joeberlin
11 years agoNew Contributor
Order of Security Headers
Hi folks!
I am facing the following issue: in my sceurity headers I want to add a timestamp as well as a signature (signing the timestamp). Therefore the timestamp has to be added first, otherwise the signature would fail with "part to sign not found". SoapUI seems to add new sceurity header parts on top of existing parts which in my case means, that the Signature part will appear BEFORE the timestamp. The server (called service) however rejects this configuration (I am not a 100% sure it is because of the order, but I highly suspect it).
Is there a way to define an expected order for security headers? Independently from their order of creation, I mean. :-)
Thanks in advance!
Jan
I am facing the following issue: in my sceurity headers I want to add a timestamp as well as a signature (signing the timestamp). Therefore the timestamp has to be added first, otherwise the signature would fail with "part to sign not found". SoapUI seems to add new sceurity header parts on top of existing parts which in my case means, that the Signature part will appear BEFORE the timestamp. The server (called service) however rejects this configuration (I am not a 100% sure it is because of the order, but I highly suspect it).
Is there a way to define an expected order for security headers? Independently from their order of creation, I mean. :-)
Thanks in advance!
Jan