How to use WS-Security with EJB3 ?

Question

Hi,

For one of our projects, I should be able to call a webservice that uses WS-Security, i.e. the SOAP request should be signed with an X.509 certificate. I've been doing some tests to call the webservice through the use of the WebServiceRef annotation and I'm able to call the webservice without WS-Security.

So my question is: how can I activate and/or configure WS-Security when using the WebServiceRef annotation ?

Regards, Stefan Lecho.

Answer 1

If it still relevant, have a look at WSIT, and in particular, its WS-Security implementation described here. Basically you just have to use @WebServiceRef as you usually do, provide a wsit-client.xml, and specify the proper <Policy> node.

You might find these useful:

• Implementing WS-Security with public key certificates for Metro-based web services
• Configuring Keystores and Truststores