Digital Signatures for Client non repudation (Headers)

Hi: I'm developing a Web Service in WLS7.0 SP2. The backend component is ready.
I now have to sign the client request (hopefully using xml security), i.e. add
the signature as a soap header in the client using a handler, then on the server
side use a handler to intercept the soap request, verify the signature and forward
it to the backend component.
Basically, all I need is how to add a header element using handlers on the client
side and then reading that signature on the server side.
Can someone give me some hints?
Thanks in advance,
Jose Selman

Thanks for your help Bruce, but unfortunatelly my customers are using platform
7.0 in their production servers, and they are not interested in upgrading.
I'm one step away from the solution though... I'm using apache's XML Security
package. Once I get over the whole thing I'll post the solution here.
Best Regards,
Jose
Bruce Stephens <[email protected]> wrote:
Hi Jose,
Digital Signatures and Data Encryption was added in WLS 8.1
See: http://e-docs.bea.com/wls/docs81/webserv/security.html
Bruce
Jose Selman wrote:
Hi: I'm developing a Web Service in WLS7.0 SP2. The backend componentis ready.
I now have to sign the client request (hopefully using xml security),i.e. add
the signature as a soap header in the client using a handler, thenon the server
side use a handler to intercept the soap request, verify the signatureand forward
it to the backend component.
Basically, all I need is how to add a header element using handlerson the client
side and then reading that signature on the server side.
Can someone give me some hints?
Thanks in advance,
Jose Selman

Similar Messages

  • How to get digital signature for Google Map geocoding V3 in PL/SQL?

    Hi, Gurus:
        Could anyone provide me an example about how to generate digital signature for Google Maps service v3 in PL/SQL? We tried to upgrade our program using Google maps service from v2 to v3. We are using PL/SQl on background to send request to Google for geocoding. We found some sample code to register with digital signature, but none of them is based on PL/SQl. Notice I used Google business client ID "gme-XXX" and wallet.
    https://developers.google.com/maps/documentation/business/webservices/auth#digital_signatures
    Google Maps API - more URL signing samples
    Here is my code for V2. I notice in order to get signature, I need to use HMAC-SHA1 algorithm.
    procedure Get_Geocoding(P_s_Address in varchar2, P_s_Geocoding out varchar2, P_n_accuracy out number, P_b_success out boolean) is
      l_address varchar2(4000);
      l_url varchar2(32000);
      l_response varchar2(3200);
      n_first_comma number;
      n_second_comma number;
      n_level_length number;
    BEGIN
      /* TODO implementation required */
      l_address:=APEX_UTIL.URL_ENCODE(P_s_Address);
      l_address := replace(l_address,' ','+');
      l_url := 'http://maps.google.com/maps/geo?q='||l_address||'&'||'output=csv'||'&'||'client=gme-XXX';
    l_response := utl_http.request(l_url, APEX_APPLICATION.G_PROXY_SERVER, '/u02/app/oracle/admin/apexsb/wallet', 'XXXXXXXX');
      n_level_length:=0;
      n_first_comma:=instr(l_response,',',1,1);
      n_second_comma:=instr(l_response,',',1,2);
      n_level_length:=n_second_comma-n_first_comma-1;
      P_n_accuracy:=0;
      if n_level_length>0 then
      P_n_accuracy:=to_number(substr(l_response,n_first_comma+1, n_level_length));
      end if;
      l_response:=substr(l_response,instr(l_response,',',1,2)+1);
      --dbms_output.put_line('In function: l_response ='||l_response);
      P_s_Geocoding:=l_response;
      if (P_s_Geocoding<>'0,0') then
      P_b_success:=true;
      --dbms_output.put_line('true');
      else
      P_b_success:=false;
      --dbms_output.put_line('false');
      end if;
    END;
    Thanks!

    Hi, guys:
        I tried to generate digital signature for Google map service
         Maps for Business: Generating Valid Signatures - YouTube
        Generating an HMAC-SHA-1 Signature Using Only PL/SQL
          OAuth and the PL/SQL | Data Warehouse in the Cloud
       but I got error message from Google:
    Unable to authenticate the request. Provided 'signature' is not valid for the provided client ID. Learn more: https://developers.google.com/maps/documentation/business/webservices/auth
       I think there is something wrong with my code to generate signature, as if I remove the part regarding client and signature, it will work, can anyone help me on this problem?
    /*Procedure Get_Geocoding is used to get geocoding with accuracy level for V3 business account, you can find Google map digital signature descrirption from
    https://developers.google.com/maps/documentation/business/webservices/auth#digital_signatures
    if geocoding is 0,0, procedure returns false to indicate failure of get geocoding*/
    procedure Get_Geocoding2(P_s_Address in varchar2, P_s_Geocoding out varchar2, P_n_accuracy out number, P_b_success out boolean) is
      --private key for Google business account, this is provided by Google with client name.
      l_private_key_src varchar2(200):='xxxxxxxxxxxxxxxxxxx';
      l_private_key_b64_alter varchar2(200):= translate(l_private_key_src,'-_','+/');
      l_private_key_bin raw(2000);
      l_client_name varchar2(100):='gme-xxx';
      l_signature_mac raw(2000);
      l_signature_b64 varchar2(200);
      l_signature_b64_alter_back varchar2(200);
      l_Google_service_domain varchar2(200):='http://maps.googleapis.com';
      l_address varchar2(4000);
      l_url varchar2(32000);
      l_path varchar2(32000);
      l_response varchar2(32000);
      l_page UTL_HTTP.HTML_PIECES;
      n_actual_length number;
      json_obj json;
      json_tempobj json;
      jl_listOfValues json_list;
      json_geom_obj json;
      json_loc json;
      l_lat  VARCHAR2(40);
      l_lng  VARCHAR2(40);
      l_status VARCHAR2(255);
      json_accuracy json;
      --temp_string varchar2(10000);
      n_first_comma number;
      n_second_comma number;
      n_level_length number;
      BEGIN
    /* TODO implementation required */
    l_private_key_bin := utl_encode.base64_decode(UTL_I18N.string_to_raw(l_private_key_b64_alter, 'AL32UTF8'));
    l_address:=APEX_UTIL.URL_ENCODE(P_s_Address);
    --dbms_output.put_line(l_address);
    l_address := replace(l_address,' ','+');
    l_path := '/maps/api/geocode/json?address='||l_address||'&'||'sensor=true';
    dbms_output.put_line(l_path);
    l_signature_mac :=DBMS_CRYPTO.mac(UTL_I18N.string_to_raw(l_path, 'AL32UTF8'), DBMS_CRYPTO.hmac_sh1,l_private_key_bin);
    l_signature_b64:= UTL_RAW.cast_to_varchar2(UTL_ENCODE.base64_encode(l_signature_mac));
    l_signature_b64_alter_back:=translate(l_signature_b64,'+/','-_');
    dbms_output.put_line(l_signature_b64_alter_back);
    --get response from Google map service
    l_url:=l_Google_service_domain||l_path||'&client='||l_client_name||'&signature='||l_signature_b64_alter_back;
    --l_url:=l_Google_service_domain||l_path;
    dbms_output.put_line(l_url);
    l_page:=utl_http.request_pieces( l_url, 99999);
    for i in 1..l_page.count loop
    l_response:=l_response||l_page(i);
    end loop;
    n_actual_length:=length(l_response);
    dbms_output.put_line(n_actual_length);
    dbms_output.put_line(l_response);
    --parse JSON result
    json_obj:=new json(l_response);
    l_status := json_ext.get_string(json_obj, 'status');
    IF l_status = 'OK' then
    jl_listOfValues := json_list(json_obj.get('results'));
    json_tempobj := json(jl_listOfValues.get(1));
    json_geom_obj := json(json_tempobj.get(3));
    json_loc := json_ext.get_json(json_geom_obj, 'location');
    l_lat := to_char(json_ext.get_number(json_loc, 'lat'));
    l_lng := to_char(json_ext.get_number(json_loc, 'lng'));
    P_s_Geocoding:=l_lat||','||l_lng;
    dbms_output.put_line('##########'||P_s_Geocoding);
    case json_ext.get_string(json_geom_obj, 'location_type')
    when 'ROOFTOP' then P_n_accuracy:=9;
    when 'RANGE_INTERPOLATED' then P_n_accuracy:=7;
    when 'GEOMETRIC_CENTER' then P_n_accuracy:=5;
    else P_n_accuracy:=3;
    end case;
    P_b_success:=true;
    else
    P_b_success:=false;
    P_n_accuracy:=0;
    P_s_Geocoding:='0,0';
    end if;
      END;

  • Digital Signature for 10.5.7 is invalid.

    I get this message every time i try to get the update.
    [quote]The digital signature for this package is incorrect. The package may have been tampered with or corrupted since being signed by “Apple”.

    OK Guys. i think I may of figured this out. I have been having this error for monthes upon monthes with every update apple had released.
    I did the following things, and it resolved this on 2 machines (one was a newer machine, which i pulled the info over using migration assistant.
    1) Uninstalled Cisco VPN Client (using sudo /usr/local/bin/vpn_uninstall )
    2) Removed any preference file in /Library/Preferences/ and ~/Library/Preferences/ that had any of the following names (only com.apple files) Security, software update, loginwindow, finder, etc.
    3) Removed all the keychain files, located in /Library/Keychain/ and ~/Library/Keychain/
    Ran the Keychain fix utility at /Applications/Utilities/Keychain Access
    Ran a fix on the keychains (there are none, you deleted them) This will recreate a new keychain for you.
    Rebooted.
    All Su ran fine. Again, this is only what worked for me, and like I said, I have had this issue for monthes. No solution that was posted online worked, this seemed to.
    I would say the pref files being deleted might not make a dofference, I think the real culprit is bad keychain files, and maybe the cisco vpn client.
    Can anyone try this, and report back?

  • Implementing digital signatures for Form 16

    I have configured ADS for my development ECC. I need to configure digital signatures for Form 16. Please can anybody guide me how to go about this. I am unable to find a proper document.

    I am following the below mentioned steps for Digital Signature implementation in form 16 HR,but i am stuck in step 3,can anyone guide me through.
    Transaction code: STRUST
    1. Select the newly created ‘SSL Client SOAPClient’
    2. Select Edit -> Create Certificate Request
    3. Copy the Request and sign it (SAPNetCA)
    a) Select Edit -> Import Certificate Response and save
    b) Double click and select ‘SSL Client SOAPClient’ option to load the certificate
    c) Add ‘SSO_CA’ and ‘SAPNetCA’ to Certificate List and save
    Regards,
    Rohit

  • Digital Signatures for mutliple company code

    Hi,
    Our client have multiple company codes & they want to use digital signature for all the company code and there be individual authorised digital signatory for each comp code.
    Now the question is , whether we have procure different digital signature for individual company codes & if so how system will identifies which authorised ditigatl signature should be assigned to respective company code...?
    => We are not able to download Adobe Form local & aslo is it mandatory to have digital signature to download Form 16 on a local system.
    System details : ECC 6
    SP Level : 38
    Thanks & Regrads,

    Digital Signature is person specific
    You have to take the Digital signature ( A number assigned for each signatory with the tool),from an authorized services provided by NSDL
    In a single company code if you have 2/3 signatories , first you need to make groups based on the signing authorities, in combination of PA/PSA/EG/ESG/BA etc
    The form 16 is to be generated on the above criteria applicable.
    3 file of form16 will be generated and send accross to 3 signing authorities
    The signing authority can open the form using the tool ,digitial signatory software install and can authenticate the form16.
    As per NSDL form16 is now not an statuory doucment. Its just an Tax Information of an Employee.
    which is not required to be attached with your ITR's also
    So why do you require the Digital signature to be printed on the form16 . Pls check this up with your finance team
    Thansk & Regards
    Hemant V. Mahale

  • How can I create digital signatures for my users using Windows 2008 Active Directory Certificate Services?

    Hi,
    I need to create local digital signatures for my users. How can I do that using W2k8 Active Directory Certificate Services? We are gonna sign Office 2010 documents.
    What company offers cheap digital signatures solutions?
    Thanks in advanced

    Consider the following:
    if you use your local CA server to issue digital signature certificates, there is no cost, because you are eligible to issue so many certificates as you need. However, documents signed by these certificates will be considered trusted only within your AD
    forest and other machines that explicitly trust your local CA. Any external client will not trust your signatures.
    If you want to make your signature trusted outside your network (say, in worldwide), you need to pruchase a certificate from trusted commercial CA (VeriSign, GoDaddy, GlobalSign, StartCom, etc) according to respective vendor price list. In that case you
    don't need to have your local CA server, because it is not used. All certificate management is performed by the external CA. A most common scenario is to purchase signing certificate for particular departament principals (head managers) or few certificates
    for a whole company (all documents are revised by a responsible person or persons who holds signing certificate and sign them after review).
    so, it is not clear from your post what exactly you need.
    My weblog: http://en-us.sysadmins.lv
    PowerShell PKI Module: http://pspki.codeplex.com
    Windows PKI reference:
    on TechNet wiki

  • Can I create digital signatures for other people?

    I am trying to determine if there are rules/software limitations that prohibit me from creating a digital signature for other people on my PC. As an example, I support a Vice President-can I create his digital signature and store it to use on his behalf? I would also have my own signature created and stored.  Thanks.

    Consider the following:
    if you use your local CA server to issue digital signature certificates, there is no cost, because you are eligible to issue so many certificates as you need. However, documents signed by these certificates will be considered trusted only within your AD
    forest and other machines that explicitly trust your local CA. Any external client will not trust your signatures.
    If you want to make your signature trusted outside your network (say, in worldwide), you need to pruchase a certificate from trusted commercial CA (VeriSign, GoDaddy, GlobalSign, StartCom, etc) according to respective vendor price list. In that case you
    don't need to have your local CA server, because it is not used. All certificate management is performed by the external CA. A most common scenario is to purchase signing certificate for particular departament principals (head managers) or few certificates
    for a whole company (all documents are revised by a responsible person or persons who holds signing certificate and sign them after review).
    so, it is not clear from your post what exactly you need.
    My weblog: http://en-us.sysadmins.lv
    PowerShell PKI Module: http://pspki.codeplex.com
    Windows PKI reference:
    on TechNet wiki

  • Create electronic-digital signature for data

    Hello
    As possible create electronic-digital signature for data, referred through HTTP form internet explorer?
    Thank you very much for your support.

    George,
    Thank you for your submission.  It was helpful. This allowed me to create the signature block without having to place my own digital signature in the block.  However, when I send it to my client (who has Adobe Reader but not Acrobat) she is unable to input her digital signature … I’m now half-way there but I continue to pursue a solution.
    Dave Armstrong
    ============

  • Add on XL reporter : Wrong executable digital signature for Add on

    Hi Experts,
    I have a client who gets this error 'Add on XL reporter : Wrong executable digital signature for Add on' when they try to login. They are on 2007A PL45. This happens on the server as well as on clients. Uninstalll and reinstall of client didn't work.  We had a look at the AddonLocalRegistration folder to see if XL reporter is registered but can't see any.
    I have found a similar link in the forum but that says about 2005b.
    Any help will be appreciated.
    regards
    Johnson

    Sir,
    Please do the following steps :
    1. Please go to the SBO-COMMON database, find table SARI, you will get
    the data entry for your Addon. Please check the value of field
    "AddOnChk". This is the digital signature of Addon executable file.
    2. Then go to installer package of the Addon, open the ard file
    (XLReporter.ard) with notepad then check the value of "addonsig".
    3. Compare these two values, if they are different, please overwrite
    "AddOnChk" field in database with the value of "addonsig" in ard file.
    and then try to start the addon again.
    4. If there are the same, the ard file or the executable file has been
    corrupted. I would like to suggest you remove the installer package
    from your machine, and download a fresh installer of Addon from SAP
    Service Marketplace. After that, please follow the steps as per the
    attached note ( Note no. 819501 ) to make your machine clean and
    then install the addon again.
    Regards,
    AVTAR SINGH

  • Error:Wrong Executable Digital Signature for Add on.

    Hi,
    We we are starting ALL Add on's we are Getting Error; Wrong Executable Digital Signature for Add on . Before Also we got Same Error After that We Uninstall All Add -ons and Freshly we Installed from Partner Portal and Installed. after That Alll Add os it's working OK there is no Error yesterday.but today i login my server it's shwoing Same Error; Wrong Executable Digital Signature for Add on.
    I Checked Digital Signature AddOnChk in SARI Table Under SBO and adddonsig Under Under .ard file in Installer Package. Both are Same. How we Can Solve this issues Please Advise.
    AA_Application runs without Mandatory AddOn
    SAP Note:925984
    See this Link for Wrong executable digital signature for Add-on[https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/smb_searchnotes/display.htm?note_langu=E&note_numm=0000925984|https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/smb_searchnotes/display.htm?note_langu=E&note_numm=0000925984]
    Symptom
    After changing a Mandatory AddOn's executable, without updating the ard file, the error message "Wrong executable digital signature for Add-on" is generated. However the application continues to work normally.
    Other terms
    AddOn, SAP Business One, Mandatory, continues, ard, Wrong executable digital signature for Add-on
    Reason and Prerequisites
    Bug
    Solution
    This issue will be fixed in a 2005A SP1 patch, please refer to the info.txt file on the Service market Place to confirm if the fix was included.
    Can any one Guide me on this Note ? How we can solve this issues.
    Regds,
    Samapth Kuamr Devunuri.
    Edited by: sampathdevunuri kumar on Nov 8, 2008 6:15 AM
    Edited by: sampathdevunuri kumar on Nov 8, 2008 6:18 AM

    Hi,
    The runtime error can be caused by a corrupt installation.    
    I am attaching 2 notes for you to go through.                 
    How to clean client after corrupt installation of add-on and also Re-registering the UI.    
    [808354|https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/smb_searchnotes/display.htm?note_langu=E&note_numm=000808354] UI Server is not loaded with SAP Business One client        
    [819501|https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/smb_searchnotes/display.htm?note_langu=E&note_numm=000819501] How to clean client after corrupt installation of add-on                                
    Please follow the steps in [819501|https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/smb_searchnotes/display.htm?note_langu=E&note_numm=000819501]  to make your machine clean and then install the add-ons again.
    If you are still experiencing problems please try the following: 
    - Backup the SBO Common                                          
    - Re-run Upgrader Common from patch                              
    Result is a new SBO common with a new SARI.        
    hope it helps,
    Regards,
    Ladislav
    SAP Business One Forum Team

  • Error : "Wrong Digital Signature for Addon Installer"

    I'm having some problems at the time of installing any kind of addon in sap B1
    Everytime I'm having an error -
    "Wrong Digital Signature for Addon Installer"
    even when I'm adding SCREEN PAINTER

    Hi
    This error could be cause by a versioning or corrupted installation:
    1. For the version please check if you have another add-on installed with the same version like 2.1.2 (try to change it add-on file and try again)
    You can also try to change the add-on installation order (in case of you have another add-ons installed).
    2. If checking the version does not help please check those notes on How to clean client after corrupt installation of addon and also Re-registering the UI.                                                                               
    808354 UI Server is not loaded with SAP Business One client        
    819501 How to clean client after corrupt installation of addon     
    Paulo Calado
    SAP Business One Forums Team

  • Windows cannot verify the digital signature for the drivers required for this device. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. (Code

    I get this message when I check the Device manager for my Ipod
    Windows cannot verify the digital signature for the drivers required for this device. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. (Code 52)
    How do I resolve this I have reinstalled iTunes but it still doesn't recognise my ipod

    I reinstalled Itunes a couple of times.  I unistalled all programs that I never use, I updated all of my drivers, Windows swept my computer and found no problems.  I have a yellow causion lite when I look at the USB-port with the phone connected.  All other devices work without a problem.

  • Need a Suggestion For implementing the Digital Signature For the Documents

    Hi,
    Currently I am working in a Document Management System. I need a Good Suggestion for how to implement a Digital Signature For the Documents.
    Thanks in Advance
    Sabarish V

    Hmm, if you are not using Oracle Payroll, what are you using for payroll? I am wondering why you could not use your payroll system, whatever it is, to handle this reimbursement program.
    Well, you may want to talk to Oracle support about how to handle this in Oracle iExpense. You can certainly handle advances for Expense Reports. You would then apply the advance to the expense report items. The catch is I don't think you can stop expense item entry after the adavance is satisfied. You would have to set up a work flow process of some kind to have the expense reports reviewed and only approve expenses that are applied to the advance, is what I am thinking. Not your ideal solution, but something to think about. It could be the Oracle folks might know of a sneaky way to handle this. What you are trying to do is unusual. Employee advances are common, but the idea of not being able to exceed the advance amount is what unusual about this. Normally you will accept any expenses over the advance amount and reimburse the employee for those extra amounts not advanced.
    Good luck.
    John Dickey

  • How to format the text  in a Digital Signature for a PDF in landscape orientation?

    I have a custom Digital Signature plug-in which prompts the user to enter few details on a dialog and then renders the signature. Now, the problem is for a page which has PDPageGetRotate value as 90. In this case, the entire content(text) in the signature is rendered reversed i.e its displayed upside down. However, for a page in portrait mode, i.e with rotation value as 0, signature is correctly displayed.
    Can anybody help me by explaining which callback/method to use to frame the text appearance? I think there needs to be some change in the parameters passed to DigSigAPCreateLayeredStreamEx, am i correct?
    Let me know any comments/suggestions on this issue of correctly rendering text in a digital signature for a rotated page.

    Just setup the appropriate transformation matrix.

  • Digital Signatures for Changing the statuses in Issue Mgmt

    Hi
    Has anyone put in place digital signatures for Issue
    Managemnt when we change the status values in an issue.
    We are looking at SAP Note 835584 - Digital signature for documents,
    but that is not applicable for us as we want to initiate the digital
    signature when the status profile "SLFI0001" kicks in and the status is
    changed from one to the other.(eg in process to completed etc)
    We have created the digital signature and the strategies, but are
    looking for a place to attach this with the status profile "SLFI0001".
    Is there a place we can attach the digital signature strategies to this
    status profile?
    Anyone has any ideas on how it can be done?
    Thanks in advance..
    sap ques..

    We have a document that needs to be signed by more than one individual -- and in our process we are using the Topacz signature pad to get the signature.  It's similar to the one you sign at the grocery store, drug store, etc.  In order to NOT have the first signature invalidated, we were told to edit the registry...and it works perfectly!
    [HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\8.0\AVAlert\cCheckbox]
    "iDigSigSaveAsCertified"=dword:00000001
    [HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\8.0\AVAlert\cCheckbox\cAnnots]
    "iReaderEnableSaveWarn"=dword:00000001
    Obviously if you are using a different version of Acrobat, you'll have to change the key accordingly.
    Hopefully this will work with your process.
    Good luck!!

Maybe you are looking for