Web Service Implements an Operation Protected by SSL Authentication

In this example, a server implements a service that requires SSL Authentication. This example assumes that you have deployed a BPEL project with a BPEL process which implements a service that requires SSL authentication.

Results

The service receives the expected SOAP Message through HTTP after verifying the security credentials.

Main Scenario

1. A web service client invokes an In-Only abstract operation that is implemented by a BPEL process. This operation has a concrete HTTP SOAP binding, so the client must use HTTP protocol to properly invoke the operation.

2. The binding component institutes the SSL hand shake and establishes secure communication with the client.

3. The binding component receives the HTTP message and parses out the SSL Authentication security information.

4. The binding component verifies the security information using known SSL certificates.

5. The binding component creates a normalized message and sends it to the Normalized Message Router.

6. A BPEL process processes the abstract message and returns a status message of either Done or ERROR.