| Author |
Message
|
| jayasai |
 Posted: Mon Jul 10, 2006 10:19 am Post subject: WMB and WebService - Mutual Authentication over SSL |
 |
|
Newbie
Joined: 10 Jul 2006
Posts: 3
|
Does WMBv6.0.1 support the mutual authentication using Digital Certificates and SSL?
Here is what I am looking for:
HttpRequest -> WebService
WMB should push the Digital Certificate to get authenticated by the server. Can WMB do it?
Right now I configured WMB to authenticate the server identity by importing its certificate into WMB truststore.
Thanks
Sai
_________________
IBM WPS/WBI Middleware Consultant |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Mon Jul 10, 2006 2:31 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
|
| Back to top |
|
|
| jayasai |
| Posted: Mon Jul 10, 2006 5:19 pm Post subject: |
|
|
Newbie
Joined: 10 Jul 2006
Posts: 3
|
Thanks the response.
I used the specified URL to configure the HttpRequest node to communicate over SSL.
But what I am looking for is an extension to it, where in WMB on behalf of HttpRequest node should push the Digital Certificate to the WebService Provider (i.e WAS) as part of Client-Server mutual Authentication.
Thanks
Sai
_________________
IBM WPS/WBI Middleware Consultant |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Jul 11, 2006 2:34 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
I haven't heard of it being done. That doesn't mean it can't be done.
You could certainly configure a proxy server and have it handle the mutual authentication - and in my opinion you should configure a proxy server. Broker should sit fairly deep in the corporate network, and not sit in the DMZ or act like it's in the DMZ.
Otherwise, you can open a PMR and ask for specific instructions on configuring this or spend a good bit more time digging through the Info Center and the properties of the HTTPRequest node.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| jayasai |
| Posted: Tue Jul 11, 2006 6:13 am Post subject: |
|
|
Newbie
Joined: 10 Jul 2006
Posts: 3
|
Thanks Jeff for the response. I also feel setting the Proxy Server would be the right direction for this.
Thanks
Sai
_________________
IBM WPS/WBI Middleware Consultant |
|
| Back to top |
|
|
|
|
