How to expose ESB as a webservice with SOAP over https.

[eravisankar1984]

Hi All,

In quickstarts i found a way to expose esb service as a webservice using SOAP over http but

I have a requirement of expoing esb service as a webservice using SOAP over https.

Please help if anybody has already worked on it.

Thanks,

Ravi

[eravisankar1984]

I have tried adding the below parameters to server.xml (in ‘\jboss-soa-p-5\jboss-as\server\default\deploy\jbossweb.sar’). We are using the sample key store and trust store generated

by ‘webservice_proxy_security´ example in ‘\samples\quickstarts\’.

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"

               maxThreads="150" scheme="https" secure="true"

               clientAuth="false" sslProtocol="TLS"

               keyAlias="webservice_proxy_security"

               keystoreFile="D:/Jboss_SOA_1/jboss-soa-p-5/jboss-as/samples/quickstarts/webservice_proxy_security/build/webservice_proxy_security.keystore"

               keystorePass="webservice_proxy_security_pass"

               truststoreFile="D:/Jboss_SOA_1/jboss-soa-p-5/jboss-as/samples/quickstarts/webservice_proxy_security/build/webservice_proxy_security.keystore"

               truststorePass="webservice_proxy_security_pass"

               />

      <Engine name="jboss.web" defaultHost="localhost">

but still the endpoint is created on http protocol.  . Kindly provide information on exposing Jboss ESB Service as webservice (SOAP over HTTPs) and samples if any.

Thanks,

Ravi

[mageshbk]

Hi Ravi,

What you did was the right thing to do to expose HTTPS for JBossWeb. EBWS does support HTTPS. The contract page however have an issue with listing the contracts with HTTPS protocols and the soap:address does not get transformed as such, when accessed with the https urls. But if you access the same endpoints with the HTTPS urls they still will work. I have created a JIRA here to handle this annoying issue:

https://issues.jboss.org/browse/JBESB-3814

[eravisankar1984]

Hi Magesh,

Thanks for the response.

I am able to access the end point with https like https://loalhost:8443/wsAdapter/ebws/webServiceConsumeCat1/webServiceConsume1

But it is working like a normal http url. When i try to invoke the web service from soapUI its not prompting for any authentication or any certs.

where as If i expose a jboss simple web service with below security contraints in web.xml

<security-constraint>
  <display-name>webservice_proxy_security</display-name>
  <web-resource-collection>
   <web-resource-name>webservice_proxy_security</web-resource-name>
   <url-pattern>/*</url-pattern>
  </web-resource-collection>
   <auth-constraint>
   <role-name>friend</role-name>
  </auth-constraint>
<user-data-constraint>
   <transport-guarantee>CONFIDENTIAL</transport-guarantee>
  </user-data-constraint>
</security-constraint>
  <login-config>
  <auth-method>BASIC</auth-method>
  <realm-name>webservice_proxy_security</realm-name>
</login-config>
  <security-role>
  <role-name>friend</role-name>
</security-role>

The wsdl is created with end point as https://locahost:8443/../.. and in soap UI it prompts for authentication.

Is there any way i can include/do the similar configuration in ESB service.

Thanks,

Ravi

[mageshbk]

Hi Ravi,

Unfortunately HTTP authentication is not possible with EBWS. Would you like to try SOAPProcessor instead?

https://issues.jboss.org/browse/JBESB-1991

[eravisankar1984]

Thanks Magesh, the actual requirement is to expose an esb as webservice using soap over https and as per my understanding I need to use  Jboss ws to use a SOAPProcessor.

I need EBWS over HTTPS to solve the requirement. I would be checking the JIRA for updates on it.

Thanks,

Ravi