Question about web service security and certificate registry?

I'm trying to add security to my web service. I've created a keystore and added a certificate that was signed by a CA that I created (for testing only). The documentation says I need to create a Certificate registry and add my CA as a trusted CA. I can't quite figure this step out. Does anyone know how to do this or am I heading in the wrong direction?
thanks

Hi,
I'm almost there. I dont think that you can do exception handling in FormCalc. How do I trap the error. So far I have
if (HasValue(Get("http://despaiqo001.development.local:4001/crossdomain.xml")) == 0) then
$xfa.host.messageBox("not available")
else
$xfa.host.messageBox("got it")
endif
but when I change the URL so it cant access it, I get a form calc exception. Any samples of how I can script it?

Similar Messages

A question about web service

hi experts,
I develop a web service based on abap FM. When the 3party programs call it, user need to input the username/password.
can I config sth for the web service, and user don't need the input user/pass?
Thanks

Hi Michael,
I understand you are worried about security (i.e.people accessing the Service anonymously is something you want to avoid). Also, you don't want the people to have to manually authenticate themselves (i.e. enter a User ID and Password) to execute the Service. In this case, you need to use a more sophisticated authentication technique like X.509 SSL Client Certificate or SAP Single Sign On Ticket. This is a complex subject and not suitable for discussion here. Here are links to topics that could get you started.
1. SAP Help Portal link to the topic Security Aspects for Web Services:
http://help.sap.com/saphelp_nwpi71/helpdata/en/46/a088198f835edfe10000000a11466f/frameset.htm
2. SAP Help Portal link to the topic Making a Web Service Secure:
https://help.sap.com/saphelp_nwpi711/helpdata/EN/47/ab7ba049f84848e10000000a421138/frameset.htm
I hope this helps.
Best Regards,
Andy

Questions about web services

Hi! Experts:
I am at the Web Servivces Navigator.
I have a basic question about it:
We are using MI7.1 which has NO Java stack. Therefore we do NOT have the Web Services Navigator.
How do we use the Web Services for MI7.1?
Thanks!

Hi!
1) SICF lists the BSP services; Web Services are requests between java application to client application.
Are you sure them are the same thing?
2) When I compare the services between web service navigator and SICF, I do not see there is any
relationship. For example, if I search "AdapterMessageMonitoring" in SICF, I cannot find it.
I think SICF and web service navigator are listing totally different services.
Therefore my question is that since MI7.1 has NO Java stack (hence NO web service navigator ), how
are web services handled in MI7.1?
Thanks!

RWB - Integration Engine self test - web service security and proxy

Hi,
I am working with a new installation of PI 7.0. In the runtime workbench, under self test for integration engine, there is this error/warning:
""Details for 'Is Web service security available?'
Communication error: Proxy calls are not permitted on sender or receiver side on the IS (client)""
What exactly is the problem? Is there any additional configuration needed within PI to use proxies? We do not have the cryptographic toolkit installed. Is that nesseccary to work with proxies? We have done several other scenarios with RFC, MAIL, HTTP, etc and they work fine. If anyone else had this problem and managed to fix it, please let me know..
Thanks,
Lasya

You can ignore this error. It is simply a warning that says message level security has not been configured. Without message security too, you can do proxy communication.
But, if you want to configure messag level security, go through XI Config guide section 12.4.
Message was edited by: Jay

Questions about web services and BPEL in ALBPM

Hi all,
We are currently evaluating various BPM products in order to decide which one to use. Currently I am evaluating ALBPM Studio 5.7 and I am running my processes on the embedded engine provided with the studio. I have some questions:
1. We want to be able to use complex types for the web services that are generated for processes. Will this limitation be solved any time in the future?
2. We want to be able to use the generated web services directly (that is, without calling the startSession method first). Is that possible?
3. I could not find extensive documentation about developing BPEL processes. There is only one small chapter in the developer documentation about BPEL processes. Is there any more documentation or sample about how BPEL is used in ALBPM?
4. I have developed a very simple BPEL process, but when I try to deploy it, I get the error "Activity BPEL receive does not have any incoming transitions". How can I resolve this issue? I guess it may be a problem about my PartnerLink definition.
5. When I try to catalog a wsdl which imports another wsdl (and when the imported wsdl also imports some xsds from another namespace), I get an error which says that a web service xxx with namespace yyy is not found, but actually the thing named xxx is not a web service but a soap fault. What could be the problem?
6. Is it possible to write a BP method in PBL for a BPEL activity?
Thanks in advance and best regards..

look for anwsers in the other newsgroup posting:
http://forums.bea.com/bea/message.jspa?messageID=600047258
MAriano
Benitez/BEA/BPM/Beautiful

Question about web service and timeouts

I have a form with a button script that invokes a synchronous soap web service request to an address validation service. It works nicely in testing but I am a bit concerned at what might happen when we go live with respect to the form hanging if the soap server is unavailable or the user is offline.
From some simple tests in production, where the web service is available yet:
     - in Windows, it times out in Adobe Reader 10.1.1 within about 15 seconds; and
     - In the Mac, with Adobe Reader 10.1.3 it takes around 4 1/2 minutes.
The latter is not good, as it hangs Reader the entire time.
Is there some way I can set a timeout in the soap request. Would it be worth considering an async call? If I changed it to async, could I let the user continue to fill the form and then setFocus with an async flag?

Hi,
I'm almost there. I dont think that you can do exception handling in FormCalc. How do I trap the error. So far I have
if (HasValue(Get("http://despaiqo001.development.local:4001/crossdomain.xml")) == 0) then
     $xfa.host.messageBox("not available")
else
    $xfa.host.messageBox("got it")
endif
but when I change the URL so it cant access it, I get a form calc exception. Any samples of how I can script it?

Web Service (SSL) and certificates (keytool) with INternet Explorer

Hi,
Followed this steps http://www.grallandco.com/blog/archives/2006/10/using_htts_with.html to have a secure SSL WEb service (with client authorization).
Tested from Jdeveloper it worked O.K.
Now I would like to test it with Internet explorer, but now server ask for certificate before internet show parameters page to invoke Web Service.
I generated self signed certificates and keystore using keytool. (This keystore is used by the OC4J and my proxy client).
Imported this certificate (.cer) to internet explorer succesfully, but when access URL for the web service (https) internet does not show this certificate to use it, so failed to connect...
keytool certificates could be used by INternet explorer for this purposes?, what am I doing wrong?
Thanks
J.

Hi,
I already configured HTTPS - client authenticate for OC4J, and you can work with follow step:
1: Create keystore for OC4J by java keytool
2: Using openssl to create certificate for your server (privatekey, certificate)
3. Using keytool to import your server's certificate (2) to keystore (1)
4. Generate client certificate (4)
5. Sign on client certificate (4) by privatekey and server certificate (20
6. Import client certificate to windows - (should create keystore with format pkcs12)
You can using "Java Certificate Services" to help you create keystore with multi format or sign cert....
Rgs

Some question about Web service

Hi experts,
I have created a Web service about Function Module 'BAPI_EXCHANGERATE_GETDETAIL'.Now I plan to use Transaction code 'WSADMIN' to create a WSDL.But the display result of IE tell me my host could not be resolved by DNS.I don't know how to solve this question, and which happened based on this question.Is there any experienced experts tell me the solution?
Thanks & Best regards!
Kelvin

Hi,
In your system folder:
C:\WINDOWS\system32\drivers\etc there is a file hosts;
Add your server I address and servername in it.
like:
193.10.100.70 myserver.com MYSERVER
Hope this will resolve the problem. If you do not have authorisation for the same, your network admin will help.
Regards,
Renjith Michael.

Basic question about Web Services

First I wan't to say that i've searched the net for info, and all I could find was some advanced code snipets. However, I would like to start from the begining.
I'm trying to develop a web service which takes XML as input parameter, an returns some other XML.
I developed a WS like that
import org.w3c.dom.Element
public static Element returnElement(Element xml)
{ return xml }Now here's the problem:
I would like to be able to call this WS from other programming languages, like Delphi, C++...
To try and make something like that, I converted xml to String and pass it to a WS. However, this string is too big (about 3200 chars) for HTTP GET to handle.
How can I do that?? Which classes to use? How to represent data in XML form that could be read in Java and other programming languages?
Please, at least, post a link, I just need some basic pointers.
Code examples would be much apreciated.
Thanks a lot in advance,
Good day,
Simon

Hi,
Thanks for your reply. There is a directory on the web logic server's box where the required classes exist. How can I add those to the CLASSPATH? How can I do it from Web Logic Admin Console?
Regards,
Ram

Question about web service client

Hi,
I am creating the a client to call non wls web serveice.
First I need to create the client jar using clientgen. My question is when i create the client jar I need the wsdl file. where is the correct place to store the wsdl file? Also I have development and production wsdl file with the different service location. Do I have to store both of the wsdl files? It's a trouble to remember to build the different client jar for development and production (using different wsdl), is there anyway that I can build the client jar once and somehow dynamically configure to use different wsdl (ie service location) in different environment? Thanks

Hi Holy,
If you know the WSDL hasn't changed since you used it when running the clientgen Ant task, you can just use the one that is inside the JAR that clientgen produces. To do this, you just need to not specify an argument to the XXX_Impl constructor. For instance:
AttachmentPartsService_Impl service = new AttachmentPartsService_Impl();
This has some performance benefits, because it reduces the total number of network calls, the client-side Web Services stack makes. If you specify the URL for the WSDL to the constructor (as recommended by someone else here), the client-side Web Services stack will issue an HTTP GET to get it. Now if the WSDL that is returned uses types that are different than the ones the clientgen Ant task generated classes for (i.e. the ones in the JAR generated by the clientgen Ant task), you are in trouble because the client-side Web Services doesn't generate serialization/deserialization classes (i.e. the ones in the JAR generated by the clientgen Ant task) "on-the-fly".
The service endpoint for a Web Service call can (and should) be set programmatically, from a properties or configuration file. This will look something like this in the code:
import java.util.Properties;
import javax.xml.rpc.Stub;
private static Properties loadProperties(String fileName) throws IOException
if (fileName == null || fileName.length() == 0) return null;
Properties props = new Properties();
FileInputStream fis = null;
try
fis = new FileInputStream(fileName);
props.load(fis);
finally
if (fis != null) try { fis.close(); } catch (Exception ignore){}
return props;
public static void main() throws Exception
Properties props = loadProperties("MyProperties.properties");
Client client = new Client(props);
public Client(Properties properties)
AttachmentPartsService_Impl service = new AttachmentPartsService_Impl();
AttachmentPartsServiceSoap port = service.getAttachmentPartsServiceSoap();
if (schemeHostPort == null) schemeHostPort = "http://localhost:7001";
((AttachmentPartsServiceSoap_Stub)port)._setProperty(
Stub.ENDPOINT_ADDRESS_PROPERTY,
properties.getProperty("production.AttachmentPartsService.serviceEndpointURL"));
This way, you can have a different properties file for each environment you propagate the web service to, as opposed to saving copies of WSDL files just to have the "correct" service endpoint address. It also has the additional benefit of letting you store the service endpoint URLs for more than just one web service.
Regards,
Mike Wooten

A basic question about web service

Hello,
Does all the Web services need to be run under a Web server?
Or it just needs to be run under a server which has either a web container or a J2EE container?
I mean if the application does not need to generate HTML pages, but just generate SOAP messages, do I still need to have a web server?
Thanks!

A J2EE server runs independently and does not require an HTML/HTTP web server.
If you're just interested in SOAP, an application server or servlet engine which understands the SOAP specification will be enough.
--Jon

Question About Web Service Endpoint

Is there a way to specify the endpoint of a Web Service that exposes a Data Source?
For example, if I have a Liquid Data Control jcx with a Java package of foo.bar and the corresponding jws file is also in this package, then the web service endpoint will be http://myserver/myproject/foo/bar/mywebservice.jws.
Is there a way to change this to say something like http://myserver/myproject/services/mywebservice.jws.
Thanks.

JWS files are created by Workshop. Try posting on the Workshop newsgroup or check edocs.

Beginner question about Web Services pack just released

Hi all,
I have seen that Sun just released Web Services early access Api. I'd like to
know if this Api are compatible with Weblogic standards for Web Services. For
example can I use the Sun's JAXM Api with Weblogic for creating and sending Messages?
or do I have to use weblogic Api to do this?
Thanks
Francesco

It defines what the parameter names should be exposed as in the wsdl.
Without specifying it JAX-WS for example would just name the arguments as arg0 and arg1 which i not very meaningful to the client programmer who will use your web service.
- Roy

[ANN] Online seminar - Web services management and security seminar

Join us now (Thu 09:00am) for a live seminar about Web services management and security here:
http://www.oracle.com/technology/tech/java/newsletter/seminars.html

I have got the following error when i run the WebServicesAssembler.jar
D:\Oracle\Oc4j\j2ee\home>java -jar d:/oracle/oc4j/webservices/lib/WebServicesAss
embler.jar -config etc/config.xml
Exception in thread "main" java.util.zip.ZipException: The system cannot find th
e path specified
at java.util.zip.ZipFile.open(Native Method)
at java.util.zip.ZipFile.<init>(ZipFile.java:105)
at java.util.jar.JarFile.<init>(JarFile.java:110)
at java.util.jar.JarFile.<init>(JarFile.java:52)
D:\Oracle\Oc4j\j2ee\home>java -jar WebServicesAssembler.jar -config etc/config.x
ml
Exception in thread "main" java.lang.InstantiationException: Unknown deployment
tag in JMS Web Service Example: <option>
at com.evermind.xml.XMLConfig.parseDeploymentMainNode(XMLConfig.java:293
at oracle.j2ee.ws.tools.WsAssemblerConfig.parseDeploymentMainNode(WsAsse
mblerConfig.java:68)
at com.evermind.xml.XMLConfig.parseRootNode(XMLConfig.java:268)
at com.evermind.xml.XMLConfig.init(XMLConfig.java:147)
at com.evermind.xml.XMLConfig.init(XMLConfig.java:88)
at oracle.j2ee.ws.tools.WsAssemblerConfig.init(WsAssemblerConfig.java:30
at oracle.j2ee.ws.tools.WsAssembler.main(WsAssembler.java:17)

External Web Service - User and password in HTTP header

Hi!
How is it possible to add user and password in the HTTP header in a external web service call?
I have created a "Portal Service from WSDL file - Client side" with the wizard in SAP Developer Studio. I following the Java Development Guide - Web Service Security, and use the <i>secured service connection</i>. I have also created a new <i>System Landscape</i>, but should the new system be based on HTTP, my own PAR or what?
How can I check that the user and password is added to the HTTP header or the SOAP envelope? Do I have to scan http traffic with a proxy as Paros or can I find the request sent from SAP EP in the logs?
Cheers
Asle

Hello All,
I have been struggling a bit while putting a reasonable security framework on a jax-rpc style web service. I'm using JWSDP1.2 to set up the webservice. I've tried to outline my problem below. Please correct me where I'm wrong.
I've been through the Sun's WS tutorials, but they are not really clear on security. However, from them I surmised that there are two decent authentication techniques. HTTP Basic and mutual authentication (MA) . Both have their drawbacks though. HTTP Basic suffers from poor encryption while MA is a bit difficult to set up on both client and server sides. Another problem with MA is that there is no central repository for users/passwords.
OK, what I would really like to do is use my own user database to verify users/passwords i.e. use a HTTP Basic like authentication (but at application level) but run it over SSL for encryption. It seems simple, but is it possible?
Also, I have noted that when I use HTTP Basic on the service side, and use a java client, then setting username/password has no effect. In other words, I can always access the web-service, even with wrong username/password.
Sorry for the long post. Hope someone can help. Thanks.

Question about web service security and certificate registry?

Similar Messages

Maybe you are looking for