You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-user@axis.apache.org by Arulazi D <ar...@india.hp.com> on 2002/11/18 07:22:59 UTC
SOAP over SMTP
Hi
Does any body have worked with SOAP over SMTPTransport?
Any pointers to the samples would be really helpful.
Thanks,
Arul
Re: SOAP over SMTP
Posted by Steve Loughran <st...@iseran.com>.
----- Original Message -----
From: "Jason Essington" <ja...@GreenRiverComputing.com>
To: <ax...@xml.apache.org>
Sent: Monday, November 18, 2002 1:26 PM
Subject: Re: SOAP over SMTP
> yup, read that (SOAP 1.2 Email Binding).
I've looked at, but it was kind of a hard read.
> I see the samples/security stuff, Is that what you mean by "Axis
> already supports that", or are there premade handlers for signature
> verification and authentication?
I think all there is is the samples - I believe, but note also that there is
a nightly axis-security build, and so could be wrong
Re: SOAP over SMTP
Posted by Jason Essington <ja...@GreenRiverComputing.com>.
On Monday, November 18, 2002, at 01:10 PM, Steve Loughran wrote:
>>
>> I am curious if their is already an effort to implement XML-Security
>> into AXIS in a transport agnostic sort of way?
>
> The starting place would seem to be the SOAP1.2 SOAP over SMTP spec,
> and the
> WS-I stuff on WS-Security. Essentially a SOAP message can be signed and
> encrypted regardless of transport, and Axis already supports that when
> built
> with xml-security. SMTP transport should just hand off those details
> to axis
> itself
yup, read that (SOAP 1.2 Email Binding).
I see the samples/security stuff, Is that what you mean by "Axis
already supports that", or are there premade handlers for signature
verification and authentication?
-jason
Re: SOAP over SMTP
Posted by Steve Loughran <st...@iseran.com>.
----- Original Message -----
From: "Jason Essington" <ja...@GreenRiverComputing.com>
To: <ax...@xml.apache.org>
Sent: Monday, November 18, 2002 11:48 AM
Subject: Re: SOAP over SMTP
> Licenses, especially the open source type confuse me :-/
closed source licenses dont have any incorporation policies so there is
simplicity in not being able to do things. Axis uses the BSD 'do what you
like' license, GPL mandates open source forever, and the two are not
compatible. GPL code cant be brought into the Axis codebase, though there is
nothing to stop you adding it on afterwards.
> As I am currently the only author of these classes I don't suppose that
> would be a problem.
not yet...
>
> >
> > Otherwise, when you are ready, come onto axis-dev and start discussing
> > it.
> > I'd quite like SMTP support where the server could actually poll a POP3
> > mailbox for messages as well as hook into things like James or other
> > mail
> > systems. If we do it that way you dont need integral SMTP in your web
> > service, you just need to configure it to fetch mail from somewhere
> > using
> > the mailapi.
> >
>
> This is pretty much exactly what I am currently doing. The email
> details are handled by the javamail api. An email session (with default
> store and transport) is looked up in jndi.
>
> Really the difficult part about an email transport is
> authenticating(and optionally securing) the message. HTTP is easy there
> is basic or digest authentication and security can be had by using
> HTTPS, but none of this is possible via email (SMTP). So, I have
> figured that authentication and security (encryption) could be handled
> with the help of the apache XML-Security library. I am still working
> out the details, but I think if it is done properly, messages sent via
> email could be at least as secure as messages traveling via HTTPS.
>
> I am curious if their is already an effort to implement XML-Security
> into AXIS in a transport agnostic sort of way?
The starting place would seem to be the SOAP1.2 SOAP over SMTP spec, and the
WS-I stuff on WS-Security. Essentially a SOAP message can be signed and
encrypted regardless of transport, and Axis already supports that when built
with xml-security. SMTP transport should just hand off those details to axis
itself
Re: SOAP over SMTP
Posted by Jason Essington <ja...@GreenRiverComputing.com>.
Steve
I have continued this thread from the axis-user list here because this
seems a more appropriate forum.
On Monday, November 18, 2002, at 12:21 PM, Steve Loughran wrote:
>
> ----- Original Message -----
> From: "Jason Essington" <ja...@GreenRiverComputing.com>
> To: <ax...@xml.apache.org>
> Sent: Monday, November 18, 2002 11:04 AM
> Subject: Re: SOAP over SMTP
>
>
>> Steve
>>
>> Some of the handlers could be easily made a part of axis, but the
>> MBean
>> that actually checks the email is fairly jboss specific, and it
>> depends
>> on the JBoss' mail service. also the authentication (xml digital
>> signature) is somewhat JBossSX bound.
>>
>> I certainly need to have this functionality in the client portion as
>> well, but I took the more familiar (to me) route to get a server
>> working.
>>
>> Hopefully as I gain a more complete understanding of how all the parts
>> work together I will be able to decouple some of the JBoss specific
>> stuff.
>
> Its always easier to start from where you know. isolating how messages
> get
> into the system (or out) from how the SMTP transport's mail state is
> managed
> would be a good thing.
>
>>
>> It would certainly be nice to have an email transport as an integral
>> part of axis, If you or anyone else can make suggestions on how to
>> convert the jboss bound parts I will gladly write some code.
>
> well, for a start we cant put GPL code into axis, so you'd need to
> release
> it on both.
Licenses, especially the open source type confuse me :-/
As I am currently the only author of these classes I don't suppose that
would be a problem.
>
> Otherwise, when you are ready, come onto axis-dev and start discussing
> it.
> I'd quite like SMTP support where the server could actually poll a POP3
> mailbox for messages as well as hook into things like James or other
> mail
> systems. If we do it that way you dont need integral SMTP in your web
> service, you just need to configure it to fetch mail from somewhere
> using
> the mailapi.
>
This is pretty much exactly what I am currently doing. The email
details are handled by the javamail api. An email session (with default
store and transport) is looked up in jndi.
Really the difficult part about an email transport is
authenticating(and optionally securing) the message. HTTP is easy there
is basic or digest authentication and security can be had by using
HTTPS, but none of this is possible via email (SMTP). So, I have
figured that authentication and security (encryption) could be handled
with the help of the apache XML-Security library. I am still working
out the details, but I think if it is done properly, messages sent via
email could be at least as secure as messages traveling via HTTPS.
I am curious if their is already an effort to implement XML-Security
into AXIS in a transport agnostic sort of way?
-jason
Re: SOAP over SMTP
Posted by Steve Loughran <st...@iseran.com>.
----- Original Message -----
From: "Jason Essington" <ja...@GreenRiverComputing.com>
To: <ax...@xml.apache.org>
Sent: Monday, November 18, 2002 11:04 AM
Subject: Re: SOAP over SMTP
> Steve
>
> Some of the handlers could be easily made a part of axis, but the MBean
> that actually checks the email is fairly jboss specific, and it depends
> on the JBoss' mail service. also the authentication (xml digital
> signature) is somewhat JBossSX bound.
>
> I certainly need to have this functionality in the client portion as
> well, but I took the more familiar (to me) route to get a server
> working.
>
> Hopefully as I gain a more complete understanding of how all the parts
> work together I will be able to decouple some of the JBoss specific
> stuff.
Its always easier to start from where you know. isolating how messages get
into the system (or out) from how the SMTP transport's mail state is managed
would be a good thing.
>
> It would certainly be nice to have an email transport as an integral
> part of axis, If you or anyone else can make suggestions on how to
> convert the jboss bound parts I will gladly write some code.
well, for a start we cant put GPL code into axis, so you'd need to release
it on both.
Otherwise, when you are ready, come onto axis-dev and start discussing it.
I'd quite like SMTP support where the server could actually poll a POP3
mailbox for messages as well as hook into things like James or other mail
systems. If we do it that way you dont need integral SMTP in your web
service, you just need to configure it to fetch mail from somewhere using
the mailapi.
Re: SOAP over SMTP
Posted by Jason Essington <ja...@GreenRiverComputing.com>.
Steve
Some of the handlers could be easily made a part of axis, but the MBean
that actually checks the email is fairly jboss specific, and it depends
on the JBoss' mail service. also the authentication (xml digital
signature) is somewhat JBossSX bound.
I certainly need to have this functionality in the client portion as
well, but I took the more familiar (to me) route to get a server
working.
Hopefully as I gain a more complete understanding of how all the parts
work together I will be able to decouple some of the JBoss specific
stuff.
It would certainly be nice to have an email transport as an integral
part of axis, If you or anyone else can make suggestions on how to
convert the jboss bound parts I will gladly write some code.
-jason
On Monday, November 18, 2002, at 11:43 AM, Steve Loughran wrote:
>
> ----- Original Message -----
> From: "Jason Essington" <ja...@GreenRiverComputing.com>
> To: <ax...@xml.apache.org>
> Sent: Monday, November 18, 2002 7:07 AM
> Subject: Re: SOAP over SMTP
>
>
>> Hi Arul
>>
>> I am trying to build an email transport into jboss.net (the axis in
>> JBoss). There is already some code in cvs
>> (http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/jboss/contrib/
>> jboss.net/src/main/org/jboss/net/axis/mail/) the code that is there is
>> rather rough so far. I have to have message verification and
>> authentication via xml digital signatures working soon as well.
>>
>> There are certainly huge gaps in this implementation as of yet. For
>> instance there isn't a way to send SOAP messages via email.
>>
>> I could use comments / code from people who are interested in an email
>> transport or xml security (digital signatures and encryption) for
>> SOAP.
>
> Jason,
>
> why are you adding this to jboss rather than Axis itself? It would be
> a lot
> better in Axis as then the clients would all support it too...
Re: SOAP over SMTP
Posted by Steve Loughran <st...@iseran.com>.
----- Original Message -----
From: "Jason Essington" <ja...@GreenRiverComputing.com>
To: <ax...@xml.apache.org>
Sent: Monday, November 18, 2002 7:07 AM
Subject: Re: SOAP over SMTP
> Hi Arul
>
> I am trying to build an email transport into jboss.net (the axis in
> JBoss). There is already some code in cvs
> (http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/jboss/contrib/
> jboss.net/src/main/org/jboss/net/axis/mail/) the code that is there is
> rather rough so far. I have to have message verification and
> authentication via xml digital signatures working soon as well.
>
> There are certainly huge gaps in this implementation as of yet. For
> instance there isn't a way to send SOAP messages via email.
>
> I could use comments / code from people who are interested in an email
> transport or xml security (digital signatures and encryption) for SOAP.
Jason,
why are you adding this to jboss rather than Axis itself? It would be a lot
better in Axis as then the clients would all support it too...
Re: SOAP over SMTP
Posted by Jason Essington <ja...@GreenRiverComputing.com>.
Hi Arul
I am trying to build an email transport into jboss.net (the axis in
JBoss). There is already some code in cvs
(http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/jboss/contrib/
jboss.net/src/main/org/jboss/net/axis/mail/) the code that is there is
rather rough so far. I have to have message verification and
authentication via xml digital signatures working soon as well.
There are certainly huge gaps in this implementation as of yet. For
instance there isn't a way to send SOAP messages via email.
I could use comments / code from people who are interested in an email
transport or xml security (digital signatures and encryption) for SOAP.
Thanks
-jason
On Sunday, November 17, 2002, at 11:22 PM, Arulazi D wrote:
> Hi
> Does any body have worked with SOAP over SMTPTransport?
> Any pointers to the samples would be really helpful.
>
> Thanks,
> Arul