Webservice security.

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

jens Jensen - 31 Mar 2006 15:36 GMT

Hello,

I need to require client authentication via X509 certs for my web service.

My web service will just do xml over http . No Soap.

How can i configure my web service to require exchange of certificates with
clients as opposed to server authentications.

Many thanks i advance
JJ

Reply to this Message

Josh Twist - 02 Apr 2006 16:32 GMT

Hi Jens,

I hate to reply to a post like this, but

> "My web service will just do xml over http . No Soap"

then, IMHO, it's not really a web service.

If you can make the leap to using Soap then you could use WSE which is
a free set of extensions for web services from Microsoft:

http://msdn.microsoft.com/webservices/webservices/building/wse/default.aspx
http://channel9.msdn.com/showpost.aspx?postid=161110

I hope that helps.

Josh
http://www.thejoyofcode.com/

Reply to this Message

jens Jensen - 02 Apr 2006 21:26 GMT

I'm more precisely intereoprating with IBM integration server which i'm told
will accept http post. I'm specifically required to use http post to
exchange messages with the IBM end.

I cant therefore wrap my packet into soap.

They IBM end requires client authentification with know CAs.

Sorry if you are not familar with this scenario.

JJ

Reply to this Message

Josh Twist - 02 Apr 2006 16:59 GMT

Hi Jens,

I hate to reply to a post like this, but

> "My web service will just do xml over http . No Soap"

Reply to this Message

Rate this thread:

Webservice security.

Free Magazines