Re: Encryption in IWS? (was Re: No SOAP. 8481D99689?)

[Ryan Watkins <ryanwatkinsaz@xxxxxxxxx>]

Here is an article describing how to configure an IBM integrated 
Web-services server for i using SSL over the HTTP protocol.

http://www.ibmsystemsmag.com/ibmi/january09/administrator/23600p1.aspx

Ryan Watkins


jamesl@xxxxxxxxxxxxxxxxx wrote:
> Last month, in my research of IWS/IAS, I'd begun reading the docs when
> something else came up. Now, I'm back to the web service research.
>
> Last month, I'd gotten as far as the IWS FAQ, and the part about "How do I
> enable SSL?"
>
> But I'm not quite sure I get all of it.
>
> The customer wants to be able to:
>
> * Sign and encrypt all requests (and I'm guessing, all replies) with an HMAC.
> * Generate and send a unique ID as part of each request.
> * Report all errors.
> * Have an audit log to determine which data needs to be re-sent in case of
> communication failure, and where any malicious attacks (are there any
> other kinds of attacks?) might have come from.
>
> Any IWS gurus out there? Because my experience with web services is very
> limited.
>
> --
> JHHL