Forum Discussion

rfransix's avatar
rfransix
Occasional Contributor
14 years ago

xml message with signature and certificate

Hello, the following is the xml posted to a protected resource. The protected agent requires a signature and a certificate before authenticating the user. I have no idea how to that, anyone with time to submit a sample? I have the x509 cert in the global ssl keystore value with both the authority cert and the user cert.

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ser="http://service.webservice.my.com/">
<soapenv:Header/>
<soapenv:Body>
<ser:postUser>
<uid>=firstname.lastname</uid>
</ser:postUser>
</soapenv:Body>
</soapenv:Envelope>

The Envelop needs to contain a <Signature> and a <userCertificate>, not sure how that should look. Thank you very much.
  • rfransix's avatar
    rfransix
    Occasional Contributor
    14 years ago
    I figured out how the tool works...the outgoing security profile adds the signature dynamically, very cool.

    However, it appears my security agent doesn't like the format...is v4.0.1 building the message (like adding the X509 certificate) differently than 3.0.1.

    Cause 3.01. doesn't add a <x509certificate> element under the <x509Data> element, which is what the agent is looking for.

    Thoughts?