Sitemap

Amicuk Programming Answers

Confirming method to secure web services through oracle web service manager

2015-10-11   Views:6

Advertisement

Hi All, I am just wondering about the method to secure web service through oracle web service manager. I have a unsecure web service "helloworld" which is deployed on JWSDP1.6 toolkit.I want to secure it through oracle web service manager. Inord

Hi All,
I am just wondering about the method to secure web service through oracle web service manager.
I have a unsecure web service "helloworld" which is deployed on JWSDP1.6 toolkit.I want to secure it through oracle web service manager.
Inorder to secure this unsecure web service,I use gateway(web service manager for securing web service using message level security through certificate).
So when client want to access the helloworld service,it contacts the gateway securely and gateway intern connect to original web service after decrypting and verification of the signature.When gateway gets response from the web service,it signs the response message and then encrypt and passs on to the client.
So my question is,is it the right way to secure web service?
As I am getting the following fault exception :
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode "http://schemas.oblix.com/ws/2003/08/Faults">c</faultcode>
<faultstring>Step execution failed with an exception
</faultstring>
<detail></detail>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
I checked the log at :
C:\coresv_install_home\external\oc4j-10.1.2.0.0\j2ee\home\log\http-web-access
but there is no helpful information available.Thanks for any help.
Kash

The replay answer
Advertisement
Hi Rajesh,
Thanks for your reply.I am using the following policy steps:
1)for Request (Decrypt and Verify signature).
2)for Response(Sign Message and Encrypt).
The configuration for Request is shown below:
Pipeline "Request"
Pipeline Steps:
Start Pipeline
Log
Decrypt and Verify Signature
Basic Properties Type Default Value
Enabled (*) boolean true true
XML Decryption Properties Type Default Value
Decryptor''s keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-keystore.jks
Decrypt Keystore Type (*) string jks jks
Decryptor''s keystore password string *******
Decryptor''s private-key alias (*) string s1as
Decryptor''s private-key password string *******
Enforce Encryption (*) boolean true true
XML Signature Verification Properties Type Default Value
Verifying Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-truststore.jks
Verifying Keystore type (*) string jks jks
Verifying Keystore password string *******
Signer''s public-key alias (*) string xws-security-client
Enforce Signing (*) boolean true true
End Pipeline
And the configuration for Response is shown below:
Pipeline "Response"
Pipeline Steps:
Start Pipeline
Log
Sign Message and Encrypt
Basic Properties Type Default Value
Enabled (*) boolean true true
Signing Properties Type Default Value
Signing Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-keystore.jks
Signing Keystore Type (*) string jks jks
Signing Keystore password string *******
Signer''s private-key alias (*) string s1as
Signer''s private-key password string *******
Signed Content (*) string BODY BODY
Sign XPATH Expression string
Sign XML Namespace string[]
Encryption Properties Type Default Value
Encryption Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-truststore.jks
Encrypt Keystore Type (*) string jks jks
Encryption Keystore password string *******
Decryptor''s public-key alias (*) string xws-security-client
Encrypted Content (*) string BODY BODY
Encrypt XPATH Expression string
Encrypt XML Namespace string[]
End Pipeline
I checked the log again but nothing useful there,it is just giving the following values:
2006-08-14 16:32:50,372 INFO [Thread-21] mstore.OLiteMStore - SELECT MEASUREMENT_STR FROM MEASUREMENT_PERSISTED_STORE WHERE ID=? FOR UPDATE
2006-08-14 16:34:50,364 INFO [Thread-16] mstore.OLiteMStore - INSERT INTO MEASUREMENT_PERSISTED_STORE (ID,DEF_ID,CONTEXT_ID,PARENT_CONTEXT_ID,TIME,STORETIME,KEY0,KEY1,KEY2,KEY3,KEY4,KEY5,KEY6,KEY7,KEY8,KEY9,KEY10,KEY11,KEY12,KEY13,KEY14,KEY15,KEY16,KEY17,KEY18,KEY19,KEY20,KEY21,KEY22,KEY23,KEY24,KEY25,KEY26,KEY27,KEY28,KEY29,KEY30,KEY31,KEY32,KEY33,KEY34,KEY35,KEY36,KEY37,KEY38,KEY39,DBM0,MEASUREMENT_STR) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'R',empty_clob())
2006-08-14 16:34:50,364 INFO [Thread-16] mstore.OLiteMStore - SELECT MEASUREMENT_STR FROM MEASUREMENT_PERSISTED_STORE WHERE ID=? FOR UPDATE
Any help would be appreciated.Thanks.
Kash

Go to See the other 3 answers

Confirming method to secure web services through oracle web service manager

Category:DefaultRelease time:2015-10-11Views:130

Hi All, I am just wondering about the method to secure web service through oracle web service manager. I have a unsecure web service "helloworld" which is deployed on JWSDP1.6 toolkit.I want to secure it through oracle web service manager. Inord[More]

Error while invoking a WS-Security secured web service from Oracle BPEL..

Category:DefaultRelease time:2015-10-11Views:130

Hi , We are facing some error while invoking a WS-Security secured web service from our BPEL Process on the windows platform(SOA 10.1.3.3.0). For the BPEL process we are following the same steps as given in an AMIS blog : - [http://technology.amis.nl[More]

Secured web service for secured AM method

Category:DefaultRelease time:2015-10-11Views:130

Hello, I need to invoke method of secured Application Module (jbo.security.enforce = Must) from secured web service. I have a simple java class with Configuration.createRootApplicationModule ... and a web service built for this java class. I found I[More]

SJSAS 8.2 secure and unsecure methods in one web service with ws-security

Category:DefaultRelease time:-0001-11-30Views:130

Hi I'm trying to deploy a web-service (using SJSAS 8.2) using JAXRPC using message security (at the application level). I have one simple question: I have an EJB that exposes 2 methods as web-services, I specified in the sun-ejb-jar.xml that one of t[More]

How Oracle IDM secure web services ?

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I am using Oracle Product. Wanted to know How IDM can secure web services or one has to use OWSM/OPSS something like this or what security setting we can do at weblogic level? Help Appreciated.Hi, I am using Oracle Product. Wanted to know How IDM[More]

Calling secured web service, cross domain security

Category:DefaultRelease time:2015-10-11Views:130

Hey all, I am trying to call a secured service, for which i need to enable cross domain security. I have followed the steps described in http://download.oracle.com/docs/cd/E15523_01/web.1111/e13707/domain.htm#i1176046 i.e. enabling trust between webl[More]

Calling secured Web Service

Category:DefaultRelease time:2015-10-11Views:130

Hi, I am new in calling web service from PL/SQL block. From the code I'm successfully able to call non-secured webservice like this "http://www.ignyte.com/webservices/ignyte.whatsshowing.webservice/moviefunctions.asmx?wsdl" And also by setting t[More]

Secured Web service performance problem in BPEL 11g

Category:DefaultRelease time:-0001-11-30Views:130

Hi, When calling Secured web service from BPEL 11g, performance issue is coming. Actually when we test a Secured web service using SOAP UI, Average response time is 2-3 secs. Where when we are calling from BPEL, average response time is 18-22 secs. S[More]

Can config wallet on cloud DB for security web service invoke ?

Category:DefaultRelease time:-0001-11-30Views:130

Currently, I can invoke the security web service by APEX at my local DB env. based the apex_web_service API http://docs.oracle.com/cd/E37546_01/doc/doc.41/e28475/apex_web_service.htm#AEAPI537 we need wallet to store the cert files. want to confirm th[More]

[ANN] Online seminar - Web services management and security seminar

Category:DefaultRelease time:-0001-11-30Views:130

Join us now (Thu 09:00am) for a live seminar about Web services management and security here: http://www.oracle.com/technology/tech/java/newsletter/seminars.htmlI have got the following error when i run the WebServicesAssembler.jar D:\Oracle\Oc4j\j2e[More]

Error when trying to access a secured web service from Forms 10g 10.1.2.3

Category:DefaultRelease time:2015-10-11Views:130

Hello, I'm trying to access a secured web service from Forms10g 10.1.2.3 but i'm getting the next error when pressing the button the first time: java.rmi.RemoteException: ; nested exception is: HTTP transport error: javax.xml.soap.SOAPException: java[More]

Hot
I use leopard OS and when I try to open a video from sites like NBA, the file is opened in quicktime player outside the site. I want to see it embedded on the webpage, than opening quicktime in a seperate window. Is there any preferences I can change [More]
I've no idea how to reset the old password in my macbook pro. Because this is my father gave it to me then even he also forgot the password too! Please I need help! T.T If not I cant download software in this computer. how? Because even him also forg [More]
Yesterday firefox stopped responding to middle-mouse clicks made in the bookmarks toolbar. Middle mouse buttons still work in web pages.Hi, Please check if this happens in [https://support.mozilla.com/en-US/kb/Safe%20Mode Safe Mode]. Safe mode disabl [More]
Hi Gurus In the Agent Inbox I can view Emails, Service Tickets & Follow-up Transactions. Currently I can forward Emails to other employees, but I cannot forward Service Tickets or Follow-ups. Is this purely config, if so where must I look? Many Thank [More]
Hi Experts, I am able to access MDM server through MDM Console, Here mainlyI got two errors. Error 1:- I am not able to create new repository through Console.when I click on "create Repository" option in Console,it will try to connect DBMS serve [More]
Hello, I bought the NI LabVIEW RIO Evaluation Kit (with sbRIO9636). I have problem with the sbRIO9636. The voltag in J502,DIO Pin 49 and 50 is less than 5V (just 1.7V). so VCC of the LabVIEW RIO Evaluation board with a digital encoder, LCD screen, fu [More]
WebDAV share points are missing in OS X Server 10.8. To see for yourself: 1) Do a clean-install of OS X Server 10.8 with a single admin account and a .local host name. 2) In Server.app -> File Sharing, enable WebDAV access for the three default share [More]
I make a schedule  to run at night for an info package but the power is off at night How I can repeat this request again Do I need to delete the failed request?Hi Anas, I agree with Mrituynjay. In addition to that when you schedule the IP, a pop up a [More]
http://nokiaplanb.com/ We are a group of nine young Nokia shareholders. All of us have worked with Nokia in different capacities in the past. We plan to challenge the company's strategy and partnership with Microsoft in the next Annual General Meetin [More]
Had a Service transfer many reels of old family movies (in no particular order) onto DVD discs. Goal is to edit out clips I don't want, move clips around, add music, etc. to create a family story. I transferred files from both DVD's into Movies folde [More]