SOAOrderBoooking and obtunnel

Question

Hi,
I installed soa suite 10.1.3.1.0 and SoaOrderBooking demo. Everything works, but then I tried to encrypt &decrypt credit card info sent to CreditValidatingService and the following error occurs:
Faulted while invoking operation "VerifyCC" on provider "CreditValidatingService".
- <messages>
- <input>
- <validateRequest>
- <part xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="CreditCard">
- <CreditCard xmlns="http://www.globalcompany.com/ns/credit.xsd">
<ccType xmlns="">
AMEX
</ccType>
<ccNum xmlns="">
12345678
</ccNum>
</CreditCard>
</part>
</validateRequest>
</input>
- <fault>
- <remoteFault xmlns="http://schemas.oracle.com/bpel/extension">
- <part name="code">
<code>
Client
</code>
</part>
- <part name="summary">
<summary>
Caught exception while handling request: unexpected element name: expected={http://www.globalcompany.com/ns/credit.xsd}CreditCard, actual={http://www.w3.org/2001/04/xmlenc#}EncryptedData
</summary>
</part>
- <part name="detail">
<detail>
null
</detail>
</part>
</remoteFault>
</fault>
</messages>
Copy details to clipboard
[2008/09/16 15:58:46]
"{http://schemas.oracle.com/bpel/extension}remoteFault" has been thrown.
- <remoteFault xmlns="http://schemas.oracle.com/bpel/extension">
- <part name="code">
<code>
Client
</code>
</part>
- <part name="summary">
<summary>
Caught exception while handling request: unexpected element name: expected={http://www.globalcompany.com/ns/credit.xsd}CreditCard, actual={http://www.w3.org/2001/04/xmlenc#}EncryptedData
</summary>
</part>
- <part name="detail">
<detail>
null
</detail>
</part>
</remoteFault>
It seems that something is wrong with decrypting phase.
I tried to use obtunnel to see SOAP messages, but I can not see anything. Can somebody help me with setting obtunnel to debug thing.
brg
Edited by: user5037528 on Sep 17, 2008 1:05 AM

Answer 1

1. Start up a TCP tunnel listening on port 1234 (or whatever you used for your Gateway CreditValidatingService port).
* Either start a BPEL Developer Prompt, or from a command line, call SOA_HOME\bpel\bin\obsetenv.bat
* To start the TCP tunnel, issue the following at the command line:
"%JAVA_HOME%\bin\java" -classpath %OB_CLASSPATH% org.collaxa.thirdparty.apache.axis.utils.tcpmon 1234 localhost 8888
* Once it is running, check the XML Format checkbox at the bottom left corner. This doesn't change the data that's displayed, but puts it in a nicer format.
2. Run new instance of order booking tutorial (or use instance from prior demo). Show that the credit card information is sent in open text across the network in the TCP tunnel.
3. In OWSM Console click Policy Management > Manage Policies. We need to do two things in OWSM, encrypt the outgoing message and encrypt the incoming message.
4. Encrypt Outbound SSN
* Click the Policies link for the MyGateway row
* Click the pencil to edit the CreditValidatingService policy pipeline
* In the Request pipeline, add a step below the Start or Log pipeline step
* Select XML Encrypt from the drop-down in the Step Template
* Click OK
* Click the Configure link for your new XML Encrypt step
o Keystore location = (wherever you stored your keystore file above) for example: C:\Products\OWSM\mykeystore
o Keystore password = welcome1
o Public key alias = keyalias
o (I usually explain now that you could encrypt just a part of the message, e.g. just the credit card number with an XPATH expression but for speed of demo, I'll just encrypt the entire message, so leave all the other settings as defaults)
* Click OK > Next > Save > Commit
5. Decrypt Inbound SSN
* Click Policy Management > Manage Policies
* Click Policies link for CreditValidatingServiceAgent
* Click pencil to edit Default Policy
* In Request pipeline, add step below Start or Log pipeline step
* Select XML Decrypt and click OK
* Click Configure for new XML Decrypt step
o Keystore location = same as above
o Keystore password = welcome1
o Decryptors private key alias = keyalias
o Private key password = welcome1
* Click OK > Next > Save > Commit
9. Run new order through and see data encrypted in TCP Tunnel!