Need a java webservice tutorial and how to make a web service secure

Question

I have a web service that is using:

• Java (familiar)
• SOAP (new to me)
• JBOSS (new to me)

The web service is currently unsecure. My task is to make it secure using https (ssl or tsl).

I am new to web services and web things in general. In the last week have gone through a tone of literature. Much of it which I think was not relevant to my project. I think that I need two things:

• A pretty basic tutorial on web services (java specific)
• A tutorial on making web services secured

Here are some of the tutorials I have gone through already:

http://stackoverflow.com/questions/1792737/in-process-soap-service-server-for-java/1793112#1793112

• How to make a web service server.
• Does not have instructions for the client.
• Also does not specify what should happen so I am not certain that I got the propper result when navigating to the URL.

http://www.informit.com/articles/article.aspx?p=27308&seqNum=7

• Pretty good description of lots of xml things and how messages are passed. Not certain but this seems more low level than what I need

http://www.artima.com/lejava/articles/threeminutes.html

• Good tutorial but in the second step one of the commands did not work.
• I think that this may be because the tutorial is really old and maybe my jdk is differnt or something like that..

Answer 1

I would guess that you need to look at JBoss's documentation for how they handle security. Maybe this would help.

Answer 2

You can check out these frameworks

Apache axis

Apache cxf

Answer 3

The web service is currently unsecure. My task is to make it secure using https (ssl or tsl).

If it's just about (one-way) SSL, then this question doesn't have much to do with web services actually. It's more a web server or app server configuration issue. For JBoss, see SSLSetup or, if you are using Apache for the SSL encryption, see Apache SSL/TLS Encryption.