Use Sign.xml and Encrypt.xml for both request AND response within WSDL?

Hi,
ALSB: 2.6
I was wandering if it's possible to use abstract outof the box WS-Policy file within WSDL file to specify encryption
(Encrypt.xml) and digital signature(Sign.xml) with X509 for both request and response???
So far, it only works for either request or response BUT not both. i.e. within WSDL file
<!-- following WSDL works for encrypting and signing request with X509 in test console -->.....
<wsdl:binding name="DexService2Soap" type="tns:DexService2Soap">
    <soap:binding transport="http://schemas.xmlsoap.org/soap/http" style="document" />
    <wsdl:operation name="Message">
            <soap:operation soapAction="urn:moe:dex:dexservice:2.0.0/Message" style="document" />
                          <wsdl:input>
                           <!-- WS-Policy file applied here -->
                         <wsp:Policy>
                                        <wsp:PolicyReference URI="policy:Sign.xml"/>
                                        <wsp:PolicyReference URI="policy:Encrypt.xml"/>
                                   </wsp:Policy>
                                 <soap:body use="literal" />
                           </wsdl:input>
                         <wsdl:output>
                              <soap:body use="literal" />
                           </wsdl:output>
    </wsdl:operation>
  </wsdl:binding>
           Or
<!-- following WSDL works for encrypting and signing response with X509 in test console -->
<wsdl:binding name="DexService2Soap" type="tns:DexService2Soap">
    <soap:binding transport="http://schemas.xmlsoap.org/soap/http" style="document" />
    <wsdl:operation name="Message">
            <soap:operation soapAction="urn:moe:dex:dexservice:2.0.0/Message" style="document" />
                          <wsdl:input>
                                 <soap:body use="literal" />
                           </wsdl:input>
                         <wsdl:output>
                                   <!-- WS-Policy file applied here -->
                                   <wsp:Policy>
                                        <wsp:PolicyReference URI="policy:Sign.xml"/>
                                        <wsp:PolicyReference URI="policy:Encrypt.xml"/>
                                   </wsp:Policy>
                              <soap:body use="literal" />
                           </wsdl:output>
    </wsdl:operation>
  </wsdl:binding>
But not both
<!-- following WSDL doesn't work for encrypting and signing both response and request with X509 in test console -->
<wsdl:binding name="DexService2Soap" type="tns:DexService2Soap">
    <soap:binding transport="http://schemas.xmlsoap.org/soap/http" style="document" />
    <wsdl:operation name="Message">
            <soap:operation soapAction="urn:moe:dex:dexservice:2.0.0/Message" style="document" />
                          <wsdl:input>
                                    <!-- WS-Policy file applied here -->
                                   <wsp:Policy>
                                        <wsp:PolicyReference URI="policy:Sign.xml"/>
                                        <wsp:PolicyReference URI="policy:Encrypt.xml"/>
                                   </wsp:Policy>
                                 <soap:body use="literal" />
                           </wsdl:input>
                         <wsdl:output>
                                   <!-- WS-Policy file applied here -->
                                   <wsp:Policy>
                                        <wsp:PolicyReference URI="policy:Sign.xml"/>
                                        <wsp:PolicyReference URI="policy:Encrypt.xml"/>
                                   </wsp:Policy>
                              <soap:body use="literal" />
                           </wsdl:output>
    </wsdl:operation>
  </wsdl:binding>
...      Instead, I got error message like
<15/01/2008 10:15:04 AM NZDT> <Error> <ALSB Security> <BEA-387023> <An error ocurred during web service security inbound response processing [error-code: Fault
, message-id: 3917705281899426819-4368b1eb.117762cff6e.-7fdb, proxy: DexServiceX509-Stub/Proxy Services/DexServiceX509-ProxyService, operation: Message]
--- Error message:
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"><soapenv:Header/><soapenv:Body><soapenv:Fault><faultcode>soapenv:Server</faultcode>
<faultstring>Failed to get token for tokenType: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3</faultstring></soapenv:Fa
ult></soapenv:Body></soapenv:Envelope>
weblogic.xml.crypto.wss.WSSecurityException: Failed to get token for tokenType: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#
X509v3
at weblogic.xml.crypto.wss.SecurityBuilderImpl.addEncryption(SecurityBuilderImpl.java:308)
at weblogic.wsee.security.wss.SecurityPolicyDriver.processConfidentiality(SecurityPolicyDriver.java:280)
at weblogic.wsee.security.wss.SecurityPolicyDriver.processOutbound(SecurityPolicyDriver.java:75)
at weblogic.wsee.security.wss.SecurityPolicyDriver.processOutbound(SecurityPolicyDriver.java:64)
at weblogic.wsee.security.WssServerHandler.processOutbound(WssServerHandler.java:86)
Truncated. see log file for complete stacktrace
>
<15/01/2008 10:15:24 AM NZDT> <Error> <com.bea.weblogic.kernel> <000000> <Failed to build CertPath
java.security.cert.CertPathBuilderException: [Security:090603]The certificate chain is invalid because it could not be completed. The trusted CAs did not inclu
de CN=x509,OU=x509,O=x509,L=Wellington,ST=Wellington,C=NZ.
at weblogic.security.providers.pk.WebLogicCertPathProviderRuntimeImpl$JDKCertPathBuilder.engineBuild(WebLogicCertPathProviderRuntimeImpl.java:669)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:194)
at com.bea.common.security.internal.legacy.service.CertPathBuilderImpl$CertPathBuilderProviderImpl.build(CertPathBuilderImpl.java:67)
at com.bea.common.security.internal.service.CertPathBuilderServiceImpl.build(CertPathBuilderServiceImpl.java:86)
at jrockit.reflect.VirtualNativeMethodInvoker.invoke(Ljava.lang.Object;[Ljava.lang.Object;)Ljava.lang.Object;(Unknown Source)
        Truncated. see log file for complete stacktrace
>
<15/01/2008 10:15:24 AM NZDT> <Error> <ALSB Security> <BEA-387022> <An error ocurred during web service security inbound request processing [error-code: Fault,
message-id: 3917705281899426819-4368b1eb.117762cff6e.-7fd8, proxy: DexServiceX509-Stub/Proxy Services/DexServiceX509-ProxyService, operation: null]
--- Error message:
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"><soapenv:Header/><soapenv:Body><soapenv:Fault xmlns:wsse="http://docs.oasis-open.or
g/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><faultcode>wsse:InvalidSecurityToken</faultcode><faultstring>Security token failed to validate. weblo
gic.xml.crypto.wss.SecurityTokenValidateResult@3c5347b[status: false][msg [
  Version: V1
  Subject: CN=x509, OU=x509, O=x509, L=Wellington, ST=Wellington, C=NZ
  Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
  Key:  Sun RSA public key, 1024 bits
  modulus: 13052787793731294943682394984664645854838424340012907077330623....
  The 'System Error Handler' from 'Invocation Trace' in ALSB test console is something like
[pre]     
$fault:
<con:fault xmlns:con="http://www.bea.com/wli/sb/context">
     <con:errorCode>BEA-386201</con:errorCode>
     <con:reason>
          A web service security fault
          occurred[{http://schemas.xmlsoap.org/soap/envelope/}Server][Failed
          to get token for tokenType:
          http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3]
     </con:reason>
     <con:details>
          <err:WebServiceSecurityFault
               xmlns:err="http://www.bea.com/wli/sb/errors">
               <err:faultcode
                    xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
                    soapenv:Server
               </err:faultcode>
               <err:faultstring>
                    Failed to get token for tokenType:
                    http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3
               </err:faultstring>
          </err:WebServiceSecurityFault>
     </con:details>
     <con:location>
          <con:path>response-pipeline</con:path>
     </con:location>
</con:fault>
So is this a feature not supported in ALSB 2.6 yet or am I missing something dead simple?
Thanks in advance
Sam

Instead of specifying policies for input and output separately you could place the policy reference only once in the operation element. Maybe will this solve your problem...
http://e-docs.bea.com/alsb/docs26/security/ws_policy.html#wp1061166

Similar Messages

  • Output determination and Printer determination for  both PO and GR

    Dear all,
    Can anyone please help me in congiguring the output determination and printer determination for  both PO and GR. please give me detailed configuration including the paths as i am stuck with the configuration.
    Thanks & Warm Regards
    Somashekar Anand

    hi Somashekar
    follow he steps
    Output of Purchase Order
    1. Condition Table
    SPRO > Material Management> Purchasing -> Message -> Output Control->Condition Tables->Define Condition Table for Purchase Order
    Select:
    Purchasing Doc. Type,
    Purch. Organization,
    Vendor
    2. Access Sequences
    SPRO -> Material Management-> Purchasing -> Message -> Output Control->Access Sequences->Define Condition Table for Purchase Order
    3. Message Type
    SPRO -> Material Management-> Purchasing -> Message -> Output Control->Message Types->Define Message Type for Purchase Order
    *4. Message Determination Schemas*
    4.1. Message Determination Schemas
    SPRO -> Material Management-> Purchasing -> Message -> Output Control->Message Schema->Define Message Schema for Purchase Order-> Maintain Message Determination Schema
    4.2. Assign Schema to Purchase Order
    SPRO -> Material Management-> Purchasing -> Message -> Output Control->Message Schema->Define Message Schema for Purchase Order-> Assign Schema to Purchase Order
    5. Partner Roles per Message Type
    SPRO -> Material Management-> Purchasing -> Message -> Output Control-> Partner Roles per Message Type ->Define Partner Role for Purchase Order
    6. Condition Record
    Navigation Path: SAP Menu-> Logistics -> Material Management -> Purchasing-> Master data->Messages-> Purchase Order-> MN04-> Create
    Now you create PO (ME21N) and save it. Go to ME22N and print the PO by giving output type.
    Output of GR
    After setting table, access sequence and output type for GR,run MB02 transaction, enter material document number. Double click one line item and select messages. Separate screen will be opened to configure outputs. Give the required fields and save the document. Now Run MB90, you can take printout. Output Type: WE03 or WE01 or WE02
    Reward points if helpful
    Thanks and regards
    Ravikant Dewangan

  • Methodaology to use a commom JSF/JSP page for both PDA and PC Browser

    hello,
    I am planing to write an application that should work on both PDA(Windows CE 4.2 Client) and PC(Desktop).I choosed JSF as it supports Rendering.Is there any methodology so that i can use a common JSF/JSP for both the client.
    As the PDA browser space constrint i can not use the same page for both.
    One way as i know is Conditional Component display whre there are ceparate components for PDA & PC ..But i need a methadology where in i can use same component for both PDA & PC .
    I came to know about the XML rendering capability of JSF can this be used?..
    can anybody please hep me in this regard.
    thanks & regards
    ullas kumar

    Firefox Mobile sends "Android" in its browser identification. If the site is checking for that, then you should get a mobile page. If the site requires more, e.g., Chrome, Webkit, or some other text, then that's a problem because Firefox doesn't use those terms. With server-based redirection, you cannot see what the site is checking for.
    For testing, or to work around sites not knowing about Firefox Mobile, you could try the Phony extension: https://addons.mozilla.org/en-us/mobile/addon/phony/

  • How to change the width of the EditForm.aspx and NewForm.aspx for both new and edited list entries?

    How to change the form widths for the EditForm.aspx and NewForm.aspx files that display both new and edited list entries?

    Hi  ,
    According to your description, my understanding is that you want to modify the width of the New Form and Edit Form of a list in SharePoint 2010 .
    1.Go to your SharePoint site -> your list.
    2.In top ribbon click  List tab(List Tools).
    3.Towards right you will see option as Form Web Parts, click on it, the three forms will be listed there [New Form, Display Form, Edit Form].
    4.Select the one on which you want to increase the width/height.
    5.It will open in edit mode, click on Add a Web Part.
    6. Click on Forms [Categories] => HTML Form Web Part.
    7.After adding the HTML Form Web Part, click on Edit WebPart.
    8.Click on Source Editor, Remove all code from it and put an empty HTML table with width and height as per your requirement ex. to increase width
    <TABLE WIDTH="800px">
    <TR><TD></TD></TR>
    </TABLE>
    9.Save the form and check out your respective modal by clicking on the same in your list view.
    Reference:
    http://sharepoint.stackexchange.com/questions/40580/how-to-modify-width-of-standard-dialog-form-sharepoint-2010
    Best Regards,
    Eric
    Eric Tao
    TechNet Community Support

  • Charger and magic wand for both trackpad and wireless keyboard!

    Hey out there, is there someting like a charger for wireless keyboard and trackpad together (LIKE THE MAGIC WAND AND CHARGER to keep the trackpad and the keyboard together)???
    or is it worth getting the apple rechargeable batteries instead.   
    since I use the magic mouse aswell, should I get the mobee magic charger or use batteries like those rechargable ones I stated above?
    Thanks

    I use AA rechargeable batteries - Energizer (the same high quality I use in my cameras). And I have a universal charger for AA batteries.

  • Email and calendar app for both MAC and PC

    I have purchased a HP MediaSmart Server for my small home-based office. There will be 4 computers which access the server-2 macs (all running OS 10.5) and 2 PCs (1 running Vista and 1 running XP). Does anyone know of an email and calendar app which can be accessed by all computers? The server runs on MS Windows Home Server.
    Thanks for any suggestions.

    sorchard –
    Depends – if you are planning on connecting to an Exchange Server then I would suggest that you install Crossover (www.codeweavers.com) on your Mac’s and then Office 2003/Outlook. I am connecting to an Exchange Server running Windows Small Business Server 2003 and have not had any problems using Outlook and sharing Calendar data between my XP and Mac systems.
    If you are not planning on using Exchange and your mail usage is not that demanding (less than 20 messages daily) the you could use the basic Mail clients that come with OSX (Mail) and Windows (Outlook Express).
    Respectfully –

  • Can I use my phone number in imessage for both iphone and ipad in the same chats?

    I want to use iMessage from my ipad with my phone number not with my e-mail because most of my friends have not my e-mail under my name in their phones.
    So what I want to is being able to talk in the same chat from my ipad and iphone with out showing my e-mail to the person who I'm talking with because that making the chat appears one to me but two to him.
    Thank you and sorry for bad English ;)

    On I pad it only work with E mails because the I Pad is not associated with your cell phone number.

  • Video formats and optimum settings for both Mac and Windows XP

    Now this is a strange one: I create a Windows Media (WMV) file and it plays great on the Mac (I have Flip4Mac installed also). However, it doesn't play on Windows XP in MSIE -- but the QuickTime (.M4V file) does. I do have QuickTime installed on the WXP. I guess the following questions are of interest not only to me but to a lot of people:
    1. What are the absolute optimum settings and format for a QuickTime file that will be played on an Apple in Safari or other browser? .MOV? .M4V? .MP4?
    2. Same question for Windows XP. .AVI? .WMV?
    I know there is a lot of already available information on this but I'm looking for a video expert who has troubleshot this to death and has this down and working on an existing website.
    NOTE: I would make it a Flash file but Keynote exports a non-playing Flash format file as does QuickTime, so no luck there. Also, for some stupid reason Keynote separates the audio and video when exporting to a QuickTime movie and what's with that?
    Sorry this got long but not only I, but I'm sure a lot of people have this set of questions. Much appreciated.
      Mac OS X (10.4.8)  

    sorchard –
    Depends – if you are planning on connecting to an Exchange Server then I would suggest that you install Crossover (www.codeweavers.com) on your Mac’s and then Office 2003/Outlook. I am connecting to an Exchange Server running Windows Small Business Server 2003 and have not had any problems using Outlook and sharing Calendar data between my XP and Mac systems.
    If you are not planning on using Exchange and your mail usage is not that demanding (less than 20 messages daily) the you could use the basic Mail clients that come with OSX (Mail) and Windows (Outlook Express).
    Respectfully –

  • Using the same client for both regfree and out-of-proc COM

    Hi,
    Here is the context:
    1. We have the same set of COM objects that can be deployed as in-proc COM servers (dlls) or out-of-proc COM servers (exe).  In-proc servers are called through regfree COM.
    2. We have test projects that use the in-proc COM servers through regfree COM.
    I would like to use the same test client projects for both regfree and out-of-proc COM servers (but not at the same time). For example, I would like to first run the client using regfree COM, then delete the in-proc dll and register the out-of-proc com server,
    and then run the client again without having to recompile.  But I have not found a way to do this.
    Instead, what I have to do is modify the project settings of the test client project, removing the regfree stuff (the manifest dependencies) before I can use the test client project with the out-of-proc server.
    Is there a way to do this without recompiling?
    FYI, I have tried regfree COM by changing the client project's Project->Properties->Linker->Manifest file->Additional Manifest Dependencies, or by changing the client project's Project->Properties->Manifest Tool->Input and Output->Additional
    Manifest Files.  Either way works with regfree COM.  And either way I have to remove those settings before making it work with out-of-proc COM (and hence recompiling, which is what I am trying to avoid).
    Thanks,
    Nick

    Try Manifest Tool > Input and Output > Embed Manifest = No, and change Linker > Manifest File > Manifest File to drop ".intermediate" in the middle (or just rename the file after the build).
    A manifest doesn't have to be embedded into the executable, it could be a standalone file named like ApplicationName.exe.manifest and sitting in the same directory next to the .EXE. Then you can simply delete or rename it back and forth to switch between
    registered and reg-free COM.
    Igor Tandetnik

  • HT4314 I have a iPad and iPhone with the same Apple ID, but on Game Center I have used the same id for both devices and they are two different profiles and I was wondering how to have one of the accounts on both devices.

    I have a iPad and iPhone with the same Apple ID, but on Game Center I have used the same id for both devices and they are two different profiles and I was wondering how to have one of the accounts on both devices.

    Hi Jamesdwills,
    Welcome to the Support Communities!
    If you are using the same Apple ID on both devices, the Game Center profile should be the same.
    Check out this information from the iPad User Guide.  Try signing out of the Game Center on both devices and then sign back in with the correct Apple ID:
    Using Game Center
    http://support.apple.com/kb/ht4314
    Game Center settings - iPad User Guide
    http://help.apple.com/ipad/7/#/iPad9a13d039
    Game Center settings
    Go to Settings > Game Center, where you can:
    Sign out (tap your Apple ID)
    Allow invites
    Let nearby players find you
    Edit your Game Center profile (tap your nickname)
    Get friend recommendations from Contacts or Facebook
    Specify which notifications you want for Game Center. Go to Settings > Notifications > Game Center. If Game Center doesn’t appear, turn on Notifications.
    Change restrictions for Game Center. Go to Settings > General > Restrictions.
    Cheers,
    - Judy

  • My email (sign-in) and password for iTunes is different than my email (sign-in) and password for iCloud. How do I change my sign in and password so they are the same for both iTunes and iCloud without losing my iTunes content?

    My email (sign-in) and password for iTunes is different  than my email (sign-in) and password for iCloud. How do I change my sign in and password so they are the same for both iTunes and iCloud without losing my iTunes content?

    Hey Lakedrive442,
    It sounds like you have changed your Apple ID which you use with iTunes.  If so there are several places you may need to update it as outlined in this article.
    Apple ID: What to do after you change your Apple ID - Apple Support
    Of course some might not apply, but many might.
    Thank you for thinking of Apple Support Communities for your support needs.
    Nubz

  • I have Photoshop Elements 12 for both PC and Mac (I use both). I have a new camera, Nikon D810. I downloaded the latest version of Camera Raw, 8.8. My D810 is listed as a supported camera model. However, when I try to open a raw photo in Photoshop Element

    I have Photoshop Elements 12 for both PC and Mac (I use both). I have a new camera, Nikon D810. I downloaded the latest version of Camera Raw, 8.8. My D810 is listed as a supported camera model. However, when I try to open a raw photo in Photoshop Elements, I keep getting the message "Could not complete your request because the file appears to be from a camera model which is not supported by the installed version of Camera Raw. I have tried reinstalling Camera Raw many times, and have tried to open many different raw files in Elements, and still get the same error message. Please help.

    How did you try to install ACR 8.8.  The only way I know of that works with Elements is to use the Updates Choice on the Help menu.
    There are two charts supplied by Adobe that explain your RAW dilemma.  This one tells you what your camera needs:  http://helpx.adobe.com/creative-suite/kb/camera-raw-plug-supported-cameras.html   This one tells you what version of software you need:  http://helpx.adobe.com/x-productkb/global/camera-raw-compatible-applications.html
    In your case, the Nikon D810 needs Adobe Camera Raw (ACR) 8.6 or Lightroom 5.6.  (Congratulations on buying a new camera!)
    To get to that level with Photoshop Elements, you will need to replace your Photoshop Elements 12 with version 13.   Adobe caps ACR updates on version 12 at 8.5.
    The most convenient way to get around it without spending any money is to use the FREE from Adobe DNG Converter.  Download and install it from here for FREE:  http://www.adobe.com/support/downloads/thankyou.jsp?ftpID=5855&fileID=5890  Once it is installed you can convert your D810 raw files to an Adobe RAW version with the .DNG file extension that most, if not all, versions of the various Adobe software programs can use.  That includes old versions of Photoshop, Elements and Lightroom.  DNG converter can be used as the tool to move your files from your memory card to your computer, is efficient, will convert in batches and is completely lossless.  There is no risk of any image quality degradation or RAW functionality.

  • I recently purchase an ipad2.  I also have a mac laptop.  Now, when I facetime call using my iphone to my ipad2 or mac, it states busy.  how can i fix this problem?  I have the same apple id e mail for both ipad2 and mac.  it might be getting confuse now.

    I recently purchase an ipad2.  I also have a mac laptop.  Now, when I facetime call using my iphone to my ipad2 or mac, it states busy.  how can i fix this problem?  I have the same apple id e mail for both ipad2 and mac.  it might be getting confuse now.  I want to be able to face time also using my ipad2 to my laptop especially if one of the members of the family is traveling.  Thanks.

    thanks.  your answer was correct, clearer.  I have another question, maybe you can answer.  I just purchase my ipad2 2 days ago.  yesterday, there was a sound.  today there is no sound.  there is a sound only in movies and you tube and music.  but no sound on all apps and keyboards.  I look it up and seems like ther are few that have this problem.  I called walmart coz I bought it there and they told me that they have not heard that before but if I can't fix it, just return it and exchange it with anew one since I have 14 days to do that.  I tried rebooting it and still won't work.  Should I just restore it?

  • I have two iphone one is iphone 5 and othere is iphone 4 . can i use same id for both ? And do i have to purchase the application again for iphone 4 which i have buyed for iphone 5.??

    i have two iphone one is iphone 5 and othere is iphone 4 . can i use same id for both ? And do i have to purchase the application again for iphone 4 which i have buyed for iphone 5.??

    You can use the same Apple ID for both phones, you would then be able to use the purchased Apps/Content on both phones without having to pay again.

  • Hi, I have apple account/password on laptop but can't use the same ID etc on new Ipad.  On my account it says ID is only for 1 system.  I really want only one ID for both Ipad and laptop. Thanks

    Hi,
    I have apple account/password on laptop but can't use the same ID etc on new Ipad.  On my account it says ID is only for 1 system.  I really want only one ID for both Ipad and laptop.
    Thanks

    It seems that you have used the AppleIDs to "Purchase" your devices, which marries the two for all time and eternity.
    For info - Using your Apple ID for Apple services
    For Account security issues - Apple ID: Contacting Apple for help with Apple ID account security
    regards
    CCC

Maybe you are looking for