334
Message Level Web Service Security
Code Example 7.14
Embedding a Digital Signature in an SOAP Message
This XML document shows the SOAP envelope containing the message body
for the purchase order details and the message header, with the digital signature
for the message. The security portion of the header, which is part of the SOAP
message itself, includes or references all the information necessary to describe
and validate the signature details and artifacts, including:
  Information specifying the security token, which is an X.509 certificate asso 
ciated with the message. This information is enclosed within the 
wsse:BinarySecurityToken
element.
  A description of the signature algorithm and its details, enclosed within the 
ds:Signature
element.
  References to the signed message body elements. This is shown in the 
element and associated attribute, which refer 
ences the body of this message.
  The signature value itself, which is inside the 
ds:SignatureValue
element.
  Information about the key or keys used for signing, enclosed with the 
ds:KeyInfo
element. In this case the keys are from the associated X.509 
certificate.
Since the message level security specifications are still evolving, the details in
this example may change. Regardless, the example does highlight how to associ 
ate security information with a particular SOAP message and include the security
information as part of the message itself. As message level security JSRs and
specifications finalize and are incorporated in the J2EE platform, the correspond 
ing Java APIs and the J2EE containers will hide many of these details from the
application developer. 
7.4.3.1
Using Message Level Security Mechanisms
How can you make use of these emerging technologies and Java API implementa 
tions as they become available? There are two ways to approach this problem:






footer




 

 

 

 

 Home | About Us | Network | Services | Support | FAQ | Control Panel | Order Online | Sitemap | Contact

 

Our web partners: Inexpensive Web Hosting Java Web Hosting personal webspace webspace php  linux webhost

 html web templates DreamweaverQuality Web Templates PSD Web Templates

cheap webhost j2ee web Hosting buy webspace ftp webspace adult webspace

frontpage WebHosting webspace hosting cheap webhost

Visionwebhosting.net Business web hosting division of Vision Web Hosting Inc.. All rights reserved

aol web hosting