jacinto
12 years agoOccasional Contributor
x509 Signing and Encryption Security Policy
Hi,
I'm trying to make a x509 Authenticated and protected message request, by calling an OSB service, consifured in this way:
- X509 protocol with authentication and Encryption
- Self Private Key to Sign
- Destination Public Key to Encrypt
- Recipient Public Key name in the message
this is one of the most likely information on this I've found:
http://blog.thilinamb.com/2011/02/invok ... -with.html,
and it didn'yt work, I assume the version is different, than mine (4.5.0), and all the other information I've found is old or could't meet my security configuration, because everytime I try to request to the service I get this error, where an element is missing, and I assum its the Recipient Key Alias:
'WSM-00092 : The <EncryptedKey> element is missing in the request.'
I tried to call the service by a JDev Client in java and it worked, this is the values passed:
- Security Policy: oracle/wss11_x509_token_with_message_protection_client_policy
If anyone could give any hint on this I would really appreciate,
Thanks for all the help
I'm trying to make a x509 Authenticated and protected message request, by calling an OSB service, consifured in this way:
- X509 protocol with authentication and Encryption
- Self Private Key to Sign
- Destination Public Key to Encrypt
- Recipient Public Key name in the message
this is one of the most likely information on this I've found:
http://blog.thilinamb.com/2011/02/invok ... -with.html,
and it didn'yt work, I assume the version is different, than mine (4.5.0), and all the other information I've found is old or could't meet my security configuration, because everytime I try to request to the service I get this error, where an element is missing, and I assum its the Recipient Key Alias:
'WSM-00092 : The <EncryptedKey> element is missing in the request.'
I tried to call the service by a JDev Client in java and it worked, this is the values passed:
- Security Policy: oracle/wss11_x509_token_with_message_protection_client_policy
reqContext.put(ClientConstants.WSSEC_KEYSTORE_TYPE, "JKS");
reqContext.put(ClientConstants.WSSEC_KEYSTORE_LOCATION, "C:/KeystoresWork/ClientStore.jks");
reqContext.put(ClientConstants.WSSEC_ENC_KEY_ALIAS, "serverkey"); (Encryption Key)
reqContext.put(ClientConstants.WSSEC_RECIPIENT_KEY_ALIAS, "serverkey"); (Recipient Key)
reqContext.put(ClientConstants.WSSEC_SIG_KEY_ALIAS, "clientkey"); (Sign Key)
If anyone could give any hint on this I would really appreciate,
Thanks for all the help