wsdlsoap:address 为 http，而 URL 本身为 https；那么，是http还是https？
出于保密原因，我无法发布有关此问题的实际 wsdl 供人们亲自查看。这是一个场景，我在具有安全证书的服务器上用 Coldfusion 编写了这个 Web 服务。当我在浏览器中输入 https://www.mydomain.com/myWS.cfc?wsdl 时，wsdl 就会立即出现。但是当我在浏览器中向下滚动到 wsdl 本身的底部时，我看到这个标签，
<wsdlsoap:address location="http://www.mydomain.com/myWS.cfc"/>
此标签中的 URL 有 http，而不是 https。我的问题是，如果人们使用 https 链接（即 https://www.mydomain.com/myWS.cfc?wsdl）调用此 Web 服务，交易是否会加密？
For confidential reasons, I cannot post the actual wsdl on this question for people to see it for themselves. Here is the scenario, I have this web service written in Coldfusion sitting on a server that has a security certificate. When I type https://www.mydomain.com/myWS.cfc?wsdl in the browser, the wsdl comes right up. But when I scroll down to the bottom of the wsdl itself in the browser, I see this tag,
<wsdlsoap:address location="http://www.mydomain.com/myWS.cfc"/>
The URL in this tag has http, not https. My question is, if people were to call this web service by using https link (i.e. https://www.mydomain.com/myWS.cfc?wsdl), would the transaction be encrypted?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
是的，它将被加密。
WSDL 文件中指定的地址（不幸的是）并不总是您可以调用服务的实际端点地址之一。
例如，如果您有 WCF 服务，则默认情况下，WSDL 将使用计算机名称而不是域名生成。
此外，当您使用
?wsdl参数访问服务端点时，通常您返回的 WSDL 是动态生成的。但情况可能并非总是如此！该文件也可以是静态文件（实际的 *.wsdl 文件），由开发人员维护，当在不同位置部署服务时，开发人员可能会忘记更改内部地址...端点地址在这里很重要，那就是HTTPS； HTTPS 提供加密通信。
Yes, it will be encrypted.
The address specified in the WSDL file is (unfortunately) not always the one of the actual endpoint address where you can call the service.
As an example, if you have a WCF service, the address in the WSDL will be by default generated with the machine name and not the domain name.
Also, when you access the service endpoint with
?wsdlparameter, usually the WSDL you get back is generated dynamically. But this might not always be the case! The file can also be a static one (the actual *.wsdl file) which gets maintained by developers which can forget to change the address inside when deploying the service on different locations...The endpoint address is important here, and that is on HTTPS; and HTTPS provides an encrypted communication.
由于这是 ColdFusion SOAP 服务，因此 WSDL 始终是动态生成的，端点地址是文件中列出的内容，并且您可能需要创建一个静态文件来解决您的问题。只需保存生成文件的副本，将端点地址更改为 HTTPS，并引导服务的使用者使用静态文件的 URL。
当然，正如dpb提到的，你以后将负责维护这个文件。
Since this is a ColdFusion SOAP service, the WSDL is always dynamically generated, the endpoint address is what's listed in the file, and you may need to create a static file to resolve your problem. Simply save a copy of the generated file, change the endpoint address to HTTPS, and direct consumers of the service to use the URL of the static file.
Of course, as dpb mentioned, you will be responsible for maintaining this file in the future.