Before You Begin
This chapter discusses configuring security for your web service and web service client using the WSIT security mechanisms. Some of these mechanisms require some configuration outside of NetBeans IDE. Depending upon which security mechanism you plan to use, some of the following tasks will need to be completed:
- Make sure that you have completed the procedures to install and integrate the prerequisite software for using this release of the Web Services Interoperability Technology software as described at http://java.sun.com/webservices/interop/reference/docs/install.html, or from the Project Tango web site at https://wsit.dev.java.net/.
- If you are using the GlassFish container and message security, you must update the GlassFish keystore and truststore by importing v3 certificates. The procedure for updating the certificates is described in Updating GlassFish Certificates.
- If you are using a security mechanism that requires a user to enter a user name and password, create authorized users for your container. Steps for creating an authorized user for the GlassFish container are described in Adding Users to GlassFish.
- To verify that security is being implemented in your applications, you may with to turn on the HTTP dump options for GlassFish. Steps for doing this are described in Securing the Example Service Application (UA).
- To use a mechanism that uses secure transport (SSL), you must configure the system to point to the client and server keystore and truststore files. Steps for doing this are described in Configuring SSL For Your Applications.
All of the material in The Java™ WSIT Tutorial is copyright-protected and may not be published in other works without express written permission from Sun Microsystems.