This document was generated from CDN thread
Created by: Evan Fogarty on 12-10-2009 04:37:02 AM
Greetings,
Our customer currently uses CVP 4.1. We are looking to upgrade them to 7.0.2 for the most up to date support of Web Service functionality for the CVP product, development tools ETC. However, the customer does not have upgrade licenses purchased and so have to raise a new Sales PO. We are looking to use customised Java Classes to call their Web Services with the following Security Requirements, we will not be using the out of the box Web Service elements. How much risk, what fundamental issues could we encounter if proceeding with 4.1, can we proceed with this version?
Thanks,
Evan.
Using SOAP 1.1
<h3 style="margin: 6pt 0in 4pt 56.7pt;"><a name="_Toc242100188">1.1.1. ID Assertion</a></h3>
This WS Security facility is to provide message-based protection by including the security information (UsernameToken as ID assertion) within each message header, which is to secure the message transmission environment between endpoints, CVP and the Woolworths Web Servers.
<h3 style="margin: 6pt 0in 4pt 56.7pt;"><a name="_Toc242100189">1.1.2. SSL enablement</a></h3>
This is to provide transport based WS Security facility by using HTTPS protocol for point-to-point network coverage between the CVP and Web Servers.
<h3 style="margin: 6pt 0in 4pt 56.7pt;"><a name="_Toc242100190">1.1.3. Sign/Verify</a></h3>
This is added-on message-based protection by signing the security information (UsernameToken as ID assertion) within each message header + SOAP Message Body with X.509 certificates. From the Web Server¿s side this will get verified to make sure it is coming from the trusted source, CVP, as well as verifying Message Body to make the contents aren¿t tempered.
Subject: RE: Use of Web Services in 4.1 instead of 7.0.2
Replied by: Ranjana Narayan on 13-10-2009 09:37:31 AM
Evan,
If you are not using the out of the box webservice element, there is not much of difference between 4.1 development environment(studio) and the 7.0, except maybe the version of JDK (currently 1.5). (The webservice element itself has seen some updates though)
Hope this helps,
Ranjana.
Subject: RE: Use of Web Services in 4.1 instead of 7.0.2
Replied by: Evan Fogarty on 14-10-2009 06:23:21 AM
Hi Ranjana,
Thanks for your prompt reply. What about the Studio tools, I thought there were some improvements from 4.1 to 7 especially around debug.
Cheers,
Evan.
Subject: RE: Use of Web Services in 4.1 instead of 7.0.2
Replied by: Ranjana Narayan on 14-10-2009 09:09:51 AM
Evan,
Not much of updates on the VXML server and the Studio front, from 4.1 to 7.0, except for maybe few bug fixes no new features were added. The debug tool was included in 4.1 (absent in 4.0). In perspective of the developer there is not much of deviation in developing apps for 4.1 or 7.0.
7.0 was more concentrated on the Video integration with other CVP components.
Hope this helps,
Ranjana.
Subject: RE: Use of Web Services in 4.1 instead of 7.0.2
Replied by: Evan Fogarty on 14-10-2009 09:25:57 PM
Thanks very much Ranjana for your prompt responses. Regards, Evan.
