Business Service sign a message with always same certificate

Hello,
We  need to call an external web service that require the request be signed by a certificate.
Our organization has an Oracle Service Bus and our intention is use the bus to facilitate our clients the calls.
I did the next steps:
1.- I Have configured the keystore of OSB with the certificated.
2.- I have made the business service, with the end-point the external ws.
3.- I Have configured the sign-body ws-policy in business service.
4.- When i prove it with debug console of OSB, i select the keystore provider and it works.
The problem is:
When I make the Proxy Service seems that the Business Service give the requirement to the Proxy for sign the message,  and what I want is publish the Proxy Service without this requirement and sign the message with always the same certificate.
I would like the message was signed by Proxy Service or Business Service, and not by clients who call the OSB.
I don't know how configure it on OSB.
It is possible to configure OSB in that way?
Thanks
Miguel

Hello,
Can you please confirm the following
1. You are setting up an expired certificate as the host certificate for your host (or) are you trying to sign an ASPX file with an expired certificate?
2. The webserver where you are hosting this ASPX (IIS I presume), has only certificate based authentication enabled - is that right?
3. You are seeing that when the user opens the website they are prompted that the certificate has expired, and even if they chose to move forward, they are not able to - is that the issue?
4. If (3) is not the issue and you want to be able to get access to the certificate-expiration error as part of the ASPX code, then that wouldn't be possible because the certificate validation would happen as part of the TLS connection negotiation
If you can please provide some more details, it will help.
Thank you

Similar Messages

  • Attempting to sign into messages with AppleID, says incorrect password

    I am successfully singing into my appleID account via icloud.com and mac mail. However, when I try to sign into imessages with the same icloud account, it says I have an incorrect AppleID or password.
    I have verified they are correct

    Hi eculley,
    Thanks for visiting Apple Support Communities.
    If you can sign into other Apple services but not iMessages, try the steps in this article:
    FaceTime, Game Center, Messages: Troubleshooting sign in issues
    http://support.apple.com/kb/ts3970
    Regards,
    Jeremy

  • OSB - Problems connecting sync business service to resp. queue with login

    Hello,
    I have a synchronous JMS business service which uses the MessageID correlation pattern with statically configured request and response JMS queues. The JMS queues are imported using a foreign JMS and a connection factory with credentials (username and password). The requests seem to work just fine (they are received at the foreign JMS) but I still have problems with the responses. I get the following log entries:
    <Mar 31, 2010 1:50:10 PM CEST> <Warning> <EJB> <BEA-010061> <The Message-Driven EJB: ResponseEJB-8048850762288479454-46349ef3.127b3dbbff1.-7fe6 is unable to connect to the JMS destination: queue.local.name. The Error was:
    javax.jms.JMSSecurityException: User: null is not authorized to read from destination queue.external.name>
    It seems that the response is handled by a MDB which does not seem to use the username and password configured in the connection factory. Any ideas how to make it use the username and password of the connection factory to receive the response? I have tried both providing the connection factory for the response and leaving it empty (which would cause it to use the one from the request) - both with no success.
    I am really stuck here..
    Thanks,
    Dimo

    Alternatively you can try a very dirty way to make this work I think. The reason why the username in foreign server CF's username crednetials are not recognized is due to the fact that the deployment descriptors for the MDB should not specify a provider-URL and there should be a resource reference for the CF.
    Business service with reply queues generate a MDB under the hood . You can try to edit the deployment descriptors for this MDB to make this to work.
    Sample MDB weblogic-ejb-jar.xml for recognizing the foreign jms username
    Foreign JMS
    <foreign-server name=”ForeignServer”>
    <default-targeting-enabled>true</default-targeting-enabled>
    <foreign-destination name=”A”>
    <local-jndi-name>A</local-jndi-name>
    <remote-jndi-name>queue/A</remote-jndi-name>
    </foreign-destination>
    <foreign-connection-factory name=”FConf”>
    <local-jndi-name>FConf</local-jndi-name>
    <remote-jndi-name>ConnectionFactory</remote-jndi-name>
    <username>esbuser</username>
    <password-encrypted>{3DES}90sIZwo6Llr9r73p+VXkvQ==</password-encrypted>
    </foreign-connection-factory>
    <initial-context-factory>org.jnp.interfaces.NamingContextFactory</initial-context-factory>
    <connection-url>jnp://localhost:1099</connection-url>
    </foreign-server>
    weblogic-ejb-jar.xml
    <?xml version=’1.0′ encoding=’UTF-8′?>
    <web:weblogic-ejb-jar xmlns:web=”http://www.bea.com/ns/weblogic/weblogic-ejb-jar”>
    <web:weblogic-enterprise-bean>
    <web:ejb-name>RequestEJB-2518965873970113789–2352f820.127bd3f293c.-7fdb</web:ejb-name>
    <web:message-driven-descriptor>
    <web:pool>
    <web:max-beans-in-free-pool>1000</web:max-beans-in-free-pool>
    <web:initial-beans-in-free-pool>1</web:initial-beans-in-free-pool>
    </web:pool>
    <web:destination-jndi-name>A</web:destination-jndi-name>
    <web:connection-factory-jndi-name>FConf</web:connection-factory-jndi-name>
    </web:message-driven-descriptor>
    <web:transaction-descriptor>
    <web:trans-timeout-seconds>600</web:trans-timeout-seconds>
    </web:transaction-descriptor>
    <web:resource-description>
    <web:res-ref-name>jms/ConnectionFactory</web:res-ref-name>
    <web:jndi-name>FConf</web:jndi-name>
    </web:resource-description>
    <web:resource-description>
    <web:res-ref-name>jms/QueueName</web:res-ref-name>
    <web:jndi-name>A</web:jndi-name>
    </web:resource-description>
    </web:weblogic-enterprise-bean>
    </web:weblogic-ejb-jar>
    This needs to be done each time OSB generates a new MDB for the business service - eg. when the business service definition changes.
    Regards,
    Atheek

  • Why can't i sign into messages with my apple id

    Whenever I try to sign into messages, it pops up an error saying that my id can't be used.

    HI,
    The most common cause at the moment is a repaired or refurbished Mac missing the serial number on the Logic board.
    Use the Apple Icon Menu > About this Mac.
    Near the top is the current OS version listed
    Click this line twice (Once to Build number and again to Serial number)
    If it is missing you need and Apple Store or Apple Authorised Service Provider to sort this for you.
    10:42 PM      Wednesday; February 13, 2013
    Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
      iMac 2.5Ghz 5i 2011 (Mountain Lion 10.8.2)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad
    "Limit the Logs to the Bits above Binary Images."  No, Seriously

  • How to send a signed SOAP message with additional HTTP Header fields

    Our Partner's integration requirements are that we send them asynchronous SOAP messages, that are digitally signed, and whose HTTP headers contains 5 or 6 additional header fields, of which 3 or 4 will need to be dynamically set during the message mapping.  I believe we can use the HTTP adapter for adding new fields to the HTTP header, but don't believe it supports signing.  I believe that the SOAP adapter supports signing, but I'm not clear on how to use it to add fields to the HTTP header.  What is the most straight-forward way to achieve both the signing of the message and the addition of the HTTP header values?
    Thanks,
    Kurt

    >>>What is the most straight-forward way to achieve both the signing of the message and the addition of the HTTP header values?
    Use Java mapping for both.
    1) Signing the message
    You can digitally sign the soap message using many standard api like WSS4j? or  refer Java XML signature API which comes in Jdk1.6.
    Refer these links
    WSS4J  -  http://ws.apache.org/wss4j/axis.html
    Java XML signature : http://java.sun.com/developer/technicalArticles/xml/dig_signature_api/
    2) >>whose HTTP headers contains 5 or 6 additional header fields, of which 3 or 4 will need to be dynamically set during the message mapping
    Use Dynamic configuration API to set the additional header fields during message mapping.

  • Exchange 2010 SP3 - "500 5.3.3 Unrecognized command" in SMTP Receive Log. Senders get message with the same problem

    Hi
    My exchange environment consist with "Server Exchange 2010 SP3" and "Edge Server with Exchange 2010 SP3".
    On Edge server in SMTP receive log i get every now and then an entry: xxxxxx 500 5.3.3 Unrecognized command.
    It is serius problem because I got few e-mails from senders that they had problem with sending e-mail messages to our e-mail domain. They receive e-mail report, for example
    Technical details of permanent failure:
    Google tried to deliver your message, but it was rejected by the server for the recipient domain domena.plby
    mail.domena.pl.
    [95.xxx.xxx.xx].
    The error that the other server returned was:
    500 5.3.3 Unrecognized command
    Could you help me to solve this problem? What could cause this problem?
    Thank you in advance
    Tomasz
    Kind Regards Tomasz

    I have the same issue, but there is plenty of hard disk storage on the Exchange Server. This seems to only be happening from Google Business account/ Postini. If I send message from my personal Gmail account it works fine, but an agency who is on Google
    business seems to have issues sending to us and they are delayed, sometimes they get through and other times they just don't. 
    Results from Mail Acceptance Test:
    I enter my internal address and the remote users postini account as the test setup I received two emails from the tool but the end results of the test are:
     Error submitting mail
            Mail submission failed: Error message: Syntax error, command unrecognized. The server response was: 5.3.3 Unrecognized command.
    Google support stated this:
    Here are the logs from Postini trying to connect to mydomain.com (IP x.x.x.x) :
    1. 2014/08/09 03:26:28 IP:209.85.218.50 SMTP-STLS:OK <null> TLSv1:RC4-SHA Validate:None 2. 2014/08/09 03:26:28 IP:209.85.218.50 SMTP LOG: Sender => FFD:MAIL FROM:<[email protected]>
    3. 2014/08/09 03:26:28 IP:209.85.218.50 Fdal:Customer has null root_iid outbound default at org 100000001 4, 2014/08/09 03:26:28 IP:209.85.218.50 SMTP LOG: Sender <= FFD:250 Ok 5. 2014/08/09 03:26:28 IP:209.85.218.50 SMTP LOG: Sender => FFD:RCPT TO:[email protected]>
    6. 2014/08/09 03:26:34 IP:209.85.218.50 To:[email protected] SMTP LOG: FFD => mydomain.com (x.x.x.x):Connection established 7. 2014/08/09 03:26:34 IP:209.85.218.50 To:[email protected] SMTP LOG: FFD <= mydomain.com (x.x.x.x):220 server.mydomain.com
    ESMTP Service ready 8. 2014/08/09 03:26:34 IP:209.85.218.50 To:[email protected] SMTP LOG: Sender <= FFD:250 Ok 9. 2014/08/09 03:26:35 IP:209.85.218.50 To:[email protected] SMTP LOG: Sender => FFD:968 last bytes of data with dot 10. 2014/08/09 03:28:05
    IP:209.85.218.50 To:[email protected] From:[email protected]:1119780 FP:2603ec6d38c69886eb1000e516fb745a0384e50b SMTP:Delivery still in progress after 90 seconds, recording FP 11. 2014/08/09 03:31:17 IP:209.85.218.50 To:[email protected] SMTP
    LOG: FFD => mydomain.com (x.x.x.x):failed to send the last period(.) 12. 2014/08/09 03:31:17 IP:209.85.218.50 To:[email protected] oremote:Skipping Archive for Sender because did not deliver message 13. 2014/08/09 03:31:17 IP:209.85.218.50 To:[email protected]
    SMTP:451 Remote connection lost - psmtp 14. 2014/08/09 03:31:17 IP:209.85.218.50 To:[email protected] SMTP LOG: Sender <= FFD:451 Remote connection lost - psmtp
    As you can see, on line 9, at 03:26:35, we declared to the receiving server what we were about to send. At the line number 10, almost two minutes passed without an authorization (250 OK) from the receiving server. You can see our status being pushed back
    at that moment to the receiving mail server: SMTP:Delivery still in progress after 90 seconds. Two more minutes later the connection was simply dropped and so we generated a 400 error message to encourage the sending server to try again later (since no bounce
    was given per say from the receiving server, we won't hard-bounce it but defer it).
    I hope this will help. you can try to look in the mydomain.com  inbound logs and see at that exact time what happened? Unfortunately, our visibility pretty much ends there as we don't have full visibility of your mail environment. You'll need to investigate
    within your own environment unfortunately. If you have any more information to share with me, in case it might help me help you, feel free to do so. I'll leave this case opened for now.
    Sincerely,
    Patricia
    Google Enterprise Support

  • HT1918 How do you sign up free in iTunes? After signing up a few weeks later I started getting the sign in message with everything I wanted to do, even text. I signed out but when I went through the process again the 'none' payment in the credit area was

    How do you sign up for iTunes for free? I signed in originally for free but it now asks for my ID and password with everything I access. I've tried signing out and re-doing it but there is no option for 'nil' in the credit card details any more. How do I get the nil option back?

    Your previous support postings are listed [https://support.mozilla.com/en-US/search?q=&num_voted=0&num_votes=&asked_by=larsonite&answered_by=&q_tags=&created=0&created_date=&updated=0&updated_date=&sortby=0&a=1&w=2 here].
    '''Please bookmark that page so that you don't have to ask about this repeatedly.'''

  • Help double messaging with the same message

    like when someone Im's me i got the same thing twice and it says now chatting ___ (using my sn)
    I just changed the ports and deleted the two ichat files and i rechanged the quicktime settings and video settings on ichat... I'm using a Intel iMac with the latest upgrade 10.5.4

    Sounds like you are also running another AIM Client somewhere.
    9:28 PM Tuesday; July 1, 2008

  • Signing in mail with a verisign certificate

    I have 2 certificates bought from Verisign that I used previously under 10.6.
    I made a clean install of 10.6 and then updated to 10.7, but even if I managed to import the certificates in the keychain access, the buttons in mail proposing the signature and encryption of emails doesn't appear.
    Thank you in advance for your help

    I haven't been able to resolve this issue using Mail and a Verisign certificate. So instead I tried Comodo and my Mail system now works perfectly with both signature and encryption. So perhaps the problem lies with Verisign rather than Apple......
    And Comodo is free, see http://www.instantssl.com/ssl-certificate-products/free-email-certificate.html

  • Error: JAR-Ressources in JNLP-File are not signed from the same Certificate

    I have two handfull jars, all signed in batch with the same
    Certificate. When i start my App with Webstart it tells me:
    Your JAR-Ressources in JNLP-File are not signed from the same Certificate.
    "JAR-Ressourcen in JNLP-Datei sind nicht von demselben Zertifikat signiert"
    Well im shure that i signed all my jars with the same Certificate.
    What can i do to solve this problem ???

    I get the same error.
    Strangely exactly every second time it works and every second time I execute the JNLP I get the following error:
    network: Cache-Eintrag nicht gefunden [url: http://localhost:8080/fibo/lib/js_15R41.jar, Version: null]
    network: Verbindung von socket://127.0.0.1:3621 mit Proxy=DIRECT wird hergestellt
    #### Java Web Start Error:
    #### JAR-Ressourcen in JNLP-Datei sind nicht von demselben Zertifikat signiertCan this have something to do with browser caching? So that every 2nd time it tries to access the cache, fails. And than ignores the cache and works?
    Any ideas?
    Cheers,
    Rio

  • OSB with request response MQ business service

    Hi,
    We have OSB webservice whice interacts with MQ via business service. We need to send the request to MQ request queue and get the response from the response queue.
    For this, we have configured a business with MQ transport, request-response is enabled, message id is set for the correlation, auto generate correlation value is chosen.
    The business service sends the message but unable receive the response from the response queue. Failing with the error message like
    The invocation resulted in an error: [WliSbTransports:381918]Failed to receive response, within the configured timeout, for request message with id 42454BD3E5F7647914544E793F9F0000013EC9DF03918057 and correlation id 42454BD3E5F7647914544E793F9F0000013EC9DF03918057.
    But we checked with the end system, the response is sent tot he response queue in no time. We also increased the time out but still same issue.
    We noticed that if we dont send the message id, we are getting the response but not response of the request sent but some other response.
    Please suggest what needs to be done to fix the issue.

    Open your business service and navigate to HTTP Transport configuration page and check what is the http type is enabled.
    Look to me its with GET method, change it to POST and re-try.
    If the above solution is not helping, try to check the Follow HTTP redirects check box below the Advanced Setting in same page.
    Thanks,
    Vijay

  • How to pass parameters to servlet with POST with  Business Service OSB

    Hi all.
    I am newby in OSB. I am trying to send some values through a POST call to a servlet. I know how to call the servlet with Business Service of type "Messaging Service". I send the parameters of type Text.
    I have tried several ways, but I don`t find the proper way yo do it. I have tried to insert the param into the body and into the header.
    The problem is that I don`t know exactly where to put them, I don`t know if it must be done in the header or in the boy. I neither don`t know if there is a common way to do this.
    Please, could you give me a good example of an insert activity to isert a post parameter inside the call?
    For example: now I am using this one:
    Expression => "accountType=test"
    Location => as first child of"
    XPATH => empty.
    In variable => body.
    Where do I have to insert this, in the body or in the outbounds?
    I have followed this posts:
    https://blogs.oracle.com/jeffdavies/entry/enhanced_rest_support_in_oracl
    http://www.yenlo.nl/en/using-osb-with-rest/
    Thanks a lot.

    Hi,
    Please be carefull about passing values such as Strings or number that contains ',' .
    using the way described above.
    the best way is to pass an ID and then use a select Statement to get the other Values in the target page.
    regards
    MDK.

  • Message Transferred to Business Service, but acknowledgement not possible

    I have an IDoc to Flat File scenario. Flat file communication channel is in a Receiver Agreement for a Business Service.
    The message posts fine, but in the acknowledgement there is the familiar problem:
    "Unable to convert the sender service BSE_XXXX to an ALE logical system"
    I have checked that the Business System has an associated Logical System, and that the Header of the Receiver Agreement has the Sender Service and Receiver Service fields populated. Still I get this problem.
    Any suggestions?
    BR,
    Tony.

    hi,
    u cant send acknowledgement through the file adapter.
    if u r using bpm then only u can do it
    plz rewards points
    vikas

  • IOS 8 creating multiple group messages with same recipients

    After updating to iOS 8.0, my iPhone 5s has started creating multiple group messages with the same recipients. For example, my phone has created three group threads with the exact same people in it. Different friends' messages go to different threads. It is terrible confusing and annoying. It has done this with several of my group messages. Deleting the duplicate threads have not worked. They keep recreating themselves when certain people text the group.
    Any suggestions? This has been a problem for many of my friends as well.

    Hi hkapn,
    Do you and your wife use the same Apple ID and are connected to the same wifi network?  Your phone ringing to multiple devices is called Continuity and is a feature of iOS8. https://www.apple.com/ios/whats-new/continuity/
    Essentially, it allows you to use your iPhone cellular connection on all of your iOS8 devices: iPhone, iPad, Mac computers with Yosemite.  On some devices the call will look like it is coming through FaceTime, but likely on your wife's iPhone it just looked like a regular call.
    Since your iPhone was "hosting" the phone call through it's own cellular connection, you were able to pick it up after your wife answered, which caused your wife's phone to disconnect.  This is called Handoff and is also a feature of iOS8.
    You can turn off Continuity if you'd like, but you could also look into getting your wife her own Apple ID.  I'm guessing you were sharing one so that you didn't have to make purchases twice.  Also in iOS8, there is a feature called Family Sharing which allows you to link multiple Apple IDs and share purchases (among other things).
    In regards to the group text message issue, as far as I can tell, splitting group messages is NOT a feature.   I agree that there should be an answer to this already!

  • Jars not signed with same certificat

    Hi,
    I have signed my jars with jarsigner and same certificat. I have verify with jarsigner -verify -cert -verbose.
    But JWS says than my jars are not signed with the same certificat. I don't undestand why.
    Here is the stack :
         at com.sun.javaws.LaunchDownload.checkSignedResourcesHelper(LaunchDownload.java:1023)
         at com.sun.javaws.LaunchDownload.checkSignedResources(LaunchDownload.java:925)
         at com.sun.javaws.Launcher.continueLaunch(Launcher.java:814)
         at com.sun.javaws.Launcher.handleApplicationDesc(Launcher.java:515)
         at com.sun.javaws.Launcher.handleLaunchFile(Launcher.java:218)
         at com.sun.javaws.Launcher.run(Launcher.java:165)
         at java.lang.Thread.run(Thread.java:595)
    How can I know what is the jar with bad certificat ?

    if you set deployment.property file entry:
    deployment.trace.level=all
    you should see some debug output in the console and trace file that might help determine what jar it is (I am assuming you are using javaws 5.0)
    The problem is probably that although you use the same root certificate chan you purchased for each jar file, the entire certificate chain is not the same.
    pleas post the full set of steps you used to sign each jar.
    /Andy

Maybe you are looking for

  • Export to text from CR viewer

    Hi all, I need to export my report to the plain text. This option is available in designer (2008), but it is not in the viewer. Any idea how to export the report to txt from the viewer?

  • BO BI 4.0: WebI report based on BEx query (OLE DB enabled)

    Hi Experts We are trying to create WEBI reports based on BEx queries, but we are experiencing some issues. We have created two BEx queries og two separate multiproviders and opened them for external use but checking the OLE DB enable checkbox. In Web

  • Can I force a full system backup somehow ?

    Bootcamp has made a mess of my HD and I'd rather not rely on existing backups but have plenty of space and could do a full disc backup as insurance. I can then restore from TM in theory and solve the partition problems caused by BC. But how do I get

  • Solaris 10, PCMCIA NIC issue

    I've installed Solaris 10 3/05 on a Dell Inspiron 8100,. A pcmcia controller does not appear in the autoconfig scan. The NIC is a DLink PCMCIA card, and the o/s does not see the interface. Any suggestions?

  • Migrating a table from SQL server 2005 to oracle 9i

    Hi I need to migrate a table from SQL server to oracle, both of which are on different machines, I tried using SQL server DTS export functionality selected the Oracle driver, created a DSN, but it gave error message box as shown below Error Source: M