You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@servicemix.apache.org by Zhemzhitsky Sergey <Se...@troika.ru> on 2011/05/19 14:52:55 UTC
ServiceMix CXF Services. Transport security on the per-service basis.
Hi there,
I 'm using the latest version of ServiceMix and its bundled cxf, and I'm wondering is it possible to configure transport level security on the per-service basis.
What I would like to achieve is to have a number of restful services as well as soap services, and each service should have its own configuration of the key and trust stores. Also I would like to configure some of the services to request client certificate authentication.
Is it possible to achieve?
Best Regards,
Sergey Zhemzhitsky
_______________________________________________________
The information contained in this message may be privileged and conf idential and protected from disclosure. If you are not the original intended recipient, you are hereby notified that any review, retransmission, dissemination, or other use of, or taking of any action in reliance upon, this information is prohibited. If you have received this communication in error, please notify the sender immediately by replying to this message and delete it from your computer. Thank you for your cooperation. Troika Dialog, Russia.
If you need assistance please contact our Contact Center (+7495) 258 0500 or go to www.troika.ru/eng/Contacts/system.wbp
RE: ServiceMix CXF Services. Transport security on the per-service
basis.
Posted by Zhemzhitsky Sergey <Se...@troika.ru>.
Hi Freeman,
Thanks a lot for your answer.
Best Regards,
Sergey Zhemzhitsky
-----Original Message-----
From: Freeman Fang [mailto:freeman.fang@gmail.com]
Sent: Thursday, May 19, 2011 5:14 PM
To: users@servicemix.apache.org
Subject: Re: ServiceMix CXF Services. Transport security on the per-service basis.
Hi,
It depends...
As the SSL transport level configuration is per port, so if your services are using cxf http-osgi transport(pax-web underlying), which means it will use same port, then you can't achieve such per-service basis configuration.
However, if your services are using cxf http-jetty transport directly, which means each service can listen on different port, then you can configure different port with different keystore/truststore, from this way, you can achieve kind of per-service configuration.
Freeman
On 2011-5-19, at 下午8:52, Zhemzhitsky Sergey wrote:
> Hi there,
>
> I 'm using the latest version of ServiceMix and its bundled cxf, and
> I'm wondering is it possible to configure transport level security on
> the per-service basis.
>
> What I would like to achieve is to have a number of restful services
> as well as soap services, and each service should have its own
> configuration of the key and trust stores. Also I would like to
> configure some of the services to request client certificate
> authentication.
>
> Is it possible to achieve?
>
>
> Best Regards,
> Sergey Zhemzhitsky
>
>
> _______________________________________________________
>
> The information contained in this message may be privileged and conf
> idential and protected from disclosure. If you are not the original
> intended recipient, you are hereby notified that any review,
> retransmission, dissemination, or other use of, or taking of any
> action in reliance upon, this information is prohibited. If you have
> received this communication in error, please notify the sender
> immediately by replying to this message and delete it from your
> computer. Thank you for your cooperation. Troika Dialog, Russia.
> If you need assistance please contact our Contact Center (+7495)
> 258 0500 or go to www.troika.ru/eng/Contacts/system.wbp
>
---------------------------------------------
Freeman Fang
FuseSource
Email:ffang@fusesource.com
Web: fusesource.com
Twitter: freemanfang
Blog: http://freemanfang.blogspot.com
Connect at CamelOne May 24-26
The Open Source Integration Conference
_______________________________________________________
The information contained in this message may be privileged and conf idential and protected from disclosure. If you are not the original intended recipient, you are hereby notified that any review, retransmission, dissemination, or other use of, or taking of any action in reliance upon, this information is prohibited. If you have received this communication in error, please notify the sender immediately by replying to this message and delete it from your computer. Thank you for your cooperation. Troika Dialog, Russia.
If you need assistance please contact our Contact Center (+7495) 258 0500 or go to www.troika.ru/eng/Contacts/system.wbp
Re: ServiceMix CXF Services. Transport security on the per-service basis.
Posted by Freeman Fang <fr...@gmail.com>.
Hi,
It depends...
As the SSL transport level configuration is per port, so if your
services are using cxf http-osgi transport(pax-web underlying), which
means it will use same port, then you can't achieve such per-service
basis configuration.
However, if your services are using cxf http-jetty transport directly,
which means each service can listen on different port, then you can
configure different port with different keystore/truststore, from this
way, you can achieve kind of per-service configuration.
Freeman
On 2011-5-19, at 下午8:52, Zhemzhitsky Sergey wrote:
> Hi there,
>
> I 'm using the latest version of ServiceMix and its bundled cxf, and
> I'm wondering is it possible to configure transport level security
> on the per-service basis.
>
> What I would like to achieve is to have a number of restful services
> as well as soap services, and each service should have its own
> configuration of the key and trust stores. Also I would like to
> configure some of the services to request client certificate
> authentication.
>
> Is it possible to achieve?
>
>
> Best Regards,
> Sergey Zhemzhitsky
>
>
> _______________________________________________________
>
> The information contained in this message may be privileged and conf
> idential and protected from disclosure. If you are not the original
> intended recipient, you are hereby notified that any review,
> retransmission, dissemination, or other use of, or taking of any
> action in reliance upon, this information is prohibited. If you have
> received this communication in error, please notify the sender
> immediately by replying to this message and delete it from your
> computer. Thank you for your cooperation. Troika Dialog, Russia.
> If you need assistance please contact our Contact Center (+7495)
> 258 0500 or go to www.troika.ru/eng/Contacts/system.wbp
>
---------------------------------------------
Freeman Fang
FuseSource
Email:ffang@fusesource.com
Web: fusesource.com
Twitter: freemanfang
Blog: http://freemanfang.blogspot.com
Connect at CamelOne May 24-26
The Open Source Integration Conference