如何在第三方（例如银行）发送和接收Spring Ws的证书？ [英] How to send and receive certificates in Spring Ws with a third party such as Bank?

问题描述

我正在使用Spring MVC 4 Rest但是现在因为我需要使用Web服务我决定使用Spring Ws和Appache Tomcat7服务器，我正在尝试连接到第三方，这是一个Bank Api我必须实现互助身份验证是双向SSL以便发送我的肥皂请求

I am using Spring MVC 4 Rest but now as i need to consume a web service i decided to use Spring Ws with Appache Tomcat7 server and I am trying to connect to a third party that is a Bank Api I have to achieve mutual authentication that is two way SSL in order to send my Soap Requests

1. 如果证书放在信任库和密钥库中
   分别在spring ws然后尝试连接到https
   服务器时，验证和发送证书会自动发生
   吗？


2. 要遵循的步骤或步骤是什么？配置我的Spring Ws应用程序通过https使用Web服务？


3. 如果验证和发送没有自动完成，那么在发送soap请求之前如何发送和验证
   证书使用Spring ws？

推荐答案

Spring WS安全性通过 WebServiceTemplate 。有两种安全机制，SUN的XML和Web服务安全（XWSS）通过XwsSecurityInterceptor和Apache的WSS4J到Wss4jSecurityInterceptor。这些只是扩展点，因此您可以自定义所有安全需求，包括身份验证，签名，验证，加密和解密。

Spring WS security provides support via WebServiceTemplate. There are two kinds of security mechanism, SUN's XML and Web Services Security(XWSS) through XwsSecurityInterceptor and Apache's WSS4J throughWss4jSecurityInterceptor. These are just extension points, so you can customize all your security needs ranging from authentication, signing, validation, encryption and decryption.

还请检查我关于密钥库和信任库的答案设置您的其他问题。

Please also check my answer regarding keystores and truststore set up to your other question.

此处有更多内容 XwsSecurityInterceptor 和 Wss4jSecurityInterceptor 。

这篇关于如何在第三方（例如银行）发送和接收Spring Ws的证书？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！