334

Message Level Web Service Security

Code Example 7.14

Embedding a Digital Signature in an SOAP Message

This XML document shows the SOAP envelope containing the message body

for the purchase order details and the message header, with the digital signature

for the message. The security portion of the header, which is part of the SOAP

message itself, includes or references all the information necessary to describe

and validate the signature details and artifacts, including:

  Information specifying the security token, which is an X.509 certificate asso 

ciated with the message. This information is enclosed within the 

wsse:BinarySecurityToken

element.

  A description of the signature algorithm and its details, enclosed within the 

ds:Signature

element.

  References to the signed message body elements. This is shown in the 

element and associated attribute, which refer 
ences the body of this message.
  The signature value itself, which is inside the 
ds:SignatureValue
element.
  Information about the key or keys used for signing, enclosed with the 
ds:KeyInfo
element. In this case the keys are from the associated X.509 
certificate.
Since the message level security specifications are still evolving, the details in
this example may change. Regardless, the example does highlight how to associ 
ate security information with a particular SOAP message and include the security
information as part of the message itself. As message level security JSRs and
specifications finalize and are incorporated in the J2EE platform, the correspond 
ing Java APIs and the J2EE containers will hide many of these details from the
application developer. 
7.4.3.1
Using Message Level Security Mechanisms
How can you make use of these emerging technologies and Java API implementa 
tions as they become available? There are two ways to approach this problem:












  
 
 

        
 
 
  

    

      

      
 Home 
      | About Us | Network 
      | Services | Support 
      | FAQ | Control Panel 
      | Order Online |
      Sitemap | Contact
      
 
    
  
  

Our web partners:
Inexpensive 
Web Hosting 



Java Web Hosting


personal webspace


webspace php 


linux webhost
 


 html web templates




DreamweaverQuality Web Templates


PSD Web Templates
 



cheap webhost


j2ee web Hosting


buy webspace


ftp webspace


adult webspace
 



frontpage WebHosting


webspace hosting


cheap webhost
Visionwebhosting.net Business web hosting division of Vision Web Hosting Inc.. All rights reserved

aol web hosting