How to send and receive certificates in Spring Ws with a third party, such as a Bank?

Question

I use Spring MVC 4 Rest, but now that I need to use the web service, I decided to use w760 Ws with the Appache Tomcat7 server, and I'm trying to connect to a third party, which is Bank Api, I must achieve mutual authentication, which is a two-way SSL to send my soap requests

• If the certificates are placed in the trust store and key store respectively in Spring ws, and then when trying to connect to https the server will check and send certificates automatically?
• What are the steps or procedures that need to be completed to configure my W760 Ws application to use a web service via https?
• If verification and sending are not performed automatically, then how can I send and verify a certificate before sending a soap request using Spring ws?

Answer 1

Spring Security WS provides support through WebServiceTemplate . There are two kinds of security mechanism: SUN XML and Web Services Security (XWSS) through XwsSecurityInterceptor and Apache WSS4J through Wss4jSecurityInterceptor. These are simply extension points, so you can configure all your security needs: from authentication, signature, verification, encryption and decryption.

Please also check out my answer about keystores and power of attorney configured for your other question.

More details here are XwsSecurityInterceptor and Wss4jSecurityInterceptor .