需要一个Java Web服务教程以及如何使Web服务安全

Question

I have a web service that is using:

• Java (familiar)
• SOAP (new to me)
• JBOSS (new to me)

The web service is currently unsecure. My task is to make it secure using https (ssl or tsl).

I am new to web services and web things in general. In the last week have gone through a tone of literature. Much of it which I think was not relevant to my project. I think that I need two things:

• A pretty basic tutorial on web services (java specific)
• A tutorial on making web services secured

Here are some of the tutorials I have gone through already:

SO Answer - In-process SOAP service server for Java

• How to make a web service server.
• Does not have instructions for the client.
• Also does not specify what should happen so I am not certain that I got the propper result when navigating to the URL.

An Introductory Tutorial on Web Services, Java and XML

• Pretty good description of lots of xml things and how messages are passed. Not certain but this seems more low level than what I need

Three Minutes to a Web Service

• Good tutorial but in the second step one of the commands did not work.
• I think that this may be because the tutorial is really old and maybe my jdk is differnt or something like that..

Answer 1

You can check out these frameworks

Apache axis

Apache cxf

Answer 2

The web service is currently unsecure. My task is to make it secure using https (ssl or tsl).

If it's just about (one-way) SSL, then this question doesn't have much to do with web services actually. It's more a web server or app server configuration issue. For JBoss, see SSLSetup or, if you are using Apache for the SSL encryption, see Apache SSL/TLS Encryption .

Answer 3

I would guess that you need to look at JBoss's documentation for how they handle security. Maybe this would help:

Chapter 8. Security on JBoss