WS Security for outbound calls (in references)

[jachym.culka]

Greetings,

Is it possible to have promoted reference in SY that is bound to secured webservice (SOAP binding)? There are several quickstarts (demo/policy-security-*) showing that it can be done with SY acting as WS provider, but not as WS consumer. I'm interested in both WS-Authentication (with client certificates) and signing SOAP messages. If this is possible OOTB in SY (using standard SY SOAP binding), could you point me to any quickstarts or code snippets related to this?

Thanks

JC

[trohovsky]

Hi Jachym,

AFAIK WS Security is not provided on references OOTB. You can add WS Security on outbound calls with some effort by your own - directly in the implementation (bean/Camel), in the message composer or in the interceptor. See the following thread: How to get ws-security working for a soap-reference-binding (client, consumer).

Edit: It seems that OOTB support for WS Security can by configured in cxf.xml, it was provided by resolving of [SWITCHYARD-2049] Add Spring support for SOAP Component - JBoss Issue Tracker

Tomas

[jachym.culka]

Hi Tomas,

thanks for your quick reply, unfortunately we are stuck with 1.1.1-p5 version and we won't upgrade to 2.0.0 anytime soon, but workaround(s) in the referenced thread looks promising so I'll give it a try.

JC