ws-security

Creating a SOAP Header with WS-Addressing and WS-Security from scratch

I am sending out a SOAP message from a windows service to an http endpoint (regular aspx page that will just accept the whole SOAP envelope). The overall operation is async, the actual response comes back at a later time. The nature of the setup (aspx page receiving message) means I cannot have a service reference in my project. The SOA...

Implement security token exchange in WS-Security in PHP

I am trying to communicate with a web service that is developed by .NET, and I am writing my client in PHP. One of the headache right now, is generating the SignatureValue and for SignedInfo. <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"&gt; <SignedInfo> <CanonicalizationMethod Algorithm="http://www....

Best Approch for Generic Authentication Framework

Hi We have got multiple application that uses different way of authetication to authenticate user. Almost all application are developed in WPF but there are few application which are developed in ASP.NET and Silverlight. Our ultimate goal is that every application that we had developed already and those we develop in future will use a ...

Securing webservice with certificates in weblogic server

I'm recently facing an issue with web service security. the basic requirement is that, the client code doesn't want to use username token to authenticate the user, they want to use certificates. (some big companies have password policies and certificates live longer) There are multiple users calling the service and different client will...

Securing webservice with certificates in weblogic server

I'm recently facing an issue with web service security. the basic requirement is that, the client code doesn't want to use username token to authenticate the user, they want to use certificates. (some big companies have password policies and certificates live longer) There are multiple users calling the service and different client will...

Can't connect to SSL web service with WS-Security using PHP SOAP extension - certificate, complex WSDL

Using the PHP5 SOAP extension I have been unable to connect to a web service having an https endpoint, with client certificate and using WS-Security, although I can connect using soapUI with the exact same wsdl and client certificate, and obtain the normal response to the request. There is no HTTP authentication and no proxy is involved....

Certificate Authentication by WS-security

Hello everyone. I'm trying to implement authentication by certificate in web service. According to Spring ws-security manual it can be implemented by adding BinarySecurityToken to the SOAP message, like: <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://nxp.com/oum/xsd" xmlns:ds="http://www.w3...