Web Service Security with TLS

[Sumeet Chakraborty]

Hi All

Can anyone help me to understand the steps to implement Transport Layer Security (Handshake) in a web service application ? I think I should implement this code in my JAX-RPC program, but I am not getting how to do this. Please help.

Thanks

[Christian Nicoll]

Hi Sumeet,

I'm not very familiar with JAX-RPC but I would assume that you can build there a webservice from a servlet base, perhaps also form an EJB. If you use the servlet approach then you 'll have a deployment descriptor, the web.xml.

In this xml-file you can configure transport layer security by specifing a transport-guarantee tag:

<security-constraint>
      ...
      <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
      ...
</security-constraint>

Best regards,
Christian