The document describes how a server and client establish a secure connection using digital signatures. The server and client each generate a private key stored in a keystore (server.jks and client.jks). They also generate public certificates from their private keys (server.cert and client.cert). The server sends its certificate to the client, and the client imports it. They then can digitally sign messages to authenticate the sender.

1. Digital Signature
Webservice
Trusted Client
Untrusted Client
Server generates a Key
Store with private Key
Private Key
server.jks
Client generates a key
store with private key
Private Key
client.jks
Server generates a
Public certificate from
its private key
Server
Certificate
server.cert
Client generates a Public
certificate from its private key
Client
Certificate
client.cert
Server sends it certificate
to client

2. Trusted Client
Untrusted Client
Private Key
client.jks
Digital Signature
Webservice
Private Key
server.jks
Client
Certificate
client.cert
Server
Certificate
server.cert
Client imports
the server
certificate into
its keystore
client.jks
Server imports
the client
certificate into
its keystore

3. Private Key
Server
Certificate
Digital Signature
Webservice
Private Key
server.jks
Client
Certificate
client.jks
Client Digital
signs the input
SOAP message
using server’s
certificate
Trusted Client
Untrusted Client
Digitally
signed
SOAP
Message