How to secure your webservice

[solveig]

The attached PDF file walks you through how to create a webservice for the insurance example shipped with VA Smalltalk and then describes the changes needed to to secure the data passed between client and server.

Briefly, in order to secure the client-server interactions using OpenSSL,
• alter the web service WSDL file to reflect a secure location for the SstWSServlet;
• in the server image, register a secure https configuration for the server with the desired certificates and verification flags and deploy the service;
• in the client image, deploy the web service after modification of the client security configuration for 'httpsl'.