PDA

View Full Version : SOAP Encryption



dsmalley
01-23-2008, 06:06 PM
Hi,

I am trying to figure out how to use SOAP encryption with Spring generated web services and proxies. I have looked at and been able to use the example using SOAP headers for authentication (http://forum.springframework.net/showthread.php?t=3976). My problem is I need to encrypt the username/password header sent from the client.

I know one obvious approach in this situation is to use an SSL connection, but for various reasons, I can't do this. It occurs to me that using WSE it should be possible to encrypt the header, but I am at a loss for how to do it with Spring. I know in the nightly drops there are some examples using WSE 2.0SP3, but not WSE 3.0.

Has anyone used the security features of WSE 3.0 with Spring? Any hints or suggestions would be welcome.

Dave

.ben
01-24-2008, 12:09 PM
Haven't used WSE 3.0, but you could also add a soapextension on your client and server to encrypt the soapmessages.