Securing webservice call from to siebel

Question

Hi,
We have implemented OPA with siebel integration, where in we launch OPA from siebel.OPA calls a webservice on siebel which fetches data from siebel. We want that weservice call to be secured i.e. to use https and not http. Anybody have any idea in doing this. The url in siebel-data-adapter file has to be https and not http.

Answer 1

Ecstasy wrote:
Hi,
We have implemented OPA with siebel integration, where in we launch OPA from siebel.OPA calls a webservice on siebel which fetches data from siebel. We want that weservice call to be secured i.e. to use https and not http. Anybody have any idea in doing this. The url in siebel-data-adapter file has to be https and not http.There are two parts to solving this problem.
Part 1: ( setting up the Siebel Inbound web service so it runs through HTTPS. You should consult the Siebel documentation for this and it will require running HTTPS with a certificate through something like apache or IIS (for windows).
Part 2: Once you have the inbound web services running under HTTPS, you can set the URL in the siebel-data-adapter properties to point to the HTTPS service, however, when you make a call from Web Determinations to Siebel. It will probably fail with a an exception. This will probably happen if you have used an self-signed or untrusted certificate.
The second part of this problem is setting up the java run-time environment to accept the certificate that the HTTPS service is using (set up under part 1). There are several different ways of doing this, but I found the following the easiest.
1. get the public part of the certificate.
2. create a keystore/truststore and add that certificate (or add to existing keystore).
3. point the jvm to that truststore , You do this through setting java system properties.
Example Java properties
In the example below, I have put the public certificate into a keystore called "siebel_wd_keystore" and I want to point my apache-tomcat to use that as a trust store. The system properties that need to be set are as follows.
-Djavax.net.ssl.trustStore="C:\trust_store\siebel_wd_keystore"
-Djavax.net.ssl.trustStorePassword=siebel Because this is tricky there is a very useful system property that you can set, that will give you lots of debugging information about SSL. If its not working, setting this property give you a lot more information in your logs.
-Djavax.net.debug=sslIf the setting above doesnt seem to give you more information, thats probably a sign that you aren't setting the system properties correctly for your application server.