ejb-3.0 - How to use WS-Security with EJB3?

Question

For one of our projects, I should be able to call a webservice that uses WS-Security, i.e. the SOAP request should be signed with an X.509 certificate. I've been doing some tests to call the webservice through the use of the WebServiceRef annotation and I'm able to call the webservice without WS-Security.

So my question is: how can I activate and/or configure WS-Security when using the WebServiceRef annotation ?

Regards, Stefan Lecho.

Answer 1

如果它仍然相关，请查看WSIT，尤其是此处描述的 WS-Security 实现。基本上，您只需像往常一样使用@WebServiceRef，提供一个wsit-client.xml，并指定正确的<Policy> 节点。

您可能会发现这些很有用：

• 使用基于 Metro 的 Web 服务的公钥证书实现 WS-Security
• 配置密钥库和信任库