Here is the client side web service schema. You can see from the bottom of the file, the request is to use both key file and certificate file
<?xml version="1.0" encoding="UTF-8" ?>
- <!-- Published by JAX-WS RI at
http://jax-ws.dev.java.net. RI's version is JAX-WS RI 2.1.5-hudson-$BUILD_NUMBER-.
-->
- <!-- Generated by JAX-WS RI at
http://jax-ws.dev.java.net. RI's version is JAX-WS RI 2.1.5-hudson-$BUILD_NUMBER-.
-->
- <definitions xmlns:wsu="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:soap="
http://schemas.xmlsoap.org/wsdl/soap/" xmlns:tns="
http://external.webServices.frontEnd.services.bio.gsl.sita.aero/" xmlns:xsd="
http://www.w3.org/2001/XMLSchema" xmlns="
http://schemas.xmlsoap.org/wsdl/" targetNamespace="
http://external.webServices.frontEnd.services.bio.gsl.sita.aero/" name="BiothenticateWebServiceService" xmlns:wsp="
http://www.w3.org/ns/ws-policy" xmlns:sc="
http://schemas.sun.com/2006/03/wss/client" xmlns:wspp="
http://java.sun.com/xml/ns/wsit/policy">- <types>
- <xsd:schema>
<xsd:import namespace="
http://external.webServices.frontEnd.services.bio.gsl.sita.aero/" schemaLocation="https://localhost/biothenticateWebSvc/BiothenticateWebService?xsd=1" />
</xsd:schema>
</types>
- <message name="find">
<part name="parameters" element="tns:find" />
</message>
- <message name="findResponse">
<part name="parameters" element="tns:findResponse" />
</message>
- <message name="ExternalException">
<part name="fault" element="tns:ExternalException" />
</message>
- <message name="merge">
<part name="parameters" element="tns:merge" />
</message>
- <message name="mergeResponse">
<part name="parameters" element="tns:mergeResponse" />
</message>
- <message name="verify">
<part name="parameters" element="tns:verify" />
</message>
- <message name="verifyResponse">
<part name="parameters" element="tns:verifyResponse" />
</message>
- <message name="getDelegate">
<part name="parameters" element="tns:getDelegate" />
</message>
- <message name="getDelegateResponse">
<part name="parameters" element="tns:getDelegateResponse" />
</message>
- <message name="updateStatus">
<part name="parameters" element="tns:updateStatus" />
</message>
- <message name="updateStatusResponse">
<part name="parameters" element="tns:updateStatusResponse" />
</message>
- <message name="checkStatus">
<part name="parameters" element="tns:checkStatus" />
</message>
- <message name="checkStatusResponse">
<part name="parameters" element="tns:checkStatusResponse" />
</message>
- <message name="identify">
<part name="parameters" element="tns:identify" />
</message>
- <message name="identifyResponse">
<part name="parameters" element="tns:identifyResponse" />
</message>
- <message name="enroll">
<part name="parameters" element="tns:enroll" />
</message>
- <message name="enrollResponse">
<part name="parameters" element="tns:enrollResponse" />
</message>
- <message name="enrollAsync">
<part name="parameters" element="tns:enrollAsync" />
</message>
- <message name="enrollAsyncResponse">
<part name="parameters" element="tns:enrollAsyncResponse" />
</message>
- <message name="getMoreInfo">
<part name="parameters" element="tns:getMoreInfo" />
</message>
- <message name="getMoreInfoResponse">
<part name="parameters" element="tns:getMoreInfoResponse" />
</message>
- <portType name="BiothenticateWebService">
- <operation name="find">
<input message="tns:find" />
<output message="tns:findResponse" />
<fault message="tns:ExternalException" name="ExternalException" />
</operation>
- <operation name="merge">
<input message="tns:merge" />
<output message="tns:mergeResponse" />
<fault message="tns:ExternalException" name="ExternalException" />
</operation>
- <operation name="verify">
<input message="tns:verify" />
<output message="tns:verifyResponse" />
<fault message="tns:ExternalException" name="ExternalException" />
</operation>
- <operation name="getDelegate">
<input message="tns:getDelegate" />
<output message="tns:getDelegateResponse" />
</operation>
- <operation name="updateStatus">
<input message="tns:updateStatus" />
<output message="tns:updateStatusResponse" />
<fault message="tns:ExternalException" name="ExternalException" />
</operation>
- <operation name="checkStatus">
<input message="tns:checkStatus" />
<output message="tns:checkStatusResponse" />
<fault message="tns:ExternalException" name="ExternalException" />
</operation>
- <operation name="identify">
<input message="tns:identify" />
<output message="tns:identifyResponse" />
<fault message="tns:ExternalException" name="ExternalException" />
</operation>
- <operation name="enroll">
<input message="tns:enroll" />
<output message="tns:enrollResponse" />
<fault message="tns:ExternalException" name="ExternalException" />
</operation>
- <operation name="enrollAsync">
<input message="tns:enrollAsync" />
<output message="tns:enrollAsyncResponse" />
<fault message="tns:ExternalException" name="ExternalException" />
</operation>
- <operation name="getMoreInfo">
<input message="tns:getMoreInfo" />
<output message="tns:getMoreInfoResponse" />
<fault message="tns:ExternalException" name="ExternalException" />
</operation>
</portType>
- <binding name="BiothenticateWebServicePortBinding" type="tns:BiothenticateWebService">
<wsp:PolicyReference URI="#BiothenticateWebServicePortBindingPolicy" />
<soap:binding transport="
http://schemas.xmlsoap.org/soap/http" style="document" />
- <operation name="find">
<soap:operation soapAction="find" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
- <fault name="ExternalException">
<soap:fault name="ExternalException" use="literal" />
</fault>
</operation>
- <operation name="merge">
<soap:operation soapAction="merge" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
- <fault name="ExternalException">
<soap:fault name="ExternalException" use="literal" />
</fault>
</operation>
- <operation name="verify">
<soap:operation soapAction="verify" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
- <fault name="ExternalException">
<soap:fault name="ExternalException" use="literal" />
</fault>
</operation>
- <operation name="getDelegate">
<soap:operation soapAction="" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
</operation>
- <operation name="updateStatus">
<soap:operation soapAction="updateStatus" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
- <fault name="ExternalException">
<soap:fault name="ExternalException" use="literal" />
</fault>
</operation>
- <operation name="checkStatus">
<soap:operation soapAction="checkStatus" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
- <fault name="ExternalException">
<soap:fault name="ExternalException" use="literal" />
</fault>
</operation>
- <operation name="identify">
<soap:operation soapAction="identify" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
- <fault name="ExternalException">
<soap:fault name="ExternalException" use="literal" />
</fault>
</operation>
- <operation name="enroll">
<soap:operation soapAction="enroll" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
- <fault name="ExternalException">
<soap:fault name="ExternalException" use="literal" />
</fault>
</operation>
- <operation name="enrollAsync">
<soap:operation soapAction="enrollAsync" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
- <fault name="ExternalException">
<soap:fault name="ExternalException" use="literal" />
</fault>
</operation>
- <operation name="getMoreInfo">
<soap:operation soapAction="getMoreInfo" />
- <input>
<soap:body use="literal" />
</input>
- <output>
<soap:body use="literal" />
</output>
- <fault name="ExternalException">
<soap:fault name="ExternalException" use="literal" />
</fault>
</operation>
</binding>
- <service name="BiothenticateWebServiceService">
- <port name="BiothenticateWebServicePort" binding="tns:BiothenticateWebServicePortBinding">
<soap:address location="https://localhost/biothenticateWebSvc/BiothenticateWebService" />
</port>
</service>
- <wsp:Policy wsu:Id="BiothenticateWebServicePortBindingPolicy">
- <wsp:ExactlyOne>
- <wsp:All>
<sc:KeyStore wspp:visibility="private" alias="xws-security-client" keypass="changeit" storepass="changeit" type="JKS" location="C:\apache-tomcat-6.0.20\certs\keystore.jks" />
<sc:TrustStore wspp:visibility="private" peeralias="xws-security-server" storepass="changeit" type="JKS" location="C:\apache-tomcat-6.0.20\certs\cacerts.jks" />
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
</definitions>
For incoming ws-security, I have set decrypt keystore to keystore.jks and signature keystore to cacerts.jks.
For outgoing WSS security I have created two WSS entries of type encryption, one for keystore and one for certs file (Although cert file does not give me an alias). Does this sound correct?
