Question

Advice needed on a published WS-Security compliant webservice

0

For a customer, we have to implement a published WS-Security compliant webservice, including encryption (EncryptedKeySHA1) and signing. Has anyone succesfully implemented this into a Mendix 5 (or 6) project? How much is supported by Mendix and what part has to been done in custom Java actions, eg. decrytion of Cipher Values. Any advice or guidelines would be much appreciated, thanks in advance!

asked 2016-12-05

Luuk de Bakker

1 answers

Kilian Croese · Answer 1 · 2016-12-05

Hi Luuk,

WS-Security is not supported in the platform. If you want to do this, you will have to implement it yourself using Java. I've tried to consume WS-Security services in the past. In the end it was easier (and possible) to change the service so that they use 2-way SSL.