Sitemap

Amicuk Programming Answers

Confirming method to secure web services through oracle web service manager

2015-10-11   Views:6

Advertisement

Hi All, I am just wondering about the method to secure web service through oracle web service manager. I have a unsecure web service "helloworld" which is deployed on JWSDP1.6 toolkit.I want to secure it through oracle web service manager. Inord

Hi All,
I am just wondering about the method to secure web service through oracle web service manager.
I have a unsecure web service "helloworld" which is deployed on JWSDP1.6 toolkit.I want to secure it through oracle web service manager.
Inorder to secure this unsecure web service,I use gateway(web service manager for securing web service using message level security through certificate).
So when client want to access the helloworld service,it contacts the gateway securely and gateway intern connect to original web service after decrypting and verification of the signature.When gateway gets response from the web service,it signs the response message and then encrypt and passs on to the client.
So my question is,is it the right way to secure web service?
As I am getting the following fault exception :
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode "http://schemas.oblix.com/ws/2003/08/Faults">c</faultcode>
<faultstring>Step execution failed with an exception
</faultstring>
<detail></detail>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
I checked the log at :
C:\coresv_install_home\external\oc4j-10.1.2.0.0\j2ee\home\log\http-web-access
but there is no helpful information available.Thanks for any help.
Kash

The replay answer
Advertisement
Hi Rajesh,
Thanks for your reply.I am using the following policy steps:
1)for Request (Decrypt and Verify signature).
2)for Response(Sign Message and Encrypt).
The configuration for Request is shown below:
Pipeline "Request"
Pipeline Steps:
Start Pipeline
Log
Decrypt and Verify Signature
Basic Properties Type Default Value
Enabled (*) boolean true true
XML Decryption Properties Type Default Value
Decryptor''s keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-keystore.jks
Decrypt Keystore Type (*) string jks jks
Decryptor''s keystore password string *******
Decryptor''s private-key alias (*) string s1as
Decryptor''s private-key password string *******
Enforce Encryption (*) boolean true true
XML Signature Verification Properties Type Default Value
Verifying Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-truststore.jks
Verifying Keystore type (*) string jks jks
Verifying Keystore password string *******
Signer''s public-key alias (*) string xws-security-client
Enforce Signing (*) boolean true true
End Pipeline
And the configuration for Response is shown below:
Pipeline "Response"
Pipeline Steps:
Start Pipeline
Log
Sign Message and Encrypt
Basic Properties Type Default Value
Enabled (*) boolean true true
Signing Properties Type Default Value
Signing Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-keystore.jks
Signing Keystore Type (*) string jks jks
Signing Keystore password string *******
Signer''s private-key alias (*) string s1as
Signer''s private-key password string *******
Signed Content (*) string BODY BODY
Sign XPATH Expression string
Sign XML Namespace string[]
Encryption Properties Type Default Value
Encryption Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-truststore.jks
Encrypt Keystore Type (*) string jks jks
Encryption Keystore password string *******
Decryptor''s public-key alias (*) string xws-security-client
Encrypted Content (*) string BODY BODY
Encrypt XPATH Expression string
Encrypt XML Namespace string[]
End Pipeline
I checked the log again but nothing useful there,it is just giving the following values:
2006-08-14 16:32:50,372 INFO [Thread-21] mstore.OLiteMStore - SELECT MEASUREMENT_STR FROM MEASUREMENT_PERSISTED_STORE WHERE ID=? FOR UPDATE
2006-08-14 16:34:50,364 INFO [Thread-16] mstore.OLiteMStore - INSERT INTO MEASUREMENT_PERSISTED_STORE (ID,DEF_ID,CONTEXT_ID,PARENT_CONTEXT_ID,TIME,STORETIME,KEY0,KEY1,KEY2,KEY3,KEY4,KEY5,KEY6,KEY7,KEY8,KEY9,KEY10,KEY11,KEY12,KEY13,KEY14,KEY15,KEY16,KEY17,KEY18,KEY19,KEY20,KEY21,KEY22,KEY23,KEY24,KEY25,KEY26,KEY27,KEY28,KEY29,KEY30,KEY31,KEY32,KEY33,KEY34,KEY35,KEY36,KEY37,KEY38,KEY39,DBM0,MEASUREMENT_STR) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'R',empty_clob())
2006-08-14 16:34:50,364 INFO [Thread-16] mstore.OLiteMStore - SELECT MEASUREMENT_STR FROM MEASUREMENT_PERSISTED_STORE WHERE ID=? FOR UPDATE
Any help would be appreciated.Thanks.
Kash

Go to See the other 3 answers

Confirming method to secure web services through oracle web service manager

Category:DefaultRelease time:2015-10-11Views:130

Hi All, I am just wondering about the method to secure web service through oracle web service manager. I have a unsecure web service "helloworld" which is deployed on JWSDP1.6 toolkit.I want to secure it through oracle web service manager. Inord[More]

Error while invoking a WS-Security secured web service from Oracle BPEL..

Category:DefaultRelease time:2015-10-11Views:130

Hi , We are facing some error while invoking a WS-Security secured web service from our BPEL Process on the windows platform(SOA 10.1.3.3.0). For the BPEL process we are following the same steps as given in an AMIS blog : - [http://technology.amis.nl[More]

Secured web service for secured AM method

Category:DefaultRelease time:2015-10-11Views:130

Hello, I need to invoke method of secured Application Module (jbo.security.enforce = Must) from secured web service. I have a simple java class with Configuration.createRootApplicationModule ... and a web service built for this java class. I found I[More]

SJSAS 8.2 secure and unsecure methods in one web service with ws-security

Category:DefaultRelease time:-0001-11-30Views:130

Hi I'm trying to deploy a web-service (using SJSAS 8.2) using JAXRPC using message security (at the application level). I have one simple question: I have an EJB that exposes 2 methods as web-services, I specified in the sun-ejb-jar.xml that one of t[More]

How Oracle IDM secure web services ?

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I am using Oracle Product. Wanted to know How IDM can secure web services or one has to use OWSM/OPSS something like this or what security setting we can do at weblogic level? Help Appreciated.Hi, I am using Oracle Product. Wanted to know How IDM[More]

Calling secured web service, cross domain security

Category:DefaultRelease time:2015-10-11Views:130

Hey all, I am trying to call a secured service, for which i need to enable cross domain security. I have followed the steps described in http://download.oracle.com/docs/cd/E15523_01/web.1111/e13707/domain.htm#i1176046 i.e. enabling trust between webl[More]

Calling secured Web Service

Category:DefaultRelease time:2015-10-11Views:130

Hi, I am new in calling web service from PL/SQL block. From the code I'm successfully able to call non-secured webservice like this "http://www.ignyte.com/webservices/ignyte.whatsshowing.webservice/moviefunctions.asmx?wsdl" And also by setting t[More]

Secured Web service performance problem in BPEL 11g

Category:DefaultRelease time:-0001-11-30Views:130

Hi, When calling Secured web service from BPEL 11g, performance issue is coming. Actually when we test a Secured web service using SOAP UI, Average response time is 2-3 secs. Where when we are calling from BPEL, average response time is 18-22 secs. S[More]

Can config wallet on cloud DB for security web service invoke ?

Category:DefaultRelease time:-0001-11-30Views:130

Currently, I can invoke the security web service by APEX at my local DB env. based the apex_web_service API http://docs.oracle.com/cd/E37546_01/doc/doc.41/e28475/apex_web_service.htm#AEAPI537 we need wallet to store the cert files. want to confirm th[More]

[ANN] Online seminar - Web services management and security seminar

Category:DefaultRelease time:-0001-11-30Views:130

Join us now (Thu 09:00am) for a live seminar about Web services management and security here: http://www.oracle.com/technology/tech/java/newsletter/seminars.htmlI have got the following error when i run the WebServicesAssembler.jar D:\Oracle\Oc4j\j2e[More]

Error when trying to access a secured web service from Forms 10g 10.1.2.3

Category:DefaultRelease time:2015-10-11Views:130

Hello, I'm trying to access a secured web service from Forms10g 10.1.2.3 but i'm getting the next error when pressing the button the first time: java.rmi.RemoteException: ; nested exception is: HTTP transport error: javax.xml.soap.SOAPException: java[More]

Hot
My itouch is disabled, when I tried to restore it, it came up with Error code 3094.  Has anyone had this error code appear for them before and how were they able to fix it? Thank YouSee SIMPLE easy solution for 1015 3094 3014 21 errorRead other 2 ans [More]
Hi, I am wandering if anyone is aware of a bug or else with READ_IMAGE_FILE within Forms 6i, its just that I have been successfully storing away images to the DB by the hundreds without any problems but have just a handfull of cases that refuse, infa [More]
I lost all email 6 months and older in mac mail. In my in-box as a well as all other folders I created. I expected that the mac email software would keep all email as it did for me in when I used to use Outlook. As well I thought I was covered with t [More]
I have 2 Roadrunner accounts that use the same outgoing smtp server. In order for me to send email (receiving POP email is not a problem), I have to set the outgoing server for port 25, no SSL and no authentication. I can get one of the accounts to w [More]
I've recently installed the new version of 7.1 (but this may be a red herring as I had a previous version of iTunes 7.-something) with Windows XP. iTunes is not working properly - the mouse is very unresponsive, "sticks", won't play, you have to [More]
Hi Gurus,               Here is my requirement. Business wants to store list of line items as template by the time of taking the orders. This templates will be used for future order reference. I want to create a new sales document type which is copy [More]
I found a tutorial on how to use the ExternalInterface with C# and then tried the one that is in the help file with Javascript.. and its not working at all. The Javascript (after just copying and pasting all the code) gives me errors, and in C# (whic [More]
Here's whats going on. I'm shooting on a T2i, and I import the .mov files into FCP just fine, they playback and all. I've export project after project without problems with this same setup. I export the project using quicktime, and the export has gra [More]
Hi, ive just created an application and would like to include a javahelp with it, ive got it running off my local machine with the java helpset working too , but what im wondering is, is it possbile to include jhall.jar in the application jar so peop [More]
Hi All I want the out put of a report in DOC file so that user can make changes in that report and then can print. this one is the requirement. but using a reports 9i the out put can be in PDF and HTML file. is this one possible that i can get the ou [More]