Documentation : How to Use JDeveloper 10.1.3 to Secure and Test a Web Service

Overview
This how to shows how JDeveloper 10.1.3 can be used to develop, secure and test a web service. JDeveloper provides a testing environment for securing and adding self-signed keypair integrity and encryption details to both the service and proxy to ensure the service is being used by an authenticated user, has not been tampered with in transit and cannot be read by a 'man-in-the-middle' attack.

Sun's Keytool utility is used to create RSA self-signed certificates in a keystore to test security of the service.

JDeveloper is used to deploy the secured service and keystore to OC4J. To maintain password security, the OC4J console is then used to add passwords from the keystore. JDeveloper is used to create a secure proxy to test the running, secured service. Finally, using the HTTP Analyzer, the developer can review the signed and encrypted SOAP messages being sent and received by the server.

Prerequisites

• 1. Installed JDeveloper 10g (10.1.3)
• 2. Started Oracle Application Server Containers for J2EE (OC4J) (<JDEV_HOME>\jdev\bin\start_oc4j.bat)
  If prompted for a password, enter welcome. Nothing displays as you enter the password (normal default is welcome). .
  Watch the resulting command window and wait until you see the message 'Oracle Containers for J2EE 10g (10.1.3.0.0) initialized'.
  Then you can minimize the window, but do not close it
• 3. A JDeveloper Connection to running OC4J:
• 1. Click the Connections tab (If the Connections tab is not visible, choose View > Connection Navigator from the menu).
• 2. Right-click the Application Server node and select New Application Server Connection from the context menu.
• 3. If the Welcome page of the Create Application Server Connection wizard displays, click Next.
• 4. On the Type page of the wizard, enter the Connection Name of oc4j_local and click Next.
• 5. On the Authentication page of the wizard, enter a Password of welcome (or whatever password was used when OC4J was initially started) and select Deploy Password, then click Next.
• 6. On the Connection page of the wizard, click Next.
• 7. On the Test page of the wizard, click Test Connection. After testing, the Status message should display Success!. (If it displays error messages, click Back and correct the connection information that you have entered. )
• 8. Click Next, then Finish

[Read More..]

Courtesy:- Oracle.com