$ git clone https://github.com/altfatterz/spring-ws-with-keystore
$ cd spring-ws-with-keystore
$ mvn clean package
Start the uefa-service with:
$ java -jar producer/target/producer-0.0.1-SNAPSHOT.jar --spring.profiles.active=https
Import the SoapUI project found in the soapui folder
Configure the client certificate (found in the soapui folder) in the SoapUI Preferences -> SSL Settings with Keystore field setting to the path of the soapui.jks file and KeyStore Password setting to password
Make a getTeamRequest using the example sending the SOAP message to https://localhost:8443/uefaeuro2016
Start the client with
java -jar consumer/target/consumer-0.0.1-SNAPSHOT.jar
In the output you should see:
2016-04-30 16:48:25.715 DEBUG 69021 --- [ main] .s.w.t.h.HttpsUrlConnectionMessageSender : Initialized SSL Context with key managers [sun.security.ssl.SunX509KeyManagerImpl@5e853265] trust managers [sun.security.ssl.X509TrustManagerImpl@67205a84] secure random [null]
2016-04-30 16:48:25.724 DEBUG 69021 --- [ main] o.s.ws.client.core.WebServiceTemplate : Opening [org.springframework.ws.transport.http.HttpUrlConnection@7d0587f1] to [https://localhost:8443/uefaeuro2016]
2016-04-30 16:48:25.760 DEBUG 69021 --- [ main] o.s.ws.client.MessageTracing.sent : Sent request [SaajSoapMessage {http://www.uefa.com/uefaeuro/season=2016/teams}getTeamRequest]
2016-04-30 16:48:26.352 DEBUG 69021 --- [ main] o.s.ws.client.MessageTracing.received : Received response [SaajSoapMessage {http://www.uefa.com/uefaeuro/season=2016/teams}getTeamResponse] for request [SaajSoapMessage {http://www.uefa.com/uefaeuro/season=2016/teams}getTeamRequest]
2016-04-30 16:48:26.357 INFO 69021 --- [ main] com.zoltanaltfatter.TeamClient : received message:com.eufa.euro.GetTeamResponse@687080dc
2016-04-30 16:48:26.357 INFO 69021 --- [ main] com.zoltanaltfatter.Client : countryCode: 'HU', country: 'Hungary', team nick name:'Mighty Magyars', coach:'Bernd Storck'
For more in-depth explanation check the blog post:
http://zoltanaltfatter.com/2016/04/30/soap-over-https-with-client-certificate-authentication
Reference:
https://codenotfound.com/spring-ws-log-client-server-http-headers.html http://wpcertification.blogspot.com/2011/10/pretty-printing-soap-messages.html https://stackoverflow.com/questions/52217498/get-principal-from-saml-assertion-into-spring-security-ws-soap
http://jaminhitchcock.blogspot.com/
wss4j 2.0 is different: https://ws.apache.org/wss4j/migration/wss4j20.html
There is SAMLCallback, the SAMLIssuer functionality has been moved to the SAMLCallback, so that the CallbackHandler used to create a SAML Assertion is responsible for all of the signing configuration as well.
See config: https://ws.apache.org/wss4j/config.html