Web Services

Tags

    HistoryEdited Jun 22, 2010 2:20 PM by rennie_j…

    Client Certificate Authentication

    For additional security some web services required Client Certificate Authentication.


    You will need the following files:


    1) The Client will need to create a Public / Private key pair to be used for this authentication. We support the PEM key format. If you are working with DER keys there are number of tools to convert them to PEM . Your Web Service provider will be able to provide instructions on how to create the Key pair you will need.

    2) A certificate is created that includes the user public key. This process is usually managed by the service provider.

    To establish a connection using Client Certificate Authentication.


    To make connections to a Web Service that requires Client Certificate Authentication you will need to set the following preferences. For details on these functions see the chapter on Setting Preferences.


    {wsdl/domain:}client_certificate=certificate path
    {wsdl/domain:}client_key=key file path
    {wsdl/domain:}client_key_password=key file password
    Depending on how you created your Key you may not need a password.

    Behind the scenes, the Web Service Plugin handle the following for you when making a request:
    • The client sends the user certificate (which includes the user's public key) to the server.
    • The server uses the CA certificate to check that the user's certificate is valid.
    • The server uses the user certificate to check from its mapping file(s) whether login is allowed or not.
    • Finally, if connection is allowed, the server makes sure that the user has a valid private key by using a challenge.

    Comments

    /groups/ws/search/index.rss?tag=hotlist/groups/ws/search/?tag=hotWhat’s HotHotListHot!?tag=hot0/groups/ws/sidebar/HotListNo items tagged with hot.hot/groups/ws/search/index.rss?sort=modifiedDate&kind=all&sortDirection=reverse&excludePages=wiki/welcomelist/groups/ws/search/?sort=modifiedDate&kind=all&sortDirection=reverse&excludePages=wiki/welcomeRecent ChangesRecentChangesListUpdates?sort=modifiedDate&kind=all&sortDirection=reverse&excludePages=wiki/welcome0/groups/ws/sidebar/RecentChangesListmodifiedDateallRecent ChangesRecentChangesListUpdateswiki/welcomeNo recent changes.reverse5search