CODEWITHSUNDEEP
javaweb-servicessecurityjax-wswebservices-client
Selvakumar Ponnusamy
Selvakumar Ponnusamy

Reputation: 5533

Invoke webservice using HTTPS in Java

My webserice provider provides HTTPS services and I need to consume them. I'm using JAX-WS and invoking the webservice with given HTTPS URL, The response is coming as expected, but when I see the logs it says HTTP request and the request XML is not encrypted, I enabled 

"com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.dump=true;"

to print the logs in console.

Is that a behavior when we print XML in console, If I want to see encrypted XML, What should I do

I'm not sure whether encryption is happening when transmitting the request.

Upvotes: 0

Views: 124

Answers (1)

Stefano Sanfilippo
Stefano Sanfilippo

Reputation: 33046

If you are on Linux, you can use Socket Stat ss -pr for inspecting open sockets (and whether they are secure). On BSD (but also on Linux), use netstat, while I'm sure there is a similar tool also on Windows, although I never used one.

Otherwise, use a network inspecting tool like Wireshark or Tcpflow/Tcpdump and see whether the messages are sent over HTTPS or not.

Note: these tools will only confirm that a TLS/SSL connection is present, they cannot substitute a thorough security audit.

Upvotes: 1

Related Questions