WS-Security X.509 Certificate Token

SOAP Web Service Tutorials - Herong's Tutorial Examples

∟WS-Security X.509 Certificate Token

This chapter provides tutorial examples and notes on WS-Security X.509 Certificate Token. Topics include introduction of WS-Security X.509 Certificate Token specification; XML signature and encryption specifications; private-public key pair and self-signed certificates; Using X.509 certificate token with SoapUI; generating XML signature and encryption with X.509 certificate token.

These sections are omitted from this Web preview version. To view the full content, see information on how to obtain the full version this book.

What Is WS-Security X.509 Certificate Token Profile

What Is XML Signature Syntax and Processing

Generating a Self-Signed Certificate with "keytool"

SoapUI Configuration for Messaging Signing

Generating Digital Signature with SoapUI

Validating ds:Signature with X.509 Certificate

Digital Signature Options Supported in SoapUI

What Is XML Encryption Syntax and Processing

SoapUI Configuration for Messaging Encryption

"not an RSA key" - Encryption Failed in SoapUI

Encryption using RSA Public Key with SoapUI

2-Step Message Encryption - Symmetric and RSA

Decrypting Encrypted SOAP Message

Message Encryption Options Supported in SoapUI

Takeaways:

"WS-Security X.509 Certificate Token Profile" specifies how X.509 certificates should be use with "WS-Security" standard for SOAP message signature and encryption.
"WS-Security" introduces "wsse:BinarySecurityToken" sub element to pass X.509 certificates in SOAP messages.
JDK "keytool" command can be used to generate private-public key pair and self-signed X.509 certificates.
SoapUI is a nice tool for testing SOAP messages with X.509 certificate tokens.
SoapUI can generate SOAP request messages signed with sender's private key and with sender's X.509 certificates included as a "wsse:BinarySecurityToken" element.
SoapUI can generate SOAP request messages encrypted by a randomly generated secret key, which is encrypted by the receiver's public key.
SoapUI only supports RSA keys for SOAP message encryption.