184 lines
5.7 KiB
HTML
184 lines
5.7 KiB
HTML
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
|
|
<html>
|
||
|
|
<head>
|
||
|
|
<META http-equiv="Content-Type" content="text/html; charset=utf-8">
|
||
|
|
<LINK rel="stylesheet" type="text/css" href="../../../rzahg/ic.css">
|
||
|
|
|
||
|
|
<title>SOAP security files reference</title>
|
||
|
|
</head>
|
||
|
|
|
||
|
|
<BODY>
|
||
|
|
<!-- Java sync-link -->
|
||
|
|
<SCRIPT LANGUAGE="Javascript" SRC="../../../rzahg/synch.js" TYPE="text/javascript"></SCRIPT>
|
||
|
|
|
||
|
|
<h6><A NAME="wsspscrf">SOAP security files reference</A></h6>
|
||
|
|
|
||
|
|
<p>This page provides a reference listing of the files related to implementing SOAP security using the Secure Sockets Layer (SSL) protocol.</p>
|
||
|
|
|
||
|
|
<p><strong>SOAP Security related files</strong></p>
|
||
|
|
|
||
|
|
This table provides a quick reference for SOAP security topics.
|
||
|
|
|
||
|
|
<p><strong>Note:</strong> All path listings are relative to the installation directory, /QIBM/UserData/WebASE/ASE5/<em>instance_name</em>, where <em>instance_name</em> is the root directory of your instance of WebSphere Application Server - Express.</p>
|
||
|
|
|
||
|
|
<table border="1" cellpadding="2" cellspacing="2" title="Misc. SOAP security related files">
|
||
|
|
<!-- cols="65 15 20" width="page" -->
|
||
|
|
<tr>
|
||
|
|
<th>Path</th>
|
||
|
|
<th>Contents</th>
|
||
|
|
<th>Description</th>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/soapsec.war</td>
|
||
|
|
<td>Web-INF, conf, key, log, etc.</td>
|
||
|
|
<td>Home of the soap security servlets</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/soapsec.war/WEB-INF</td>
|
||
|
|
<td>web.xml</td>
|
||
|
|
<td>Modified servlet configuration file for digital signature</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/soapsec.war/conf</td>
|
||
|
|
<td>.config files</td>
|
||
|
|
<td>Configuration files for envelope editors and signature components</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/soapsec.war/key</td>
|
||
|
|
<td>SOAPclient, SOAPserver</td>
|
||
|
|
<td>Keystore files</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/soapsec.war/logs</td>
|
||
|
|
<td>Log files</td>
|
||
|
|
<td>Logs generated during security exchange</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/ServerSamplesCode/src/<em>service_name</em></td>
|
||
|
|
<td>server side samples</td>
|
||
|
|
<td>Source for both the nonsecure and secure samples</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/ClientCode/nt_bat</td>
|
||
|
|
<td>scripts to run client samples</td>
|
||
|
|
<td>Batch files for invoking the client side samples to interact with the server-side services</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/ClientCode/unix_scripts</td>
|
||
|
|
<td>scripts to run client samples</td>
|
||
|
|
<td>Batch files for invoking the client side samples to interact with the server-side services</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/ClientCode/data</td>
|
||
|
|
<td>data files used by samples</td>
|
||
|
|
<td>Windows NT systems only</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/installedApps/soapsamples.ear/ClientCode/src</td>
|
||
|
|
<td>client side samples source</td>
|
||
|
|
<td>UNIX systems only</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>/lib</td>
|
||
|
|
<td>soap.jar, soap-sec.jar, ws-soap-ext.jar</td>
|
||
|
|
<td>Location of all SOAP related JAR files</td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
|
||
|
|
<p><strong>SOAP keystore files</strong></p>
|
||
|
|
|
||
|
|
<p>SOAP certificates are stored in two keystore files, which are described in this table:</p>
|
||
|
|
|
||
|
|
<table border="1" cellspacing="2" cellpadding="2" title="SOAP certificate keystore files">
|
||
|
|
<tr>
|
||
|
|
<th>File name</th>
|
||
|
|
<th>Store password</th>
|
||
|
|
<th>Description</th>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>SOAPserver</td>
|
||
|
|
<td>server</td>
|
||
|
|
<td>This keystore is used by a service provider.</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>SOAPclient</td>
|
||
|
|
<td>client</td>
|
||
|
|
<td>This keystore is used by a service requester.</td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
|
||
|
|
<p>The certificates stored in both the SOAPserver and SOAPclient keystore files are described in this table:</p>
|
||
|
|
|
||
|
|
<table border="1" cellspacing="2" cellpadding="2" title="Certificates stored in both the SOAPserver and SOAPserver keystore files">
|
||
|
|
<tr>
|
||
|
|
<th>Alias</th>
|
||
|
|
<th>Issuer</th>
|
||
|
|
<th>Description</th>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>soapca</td>
|
||
|
|
<td>soapca itself</td>
|
||
|
|
<td>The certificate of the root Certificate Authority (CA) used for testing purposes</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>intca1</td>
|
||
|
|
<td>soapca</td>
|
||
|
|
<td>The certificate of the CA to issue SSL related certificates</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>intca2</td>
|
||
|
|
<td>soapca</td>
|
||
|
|
<td>The certificate of the CA to issue SOAP-DSIG-related certificates</td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
|
||
|
|
<p>These two certificates are stored in the SOAPserver keystore:</p>
|
||
|
|
|
||
|
|
<table border="1" cellpadding="2" cellspacing="2" title="Certificates stored in the SOAPserver keystore">
|
||
|
|
<tr>
|
||
|
|
<th>Alias</th>
|
||
|
|
<th>Issuer</th>
|
||
|
|
<th>Description</th>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>sslserver</td>
|
||
|
|
<td>intca1</td>
|
||
|
|
<td>This is the certificate of the SSL server. This is also stored in the SOAPclient keystore as a trusted certificate. The PKCS12 file including the corresponding private key for this certificate is sslserver.p12.</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>soapprovider</td>
|
||
|
|
<td>intca2</td>
|
||
|
|
<td>This certificate might be used by a service provider to digitally sign its response message. The key password is "server".</td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
|
||
|
|
<p>These three certificates are stored in the SOAPclient keystore:</p>
|
||
|
|
|
||
|
|
<table border="1" cellspacing="2" cellpadding="2" title="Certificates stored in the SOAPclient keystore">
|
||
|
|
<tr>
|
||
|
|
<th> Alias</th>
|
||
|
|
<th>Issuer</th>
|
||
|
|
<th>Description</th>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>sslclient</td>
|
||
|
|
<td>intca1</td>
|
||
|
|
<td>This certificate might be used for the SSL client authentication. The key password is "client".</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>sslserver</td>
|
||
|
|
<td>intca1</td>
|
||
|
|
<td>This is the certificate of the trusted SSL server and the same as the one stored in the SOAPserver keystore. The PKCS12 file, including the corresponding private key for this certificate, is sslserver.p12.</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td>soaprequester</td>
|
||
|
|
<td>intca2</td>
|
||
|
|
<td>This certificate might be used by a service requester to digitally sign its request message. The key password is "client".</td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
</body>
|
||
|
|
</html>
|