Sign and Encrypt SOAP Messages with Apache CXF

Question

Hello,

I'm trying to write a "Secure Hello World" web service using Apache CXF also; I should note that I'm kind of new to Java and WS-* stuff.

Basically, what I want to do is a hello-world web service with soap messages to and from this web service signed and encrypted using x.509 certificate(s).

I have already read the tutorial on Apache CXF site about WS-Security but; I want to use WS-SecurityPolicy instead of Interceptors.

Can anyone point me in the right direction?

Answer 1

Since web services work over HTTP, you can secure them by using the HTTPS protocol.

Here is a resource that can help point you in the right direction: Using JAX-WS-Based Web Services with SSL

While this resource is for JAX-WS, you should find that a lot of it will carry over to Apache CXF.

Cheers.