WSE3.0 encrpyt and sign soap message together with disabled WSAdressing

Good Morning,
my task is to develop client´s applications written in .net4 who calls webservice (written by other- foreign firm in Java). My application, which calls webservice of other firm are: (plugin of MS CRM 2013, windowservice, windowformsapp for testing this communication)..
I had to implement encrypt and sign comunication with this webservice by client and servers certifikate.
I implemented this functions from:
http://msdn.microsoft.com/en-us/library/aa528788.aspx
and
http://msdn.microsoft.com/en-us/library/aa529565.aspx
by WSE 3.0.
Now I have to implement to disable WSAdresing in soap messege. Is it possible to use encrypt and sign from WSE together with disabled WSadressing?
(Other firm needs so as nodes of WSA will not be in soap message). With nodes WSAdresing in soap message, my communication with other webservice do not works. They (other firm) require no WSA nodes in soap message
If it is posible, how to implement this functionality?

Hi Matesak,
I'm afraid this is not the most suitable forum for your question. Please open a new thread in this forum, you'll get more valuable responses.
ASP.NET Forums >
Advanced ASP.NET >
WCF, ASMX and other Web Services
Thanks for your understanding.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Similar Messages

  • How To : Call External Webservice from BPEL and pass SOAP Message to the WS

    Hello All-
    Greetings to all BPEL gurus. I am currently facing difficulties in calling an External Webservice from my BPEL Process and passing SOAP Message to it. The details are below:
    <strong>1. The BPEL process, using database polling feature of DB Adapter, will get the records from the database.</strong>
    <strong>2. Transform the message</strong>
    <strong>3. Call the External Webservice and pass the transformed message as the input to it. However the Webservice expects the BPEL process to send SOAP headers in the input message.</strong>
    I am struggling on how to put the transformed message within a SOAP envelope in the BPEL process.
    If anyone had similar requirements and have successfully been able to send SOAP messages from BPEL process to an external webservice, kindly let me know.
    Also if there is some kind of documentation or any link in the forum that I can refer, please let me know that as well.
    I am new to Webservice integration using BPEL and would really appreciate your help.
    Thanks In Advance
    Regards,
    Dibya

    Hi Dharmendra,
    I am trying to send a SOAP message from my BPEL process to a web service. I have a complete SOAP message in a complex variable defined in the wsdl for the partnerlink (web service). My problem is that when I invoke the partnerlink it fails even though the content shown in the BPEL console looks valid.
    I have set up obtunnel to see what I am actually sending out from BPEL. You mention that BPEL creates the SOAP envelope automatically.
    I think that my problem is a result of this automatic SOAP envelope that BPEL is creating. Do you know if there is a way to turn it off?
    This is what I see in the TCP monitor, please note the double SOAP env:Body:
    <env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <env:Body> <RCMR_IN000002NR01 xmlns="urn:hl7-org:v3" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsa="http://www.w3.org/2005/08/addressing" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
    <env:Header>
    <wsa:To xmlns:wsa="http://www.w3.org/2005/08/addressing">http://testhost/CCS/Service_Endpoint</wsa:To>
    <wsa:From xmlns:wsa="http://www.w3.org/2005/08/addressing">
    <wsa:Address>http://localhost/CCS/Service_Endpoint</wsa:Address>
    <wsa:Metadata>
    <device xmlns:hl7="urn:hl7-org:v3">
    </device>
    </wsa:Metadata>
    </env:Header>
    <env:Body>
    <RCMR_IN000002NR01>
    </RCMR_IN000002NR01>
    </env:Body>
    </RCMR_IN000002NR01>
    </env:Body>
    </env:Envelope>
    Any help is appreciated.
    Regards,
    Aagaard
    Edited by: Aagaard on Oct 30, 2008 8:59 PM
    Should have mentioned. I am using BPEL 10.1.3.4
    Edited by: Aagaard on Oct 31, 2008 8:43 AM
    I have opened a new thread for this question so as to not confuse the issue more than necessary.
    How many SOAP envelopes do you really need?

  • Store-and-forward SOAP messaging in JAX-RPC ??

    JAXM seems dead (although SAAJ lives and is very useful). I want to implement a store-and-forward SOAP messaging system for EAI and give it a Java API. Can I do this in JAX-RPC? Does it make any sense?
    Thanks,
    Mark

    At Java One they were advocating the use of web services over JMS.

  • How to send a signed SOAP message with additional HTTP Header fields

    Our Partner's integration requirements are that we send them asynchronous SOAP messages, that are digitally signed, and whose HTTP headers contains 5 or 6 additional header fields, of which 3 or 4 will need to be dynamically set during the message mapping.  I believe we can use the HTTP adapter for adding new fields to the HTTP header, but don't believe it supports signing.  I believe that the SOAP adapter supports signing, but I'm not clear on how to use it to add fields to the HTTP header.  What is the most straight-forward way to achieve both the signing of the message and the addition of the HTTP header values?
    Thanks,
    Kurt

    >>>What is the most straight-forward way to achieve both the signing of the message and the addition of the HTTP header values?
    Use Java mapping for both.
    1) Signing the message
    You can digitally sign the soap message using many standard api like WSS4j? or  refer Java XML signature API which comes in Jdk1.6.
    Refer these links
    WSS4J  -  http://ws.apache.org/wss4j/axis.html
    Java XML signature : http://java.sun.com/developer/technicalArticles/xml/dig_signature_api/
    2) >>whose HTTP headers contains 5 or 6 additional header fields, of which 3 or 4 will need to be dynamically set during the message mapping
    Use Dynamic configuration API to set the additional header fields during message mapping.

  • HT1551 Hi I havnt been able to download anything for two days, the message just keeps telling me unable to connect please try again later, I have signed off from apple, wifi, and signed back in but with still no luck, I can make purchases on my iPad but N

    Tried everything, keep getting unable to sign in or unable to connect, try again later.  Have unplugged everything and signed out of everything and then signed back in but still no luck. Just can not get on to Apple TV, please help and thank you in advance

    Welcome to the Apple Community.
    Have you tried restarting the router or checking your location settings are correct.
    Do you have any other problems with the Apple TV.

  • Implement a SOAP Request in an SSIS Package that sends a SOAP Message (Env) with Authentication Info, Receives XML FIle?

    We need a small SSIS package to pass a SOAP message to a SOAP server and receive the response xml message. 
    We have the SOAP Endpoint, SOAP Action, and SOAP Message (which contains authentication elements). They work in a Talend Data Integration job (using
    Talend's tSOAP component). A screenshot showing the Talend job and the configuration of the tSOAP component
    is attached.
    We need to implement the same thing in a Microsoft SQL Server 2012 SSIS package but haven't been able to get an SSIS Web Services task to work. 
    We haven't been able to configure it to pass the SOAP Action and SOAP Message.  
    How should this be accomplished in SSIS?
    kholberger

    I guess I was not clear.  The Talend job works perfectly (and it took only a few minutes to configure). 
    I need to replicate the SOAP request function in an SSIS package.  I've been trying to configure an SSIS Web Services Task to do that without success. 
    The SSIS Web Service Task asks for the .wsdl file, which I provide (though the Talend component
    does not ask for it), but the SSIS WST does not ask for the SOAP Action or SOAP message.  The target web service is protected by a security gateway that rejects the SSIS WST request.  Somehow, the Talend tSOAP component sends the
    SOAP message, which contains the security definition and authentication credentials (you can see part of that in the screen shot) which the endpoint accepts.
    The question is: "How does one implement a SOAP web service request in an SSIS package that sends the SOAP Message".
    Thanks.
    kholberger

  • Need help: Using Axis, how to log all incoming and outgoing soap messages??

    Hi all,
    I have a big problem which probably got a simple solution:
    I need to log all incoming messages, and all outgoing messages (request - response).
    I do not want any other information than this. I have tested the log4j and all I get is a LOT of debug information but not the messages as the arrive/leave the system.
    Please help me with this since it is a big problem for me that I cant debug my applications in the way I want...

    I would preffer not to use the tcpmonitor on my server, don�t want to change ports, etc.. I want a better solution which I can choose myself when to use, and that can directly log to my log-database...
    Sorry but tcpmonitor is not a solution here, even though it is a good monitor program

  • Programaticaly check digitaly signed SOAP message

    I have a requirement to check the signature added to a SOAP message programmatically. I need to know the certificate used to sign the message in order to validate parts of the message payload.
    Can anyone point me in the direction of documentation regarding the OC4J ws-security API's. I know there must be an API that will retrieve a certificate from the key store based on the signature reference.
    I am using OC4J 10.1.3.1
    Regards
    Neil

    Hello Neil,
    Yes you are pointing to the good library that is part of the Oracle Security Developer Tools. You should be able to find documentation on this page.
    Regards
    Tugdual Grall

  • Parsing and resetting Soap Message

    Hi,
    I am modifying the Web Services StatlessSession example where I am using an Handler
    and building a new SOAPMessage object. When I test the deployed service I get
    Invocation failed message with following error (I am including just few lines
    from error message):
    <!--RESPONSE.................-->
    <env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema">
    <env:Header>
    </env:Header>
    <env:Body>
    <env:Fault>
    <faultcode>env:Server</faultcode>
    <faultstring>Exception during processing: Error at Line:1, token:[OPENTAGBEGIN]Undefined
    Symbol:getListResponse (see Fault Detail for stacktrace)</faultstring>
    <detail>
    <bea_fault:stacktrace xmlns:bea_fault="http://www.bea.com/servers/wls70/webservice/fault/1.0.0">
    </bea_fault:stacktrace>Error at Line:1, token:[OPENTAGBEGIN]Undefined Symbol:getListResponse
         at weblogic.xml.babel.baseparser.BaseParser.getNameSpace(BaseParser.java:644)
         at weblogic.xml.babel.baseparser.Element.setNameSpace(Element.java:109)
         at weblogic.xml.babel.baseparser.StartElement.parse(StartElement.java:92)
         at weblogic.xml.babel.baseparser.BaseParser.parseElement(BaseParser.java:440)
    My ejb creates the SOAPMessage in following manners:
    public SOAPMessage getList() {
    SOAPMessage amsg = null;
    try {
    // create list message
    amsg = fac.createMessage();
    // Access the SOAPBody object
    SOAPPart part = amsg.getSOAPPart();
    SOAPEnvelope envelope = part.getEnvelope();
    SOAPBody body = envelope.getBody();
    // Create the appropriate elements and add them
    Name bodyName =
    envelope.createName(
    "listing",
    "getListResponse",
    "http://localhost:7001/webservice/TraderService");
    SOAPBodyElement list = body.addBodyElement(bodyName);
    // coffee
    Name stockN = envelope.createName("stock");
    SOAPElement stock = list.addChildElement(stockN);
    Name stockNm1 = envelope.createName("stock-name");
    SOAPElement stockName1 = stock.addChildElement(stockNm1);
    stockName1.addTextNode("IBM International");
    Name symbol1 = envelope.createName("symbol");
    SOAPElement symbolNm1 = stock.addChildElement(symbol1);
    symbolNm1.addTextNode("IBM");
    Name traded1 = envelope.createName("number-traded");
    SOAPElement tradeNum1 = stock.addChildElement(traded1);
    tradeNum1.addTextNode("10");
    Name price1 = envelope.createName("price");
    SOAPElement priceNum1 = stock.addChildElement(price1);
    priceNum1.addTextNode("10.15");
    Name stockNm2 = envelope.createName("stock-name");
    SOAPElement stockName2 = stock.addChildElement(stockNm2);
    stockName2.addTextNode("HP International");
    Name symbol2 = envelope.createName("symbol");
    SOAPElement symbolNm2 = stock.addChildElement(symbol2);
    symbolNm2.addTextNode("HPI");
    Name traded2 = envelope.createName("number-traded");
    SOAPElement tradeNum2 = stock.addChildElement(traded2);
    tradeNum2.addTextNode("20");
    Name price2 = envelope.createName("price");
    SOAPElement priceNum2 = stock.addChildElement(price2);
    priceNum2.addTextNode("20.20");
    Name stockNm3 = envelope.createName("stock-name");
    SOAPElement stockName3 = stock.addChildElement(stockNm3);
    stockName3.addTextNode("Cannon International");
    Name symbol3 = envelope.createName("symbol");
    SOAPElement symbolNm3 = stock.addChildElement(symbol3);
    symbolNm3.addTextNode("CI");
    Name traded3 = envelope.createName("number-traded");
    SOAPElement tradeNum3 = stock.addChildElement(traded3);
    tradeNum3.addTextNode("30");
    Name price3 = envelope.createName("price");
    SOAPElement priceNum3 = stock.addChildElement(price3);
    priceNum3.addTextNode("30.30");
    amsg.saveChanges();
    catch (Exception e) {
    e.printStackTrace();
    return amsg;
    Handler sets the SOAPMessage back to the message context in Handler's handleResponse
    method where arg0 is the MessageContext:
    SOAPMessage amsg = trader.getList();
    ((SOAPMessageContext)arg0).setMessage(amsg);
    Any help/pointer will be really great help. I am using WebLogic 8.1 SP1. I can
    post/send the build.xml if needed.
    Thanks,
    Murtaza

    Hello,
    You might try adding the namespace declaration separately after creating
    the element name, something like this:
    listing.addNamespaceDeclaration("ns1",
    "http://localhost:7001/webservice/TraderService");
    This is just a guess; we really need to see the rest of the code.
    Hope this helps,
    Bruce
    Murtaza wrote:
    >
    Hi,
    I am modifying the Web Services StatlessSession example where I am using an Handler
    and building a new SOAPMessage object. When I test the deployed service I get
    Invocation failed message with following error (I am including just few lines
    from error message):
    <!--RESPONSE.................-->
    <env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema">
    <env:Header>
    </env:Header>
    <env:Body>
    <env:Fault>
    <faultcode>env:Server</faultcode>
    <faultstring>Exception during processing: Error at Line:1, token:[OPENTAGBEGIN]Undefined
    Symbol:getListResponse (see Fault Detail for stacktrace)</faultstring>
    <detail>
    <bea_fault:stacktrace xmlns:bea_fault="http://www.bea.com/servers/wls70/webservice/fault/1.0.0">
    </bea_fault:stacktrace>Error at Line:1, token:[OPENTAGBEGIN]Undefined Symbol:getListResponse
    at weblogic.xml.babel.baseparser.BaseParser.getNameSpace(BaseParser.java:644)
    at weblogic.xml.babel.baseparser.Element.setNameSpace(Element.java:109)
    at weblogic.xml.babel.baseparser.StartElement.parse(StartElement.java:92)
    at weblogic.xml.babel.baseparser.BaseParser.parseElement(BaseParser.java:440)
    My ejb creates the SOAPMessage in following manners:
    public SOAPMessage getList() {
    SOAPMessage amsg = null;
    try {
    // create list message
    amsg = fac.createMessage();
    // Access the SOAPBody object
    SOAPPart part = amsg.getSOAPPart();
    SOAPEnvelope envelope = part.getEnvelope();
    SOAPBody body = envelope.getBody();
    // Create the appropriate elements and add them
    Name bodyName =
    envelope.createName(
    "listing",
    "getListResponse",
    "http://localhost:7001/webservice/TraderService");
    SOAPBodyElement list = body.addBodyElement(bodyName);
    // coffee
    Name stockN = envelope.createName("stock");
    SOAPElement stock = list.addChildElement(stockN);
    Name stockNm1 = envelope.createName("stock-name");
    SOAPElement stockName1 = stock.addChildElement(stockNm1);
    stockName1.addTextNode("IBM International");
    Name symbol1 = envelope.createName("symbol");
    SOAPElement symbolNm1 = stock.addChildElement(symbol1);
    symbolNm1.addTextNode("IBM");
    Name traded1 = envelope.createName("number-traded");
    SOAPElement tradeNum1 = stock.addChildElement(traded1);
    tradeNum1.addTextNode("10");
    Name price1 = envelope.createName("price");
    SOAPElement priceNum1 = stock.addChildElement(price1);
    priceNum1.addTextNode("10.15");
    Name stockNm2 = envelope.createName("stock-name");
    SOAPElement stockName2 = stock.addChildElement(stockNm2);
    stockName2.addTextNode("HP International");
    Name symbol2 = envelope.createName("symbol");
    SOAPElement symbolNm2 = stock.addChildElement(symbol2);
    symbolNm2.addTextNode("HPI");
    Name traded2 = envelope.createName("number-traded");
    SOAPElement tradeNum2 = stock.addChildElement(traded2);
    tradeNum2.addTextNode("20");
    Name price2 = envelope.createName("price");
    SOAPElement priceNum2 = stock.addChildElement(price2);
    priceNum2.addTextNode("20.20");
    Name stockNm3 = envelope.createName("stock-name");
    SOAPElement stockName3 = stock.addChildElement(stockNm3);
    stockName3.addTextNode("Cannon International");
    Name symbol3 = envelope.createName("symbol");
    SOAPElement symbolNm3 = stock.addChildElement(symbol3);
    symbolNm3.addTextNode("CI");
    Name traded3 = envelope.createName("number-traded");
    SOAPElement tradeNum3 = stock.addChildElement(traded3);
    tradeNum3.addTextNode("30");
    Name price3 = envelope.createName("price");
    SOAPElement priceNum3 = stock.addChildElement(price3);
    priceNum3.addTextNode("30.30");
    amsg.saveChanges();
    catch (Exception e) {
    e.printStackTrace();
    return amsg;
    Handler sets the SOAPMessage back to the message context in Handler's handleResponse
    method where arg0 is the MessageContext:
    SOAPMessage amsg = trader.getList();
    ((SOAPMessageContext)arg0).setMessage(amsg);
    Any help/pointer will be really great help. I am using WebLogic 8.1 SP1. I can
    post/send the build.xml if needed.
    Thanks,
    Murtaza

  • How to process encrypted and signed PGP message in BC library ?

    Message is encrypted by rsa and idea algorithm. I've got decrypted idea sesssion key. But i don't know how to decrypt this message (and what is the structure). Maybe somebody would post working code for that operation.

    Here is another option.
    I had the same problem with my Mac OSX System 10.8.4 after update cups from 1.6.2 to 1.6.3.
    I have a MacBookPro with the same system version and copy the libcups.2.dylib file form /usr/lib/ then replace the error file in my other Mac.
    1. Install cups 1.6.2 again
    2. Replace the file libcups.2.dylib in /usr/lib/ directory with this one libcups.2.dylib
    Note: I added the link if you dont have an other mac in the same version available.
    This works for me.

  • Do AS2 and AS3 all play together with Director?

    Hi,
    I am about to make some incremental changes to a AS2 and Dir CD UI design.
    I like the AS3 for making a new movie player and its handling of XML.
    I need to share variables between all of them.
    Do I need to worry about this mixed environment?
    Thanks,
    Jim

    Sean,
    Yes normally do that. I am in the paper/planning stage. I am trying to assign functions to Dir and Flash.
    It is simple (first) and elegant I am trying to design towards
    I am testing some of the feature with AS2 SWF right now. On rmore issue to debug, and I will need to make a descision on my souce for XML.
    I really want to use AS3 in the long run. Although AS2 is better for my newbie programmers (they really only change text strings and add instance names).
    AS3 stuff will be singletons that they never get to modify - play movies, run EXE's, open PDF's, goto URL's, tooltips, read XML (for them to supply unique info to external items), etc..
    Greensock has some exelent AS3 addons that make it easy to do all of these thing and other XML related (in my design) features and minimize memory use and leaks.
    Thanks

  • Possible to use both PowerPC and Intel-based systems together with Qmaster?

    Hello,
    New to the Qmaster setup, I was wondering if it was possible to set up a Qmaster cluster mixing PowerPC and Intel-based systems. If it is possible, what version of Qmaster would support this type of cluster?

    While it can work, note that if there is huge difference is processing speed, the PPC machine can actually slow down the process as everything waits for it to finish it's instance and copy it back.
    It's worth a try but keep an eye on how the various computers perform.
    Have fun.
    x

  • SOAP message format after signing

    Experts,
    Can any one tell me the format of the soap message after the message is signed with certificate issued by third party?
    I am getting signed soap message as follows :
    - <SOAP:Envelope xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/">
    - <SOAP:Header>
    - <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" SOAP:mustUnderstand="1">
      <wsse:BinarySecurityToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="sap-6" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">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</wsse:BinarySecurityToken>
    - <wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="wsu-targetID-eed81bc1-2818-11de-a649-000e0cf559d1">
      <wsu:Created ValueType="xsd:dateTime">2009-04-13T10:50:41Z</wsu:Created>
      <wsu:Expires ValueType="xsd:dateTime">2009-04-13T10:55:41Z</wsu:Expires>
      </wsu:Timestamp>
    - <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    - <ds:SignedInfo>
      <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
      <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
    - <ds:Reference URI="#wsuid-body-eed81bc0-2818-11de-cc6a-000e0cf559d1">
    - <ds:Transforms>
      <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
      </ds:Transforms>
      <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
      <ds:DigestValue>ybxqsfOoHwh8eItwlr2GgCzrN8Y=</ds:DigestValue>
      </ds:Reference>
    - <ds:Reference URI="#wsu-targetID-eed81bc1-2818-11de-a649-000e0cf559d1">
    - <ds:Transforms>
      <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
      </ds:Transforms>
      <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
      <ds:DigestValue>Kdki/tVoqS6zmkF7x8nA19QouzM=</ds:DigestValue>
      </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>a60173OR4QNYvp/0nEFjPaR2wR6glTj1FQO31YNGn0NR5XKuB2Ye3dfsfwfB6bdDEmXwvOcEfNln grH7hjoItDC1z8luCpXjs7Gy2viF4XCOdgqxC6MnFOwdZpKodrjESYTjzsNUiXcHUEntGzv4Ry8U zCEw9lLT7koAcTXk/NM=</ds:SignatureValue>
    - <ds:KeyInfo>
    - <wsse:SecurityTokenReference>
      <wsse:Reference URI="#sap-6" />
      </wsse:SecurityTokenReference>
      </ds:KeyInfo>
      </ds:Signature>
      <wsse:BinarySecurityToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="sap-6" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">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</wsse:BinarySecurityToken>
      <wsse:BinarySecurityToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="sap-6" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">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</wsse:BinarySecurityToken>
      </wsse:Security>
      </SOAP:Header>
    - <SOAP:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="wsuid-body-eed81bc0-2818-11de-cc6a-000e0cf559d1">
    - <ns0:MasterData xmlns:ns0="http://s24dh043/SA2SEC/WSD/SATOSEC">
    - <MasterData_Input>
      <PARTNER_ID>XYZ</PARTNER_ID>
      </MasterData_Input>
      </ns0:MasterData>
      </SOAP:Body>
      </SOAP:Envelope>
    In the above soap envelope tag "BinarySecurityToken" repeated thrice. So is it the standard method or I am missing any configuration. Becacuse our partner(webmethods) understands only one occurance of "BinarySecurityToken" in soap message.
    Edited by: Santhosh on Apr 13, 2009 1:42 PM

    Hi ,
    Just a few pointers:
    "Element caching should not be used at the top levels of an XML document by a generic encoder, since it is
    unlikely that the full document would be repeated. With SOAP, it is typically wise to start element caching at the
    third level, i.e. leave Envelope and Body alone. Of course, if the encoder has more knowledge of the messages
    sent, going further up may pay off."
    regards
    joel

  • Signing a soap message seems to not work in jwsdp14

    I'm trying to sign a soap message according to the latest oasis specifications (http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0.pdf) using the libraries provided with jwsdp14 (mainly xmlsec.jar).
    As far as I know, there is not yet documention/example about this specific issue.
    The following is the code I have to sign a soap message: it seems to work fine because the signed soap message respects the above specifications... but what I notice is that the digest and the signature values it contains are always the same, I mean: if i change the source soap message, the signed soap message in output is always the same!
    Any clue??
    import com.sun.org.apache.xml.security.Init;
    import com.sun.org.apache.xml.security.signature.XMLSignature;
    import com.sun.org.apache.xml.security.transforms.Transforms;
    import com.sun.org.apache.xml.security.utils.Constants;
    import com.sun.xml.wss.*;
    import com.sun.xml.wss.reference.DirectReference;
    import org.w3c.dom.Document;
    import javax.xml.soap.SOAPHeader;
    import javax.xml.soap.SOAPMessage;
    import javax.xml.soap.SOAPBody;
    import java.io.File;
    import java.io.FileInputStream;
    import java.io.FileOutputStream;
    import java.security.PrivateKey;
    import java.security.cert.X509Certificate;
    public class Main {
    public static void main(String[] args) {
    // The file from which we will load the sample SOAP message
    String fileName = "F:\\SampleSoapMessage.xml";
    // Store the WSSE signed message here
    String signatureFileName = "F:\\SignedSampleSoapMessage.xml";
    try {
    // Initialize the apache libraries
    Init.init();
    // Obtain security elements from the keystore
    PrivateKey privateKey = MySecurityUtils.getPrivateKey();
    X509Certificate cert = MySecurityUtils.getCertificate();
    // Obtain a sample SOAPMessage from a file
    FileInputStream fis = new FileInputStream(new File(fileName));
    Document doc = XMLUtil.toDOMDocument(fis);
    SOAPMessage message = MyFileUtils.getMessageFromFile(doc);
    SOAPHeader header = message.getSOAPHeader();
    SOAPBody body = message.getSOAPBody();
    // Set the wsu:Id attribute to the Body
    XMLUtil.setWsuIdAttr(body, "MyId");
    // Create a WSSE context for the SOAP message
    SecurableSoapMessage sssm = new SecurableSoapMessage(message);
    // Create a security header for the message (<wsse:Security>)
    SecurityHeader sh = sssm.findOrCreateSecurityHeader();
    // Insert the certificate (<wsse:BinarySecurityToken>)
    X509SecurityToken stoken = new X509SecurityToken(header.getOwnerDocument(), cert, "X509TokenRef");
    sh.insertHeaderBlock(stoken);
    // Insert the keyinfo referring to the certificate (<ds:KeyInfo>)
    KeyInfoHeaderBlock kihb = new KeyInfoHeaderBlock(header.getOwnerDocument());
    SecurityTokenReference secTR = new SecurityTokenReference(header.getOwnerDocument());
    DirectReference dirRef = new DirectReference();
    dirRef.setURI("#X509TokenRef");
    secTR.setReference(dirRef);
    kihb.addSecurityTokenReference(secTR);
    //sh.insertHeaderBlock(kihb);
    // Insert the Signature block (<ds:Signature>)
    SignatureHeaderBlock shb = new SignatureHeaderBlock(header.getOwnerDocument(), XMLSignature.ALGO_ID_SIGNATURE_RSA);
    Transforms transforms = new Transforms(header.getOwnerDocument());
    transforms.addTransform(Transforms.TRANSFORM_C14N_EXCL_OMIT_COMMENTS);
    shb.addSignedInfoReference("#MyId", transforms, Constants.ALGO_ID_DIGEST_SHA1);
    shb.addChildElement(kihb.getAsSoapElement());
    sh.insertHeaderBlock(shb);
    // Digest all References (#MyId) in the SignedInfo, calculate the signature value
    // and set it in the SignatureValue Element
    shb.sign(privateKey);
    // Add the signature data to the header element
    header.addChildElement(sh.getAsSoapElement());
    // Save the signed SOAP message
    FileOutputStream fos = new FileOutputStream(new File(signatureFileName));
    message.writeTo(fos);
    message.writeTo(System.out);
    } catch (Exception exc) {
    exc.printStackTrace();
    System.out.println("An error has occurred : " + exc.toString());
    PS: Classes MySecurityUtils and MyFileUtils are not included since they have nothing interesting.
    The sample input sopa message is:
    <?xml version="1.0" encoding="UTF-8"?>
    <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
    <SOAP-ENV:Header>
    </SOAP-ENV:Header>
    <SOAP-ENV:Body>
    <Intestazione>
    </Intestazione>
    </SOAP-ENV:Body>
    </SOAP-ENV:Envelope>
    and the output signed sample message is:
    <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
    <SOAP-ENV:Header>
    <wsse:Security SOAP-ENV:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    <ds:SignedInfo>
    <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    <ds:Reference URI="#MyId">
    <ds:Transforms>
    <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    </ds:Transforms>
    <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    <ds:DigestValue>2jmj7l5rSw0yVb/vlWAYkK/YBwk=</ds:DigestValue>
    </ds:Reference>
    </ds:SignedInfo>
    <ds:SignatureValue>
    YdKNSPWnx630AYeZ6AXVco1b0RMo8C3WWbziq7C009gg4nhknEZmH0ds78y328SgAlAAVR6Swwok
    HE3OWgL8TZ1Ks0IimmmDd8/XIb2KlfiqnUNtTjGjUn9FLQEv/CMbmrCr7EO9rf/N+0cyAyGzrKo5
    ieEQhtZy9uZAKh2mrmM=
    </ds:SignatureValue>
    <ds:KeyInfo>
    <wsse:SecurityTokenReference>
    <wsse:Reference URI="#X509TokenRef"/>
    </wsse:SecurityTokenReference>
    </ds:KeyInfo></ds:Signature><wsse:BinarySecurityToken EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="X509TokenRef">MIIDITCCAsugAwIBAgIQIdu5EMFuQntM5IBOMeFcETANBgkqhkiG9w0BAQUFADCBqTEWMBQGA1UE
    ChMNVmVyaVNpZ24sIEluYzFHMEUGA1UECxM+d3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5L1Rl
    c3RDUFMgSW5jb3JwLiBCeSBSZWYuIExpYWIuIExURC4xRjBEBgNVBAsTPUZvciBWZXJpU2lnbiBh
    dXRob3JpemVkIHRlc3Rpbmcgb25seS4gTm8gYXNzdXJhbmNlcyAoQylWUzE5OTcwHhcNMDQwODA1
    MDAwMDAwWhcNMDQwODE5MjM1OTU5WjBhMQswCQYDVQQGEwJJVDENMAsGA1UECBMEUk9NQTENMAsG
    A1UEBxQEcm9tYTEOMAwGA1UEChQFaXNzcGExDjAMBgNVBAsUBWNoaWVmMRQwEgYDVQQDFAt3d3cu
    dGVzdC5pdDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAtIsomDk9VthgMorPmG0dAwqLtTBi
    U69liwopwrnAbtzIiO56R9yh4tXvG9+QWtEFRcDHVwWi9YdaHQFCvjymnNYDUHkpJsWp11nIAfOA
    k+d9v1YDje4S6oba7tsIJSEkUu7LQ888Q3cGt/KUaEu6b0lZJ5zY9slK0onUPeTB3e8CAwEAAaOB
    0TCBzjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIFoDBCBgNVHR8EOzA5MDegNaAzhjFodHRwOi8vY3Js
    LnZlcmlzaWduLmNvbS9TZWN1cmVTZXJ2ZXJUZXN0aW5nQ0EuY3JsMFEGA1UdIARKMEgwRgYKYIZI
    AYb4RQEHFTA4MDYGCCsGAQUFBwIBFipodHRwOi8vd3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5
    L1Rlc3RDUFMwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBBQUAA0EA
    Y66OqTOpHcpNUPlD4A38s8bPIIjrf+C+Wv08lUj+DGN5pm+gBWdbWEGaQmqU8fPPtGrQnHz2NAUr
    ZmLaEw/qKw==</wsse:BinarySecurityToken></wsse:Security></SOAP-ENV:Header>
    <SOAP-ENV:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="MyId">
    <aTag>
    <aChild>a value</aChild>
    </aTag>
    </SOAP-ENV:Body>
    </SOAP-ENV:Envelope>
    NOTE: Check the value of <ds:SignatureValue> and <ds:DigestValue>: they never change even if I change the body of the source message.

    Quoting Farrukh's reply to this question on java.net -
    I can share some examples of how I have used JWSDP 1.4 and XML DSIG API to sign and verify a "standalone" soap message with and without mime attachments.
    Please see the following Utility class written for the freebXML Registry project [1] for an example of how to do what you seek:
    http://cvs.sourceforge.net/viewcvs.py/ebxmlrr/omar/src/java/org/freebxml/omar/common/security/SecurityUtil.java?view=markup
    See methods signSOAPMessage(...), signPayload(...), verifySOAPMessage(...) and verifyPayloadSignature(...)
    What you are trying to do is definitely doable and has been done with JWSDP 1.4. In my experience XML DSIG API met my needs very well.
    Best of luck.
    [1] freebXML Registry Project:
    http://ebxmlrr.sourceforge.net
    ---------------------------------------------------------------------------------

  • Business Service sign a message with always same certificate

    Hello,
    We  need to call an external web service that require the request be signed by a certificate.
    Our organization has an Oracle Service Bus and our intention is use the bus to facilitate our clients the calls.
    I did the next steps:
    1.- I Have configured the keystore of OSB with the certificated.
    2.- I have made the business service, with the end-point the external ws.
    3.- I Have configured the sign-body ws-policy in business service.
    4.- When i prove it with debug console of OSB, i select the keystore provider and it works.
    The problem is:
    When I make the Proxy Service seems that the Business Service give the requirement to the Proxy for sign the message,  and what I want is publish the Proxy Service without this requirement and sign the message with always the same certificate.
    I would like the message was signed by Proxy Service or Business Service, and not by clients who call the OSB.
    I don't know how configure it on OSB.
    It is possible to configure OSB in that way?
    Thanks
    Miguel

    Hello,
    Can you please confirm the following
    1. You are setting up an expired certificate as the host certificate for your host (or) are you trying to sign an ASPX file with an expired certificate?
    2. The webserver where you are hosting this ASPX (IIS I presume), has only certificate based authentication enabled - is that right?
    3. You are seeing that when the user opens the website they are prompted that the certificate has expired, and even if they chose to move forward, they are not able to - is that the issue?
    4. If (3) is not the issue and you want to be able to get access to the certificate-expiration error as part of the ASPX code, then that wouldn't be possible because the certificate validation would happen as part of the TLS connection negotiation
    If you can please provide some more details, it will help.
    Thank you

Maybe you are looking for

  • Retro Pay

    Assume an employee gets paid 1,500 for August. Now payroll comes to know that his salary is actually 2,000 and not 1,500. The following are the steps required to be performed. 1. Define a new element which can be used to pay the Retro amount 2. Make

  • Cd/dvd failure?

    ugh. just got this last year, but i think the cd/dvd drive died. if i put an audio cd in, it makes a lot of noise (like it's trying to read it), then i open some media software (i.e. WMP) and it alleges that i don't even have an F drive. then if i go

  • How do I get maps to give me directions?

    I can get directions on maps but when I hit start I don't get the voice or dynamic direction so I have to scroll the top green instruction bar to get the next turn. Sometimes if I go in and out it starts working as a normal sat nav and is pretty good

  • Saving adobe form data to XML

    Am trying to see what happens when user fills in adobe form and clicks submit. What will be sent back to server? Filled PDF or XML? If its XML, does it get stored on the user's machine in some temporary files?? If not, atleast where does it get store

  • Source Systems tree in RSA1

    Hi! The top level of Source Systems tree consists of folders BI, SAP etc. Is the folder BI empty after system installation? Thanks, Olga