xml-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sam Ruby" <ru...@us.ibm.com>
Subject Axis and security (was: Forrest Layout 1.4)
Date Sun, 06 Jan 2002 10:59:25 GMT
Note: I'm cross posting to Axis dev.  Please continue the discussion there.

Christian Geuer-Pollmann wrote:
> I'm not an Apache SOAP/AXIS user, so it was hard for me to play around with
> these tools. I asked soap-user and soap-dev how I can directly access the
> soap message as a DOM tree to add a SOAP-SECURITY signature. Unfortunately
> no response. I want to add an example to xml-security how a SOAP message
> can be signed and this signature can be verified according to [1]. If there
> is someone out there who can show me how to create a simple SOAP msg using
> AXIS and how I can modify the resulting DOM tree, I'll provide this
> example. The only thing that stopped me was installing tomcat and all these
> things.



While the installation documents are written assuming you will be
targetting a servlet engine:


... you can develop and debug using your classpath and a standalone


Note: while this is enough to get you started, the real problem to be
solved is a bit more involved.  See http://www.w3.org/TR/SOAP-dsig/ .  What
you probably want to do is to define a handler.  An existing handler that
treats the message as a whole can be found at:


And while to choses to get the message as a string, you can also call the
getAsDOM method on the SOAPEnvelope:


If you would like to see what the finished result would look like, see:


- Sam Ruby

In case of troubles, e-mail:     webmaster@xml.apache.org
To unsubscribe, e-mail:          general-unsubscribe@xml.apache.org
For additional commands, e-mail: general-help@xml.apache.org

View raw message