain and simple UsernameToken WS-Security. I've attempted to follow the examples from CXF. When I query my wsdl I see no mention of anything ws-security related. I'm using CXF 2.7.5 and…
aCodeMonkey
  • 360
  • 1
  • 6
  • 16
6
votes
1 answer

Difference between WS Security Mechanisms

What advantages are there between implementing SOAP messages over SSL by modifying the web.xml/ejb-jar.xml VS modifying the WSDL with a WS-Policy? Our project can acheive its goal of having our clients (ourselves) access the Web Service over a…
MikeG
  • 1,205
  • 12
  • 19
5
votes
1 answer

SOAP 1.2 over SSL + HTTP basic authentication or WS-Security?

So I'll be the first to admit I know little of WS-Security internals. I've got a SOAP service factory as below. When using this service with internal test-only .NET clients (using the autogenerated .cs proxy class via svcutil.exe + auto-generated…
DeepSpace101
  • 13,110
  • 9
  • 77
  • 127
5
votes
2 answers

web services - username token - Error on verifying message against security policy Error code:1000

I am trying to call a web service that has username token configured in the wsdl:
cristina vlaicu
  • 51
  • 1
  • 1
  • 2
5
votes
1 answer

using axis2 ramaprt module with own security framework

I have webservice (server-side) implemented using axis2 in my project. We want to enable WS-security in the existing web services. We are evaluating if apache ramapart module fits our need. Here is our requirement: Basically we have in-house…
ag112
  • 5,537
  • 2
  • 23
  • 42
5
votes
4 answers

Where can I find some good WS-Security introductions and tutorials?

Can anyone point me to some decent introductions to WS-Security? I'm looking for tutorials or something that provide a fairly gentle introduction to the subject, though I don't mind if it assumes basic knowledge of web services and SOAP. Most of the…
jammycakes
  • 5,780
  • 2
  • 40
  • 49
5
votes
3 answers

What is the best way to secure SOAP web service on an internal private network

Today's there is more and more web services developed for internal use to connect applications together. We do not have an ESB to control and secure this web services so I guess on what is a good way to secure them. We have try to setup Two-Way SSL…
5
votes
1 answer

How to generate UsernameToken for WS-Security?

I have some web service (wrote in Java) and I need create client for it in .NET. The WebService has WS-Security and need PasswordDigest. First of all, I've tested it in SoapUI and it's works for: POST…
1_bug
  • 5,505
  • 4
  • 50
  • 58
5
votes
0 answers

Consume SOAP WS-Security with Node or PHP

I'm trying to consume a SOAP WS-Security service using Node and the request must to have a summary structure like:
5
votes
1 answer

Using WS-Security with JAX-WS

Let's pretend all I have is emacs. I want to implement a web service that uses WS-Security with JAX-WS. Does anyone know of a good example of implementing a client that does not rely on tools like Netbeans? Thanks
Tom Condon
  • 139
  • 1
  • 1
  • 4