Tag Archives: security

Enhancements to Testing and JSSE Debugging in Camel 2.10

While testing and security are often the last to get invited to the party, they are integral parts of well written software.  Two new features in Camel 2.10 help to ease debugging of TLS related security issues and to provide … Continue reading

Posted in Uncategorized | Tagged , , , , | 4 Comments

Simplified TLS Configuration in Apache Camel

As you can probably tell from some of my previous blog posts on the subject of security, I’ve spent some time mired deep in the muck that is TLS configuration in the JVM.  Over time, I have found that many … Continue reading

Posted in Uncategorized | Tagged , | 1 Comment

Using NSS for FIPS 140-2 compliant message security in CXF

If you have ever supported a client in the US Government, civil or otherwise, you have probably heard of the FIPS 140-2 compliance requirements for cryptographic operations.  If you haven’t, stick around a little longer and it will eventually ruin … Continue reading

Posted in Uncategorized | Tagged , , , , | 6 Comments

Using NSS for FIPS 140-2 compliant transport security in CXF

If you have ever supported a client in the US Government, civil or otherwise, you have probably heard of the FIPS 140-2 compliance requirements for cryptographic operations.  If you haven’t, stick around a little longer and it will eventually ruin … Continue reading

Posted in Uncategorized | Tagged , , | 2 Comments

Signing WS-Addressing headers in Apache CXF

As WS-Addressing (WS-A) headers can drastically affect the behavior of a Web service, securing these headers is just as important as securing the message payload.  In many cases, these headers and other parts of the message will be integrity constrained … Continue reading

Posted in Uncategorized | Tagged , , | 5 Comments