Message protection (Encryption) through OWSM in BPEL process 11g

Question

What is my requirements ?_
I want to encrypt the messages in BPEl process using OWSM message protection policies
What is the configuration i am using ?_
Weblogic Server 10.3.3
Soa Server 11.1.1.3.0
Oracle JDeveloper 11.1.1.3.0
What I have done so far ?_
(1) Created one Sync BPEl process (CalledAddition) which take two input and add them and give the output
(2) Created one more Sync BPEL process (CallerProcess) which takes two input and call the above created bpel process
(CalledAddition) and get the response back as addition of two number.
Now I want to Add OWSM Message protection policy to Encrypt the message in Main BPEl process(CallerProcess) and the called service (CalledAddition) decrypt the message upon invocation. It is a very simple scenario.
For this purpose I have done the following OWSM Policy Configuration:
(1) Created a java keystore as follows
keytool -genkey -keyalg RSA -keystore test_keystore.jks -storepass welcome1 -alias client_key -keypass welcome1 -dname "CN=Client, OU=WEB AGE, C=US" -keysize 1024 -validity 1460
(2) Copy the keystore (test_keystore.jks) to location domain/config/fmwconfig.
(3) Go to EM console/WeblogicDomain/Security/Credential and delete the map oracle.wsm.security and then again created it, with no key inside.
(4) Go to EM console/WeblogicDomain/Security/SecurityProviderConfiguration and configure the above created keystore as follows:
(i) Keystore Type=JKS, Keystore Path=./test_keystore.jks, password=welcome1, confirmPassword=welcome1
(ii) Signature Key:
Key Alias=client_key, Signature Password=welcome1, confirmPassword=welcome1
(iii)Encryption Key:
Crypt Alias=client_key, Crypt Password=welcome1, confirmPassword=welcome1
(5) Now restart the server (both Weblogic and SOA server)
(6) Now again go to EM console/WeblogicDomain/Security/Credential and open expand the oracle.wsm.security map, Automatically
the following keys are made inside it:
(i) sign-csf-key
(ii) enc-csf-key
(iii) keystore-csf-key
Created one more key inside it explicitly:
(iv) basic.credentials with username=weblogic and password=welcome1
(7) Go to EM console/WeblogicDomain/WebServices/Policy and cretaed the following policies:
oracle/wss11_message_protection_service_policy:
(i) select policy oracle/wss11_message_protection_service_policy from list and click on create like button. This will create a copy of the policy with different name.
(ii) Give the new name as oracle/wss11_message_protection_service_policy_Copy ( which is by default)
(iii) Local Optimization = off and enabled is checked
(iv) Attachment Attributes …..
Applies To=Service BIndings and Service Category=Service Clients
(v) Assertions …..
Select middle assertion MessageProtection and Advertised=checked and Enforced=checked
(vi) Configuration....
Add following Configure properties, if present already edit them as follows:
(a) name=keystore.enc.csf.key, property set=standard-security-properites, value=enc-csf-key, Type=Optional
(b) name=keystore.sig.csf.key, property set=standard-security-properites, value=sign-csf-key, Type=Optional
(c) name=role, property set=standard-security-properites, Default=ultimateReceiver, Type=Optional
(v) Setting.........
Done the following setting
- Message Security/include timestamp=unchecked
- Message Signing Setting/Include entire body=unchecked (since we need only encryption, no signing of message)
- Message Encrypt Setting/include entire body=checked
(vi) Validate and save
(vi) Thus a new policy is made in domain with name oracle/wss11_message_protection_service_policy_Copy
Simmilarly create oracle/wss11_message_protection_client_policy:
(ii) Give the new name as oracle/wss11_message_protection_client_policy_Copy ( which is by default)
(iv) Attachment Attributes …..
Applies To=Service BIndings and Service Category=Service Endpoint
(vi) Configuration....
Add following Configure properties, if present already edit them as follows:
(a) name=keystore.recipient.alias, property set=standard-security-properites, value=client_key, Type=Optional
(b) name=role, property set=standard-security-properites, Default=ultimateReceiver, Type=Optional
(vi) Thus a new policy is made in domain with name oracle/wss11_message_protection_client_policy_Copy
Rest of the steps(i,iii and v) are same as described above in case of service policy
After creating the policies in domain attach them to the bpel process as follows:
(1) Go to SOA project (CallerProcess) in EM console.
(2) Click on policy tab
(3) First attach the client policy (oracle/wss11_message_protection_client_policy_Copy) to the endpoint of the process CallerProcess.
(4) Then attach the service policy (oracle/wss11_message_protection_serivce_policy_Copy) to the reference in CallerProcess which is calling CalledAddition.
(5) Now test the process (CallerProcess)
pass input say 10 and 20 in input
Upon testing it give the following error_
Web Service invocation Failed:
oracle.sysman.emSDK.webservices.wsdlapi.SoapTestException: InvalidSecurity : error in processing the WS-Security security header
I have made all thing clear. I have gone through several documents but unable to find the solution. If anyone please help me in this case.
Thanks

Answer 1

I have followed same steps and getting same errror.
User 868153, were you able to resolve this issue.
Appreciate your help.
Thanks