Sitemap

Amicuk Programming Answers

Confirming method to secure web services through oracle web service manager

2015-10-11   Views:1

Advertisement

Hi All, I am just wondering about the method to secure web service through oracle web service manager. I have a unsecure web service "helloworld" which is deployed on JWSDP1.6 toolkit.I want to secure it through oracle web service manager. Inord

Hi All,
I am just wondering about the method to secure web service through oracle web service manager.
I have a unsecure web service "helloworld" which is deployed on JWSDP1.6 toolkit.I want to secure it through oracle web service manager.
Inorder to secure this unsecure web service,I use gateway(web service manager for securing web service using message level security through certificate).
So when client want to access the helloworld service,it contacts the gateway securely and gateway intern connect to original web service after decrypting and verification of the signature.When gateway gets response from the web service,it signs the response message and then encrypt and passs on to the client.
So my question is,is it the right way to secure web service?
As I am getting the following fault exception :
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode "http://schemas.oblix.com/ws/2003/08/Faults">c</faultcode>
<faultstring>Step execution failed with an exception
</faultstring>
<detail></detail>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
I checked the log at :
C:\coresv_install_home\external\oc4j-10.1.2.0.0\j2ee\home\log\http-web-access
but there is no helpful information available.Thanks for any help.
Kash

The replay answer
Advertisement
Hi Rajesh,
Thanks for your reply.I am using the following policy steps:
1)for Request (Decrypt and Verify signature).
2)for Response(Sign Message and Encrypt).
The configuration for Request is shown below:
Pipeline "Request"
Pipeline Steps:
Start Pipeline
Log
Decrypt and Verify Signature
Basic Properties Type Default Value
Enabled (*) boolean true true
XML Decryption Properties Type Default Value
Decryptor''s keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-keystore.jks
Decrypt Keystore Type (*) string jks jks
Decryptor''s keystore password string *******
Decryptor''s private-key alias (*) string s1as
Decryptor''s private-key password string *******
Enforce Encryption (*) boolean true true
XML Signature Verification Properties Type Default Value
Verifying Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-truststore.jks
Verifying Keystore type (*) string jks jks
Verifying Keystore password string *******
Signer''s public-key alias (*) string xws-security-client
Enforce Signing (*) boolean true true
End Pipeline
And the configuration for Response is shown below:
Pipeline "Response"
Pipeline Steps:
Start Pipeline
Log
Sign Message and Encrypt
Basic Properties Type Default Value
Enabled (*) boolean true true
Signing Properties Type Default Value
Signing Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-keystore.jks
Signing Keystore Type (*) string jks jks
Signing Keystore password string *******
Signer''s private-key alias (*) string s1as
Signer''s private-key password string *******
Signed Content (*) string BODY BODY
Sign XPATH Expression string
Sign XML Namespace string[]
Encryption Properties Type Default Value
Encryption Keystore location (*) string C:\Sun\jwsdp-2.0\xws-security\etc\server-truststore.jks
Encrypt Keystore Type (*) string jks jks
Encryption Keystore password string *******
Decryptor''s public-key alias (*) string xws-security-client
Encrypted Content (*) string BODY BODY
Encrypt XPATH Expression string
Encrypt XML Namespace string[]
End Pipeline
I checked the log again but nothing useful there,it is just giving the following values:
2006-08-14 16:32:50,372 INFO [Thread-21] mstore.OLiteMStore - SELECT MEASUREMENT_STR FROM MEASUREMENT_PERSISTED_STORE WHERE ID=? FOR UPDATE
2006-08-14 16:34:50,364 INFO [Thread-16] mstore.OLiteMStore - INSERT INTO MEASUREMENT_PERSISTED_STORE (ID,DEF_ID,CONTEXT_ID,PARENT_CONTEXT_ID,TIME,STORETIME,KEY0,KEY1,KEY2,KEY3,KEY4,KEY5,KEY6,KEY7,KEY8,KEY9,KEY10,KEY11,KEY12,KEY13,KEY14,KEY15,KEY16,KEY17,KEY18,KEY19,KEY20,KEY21,KEY22,KEY23,KEY24,KEY25,KEY26,KEY27,KEY28,KEY29,KEY30,KEY31,KEY32,KEY33,KEY34,KEY35,KEY36,KEY37,KEY38,KEY39,DBM0,MEASUREMENT_STR) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,'R',empty_clob())
2006-08-14 16:34:50,364 INFO [Thread-16] mstore.OLiteMStore - SELECT MEASUREMENT_STR FROM MEASUREMENT_PERSISTED_STORE WHERE ID=? FOR UPDATE
Any help would be appreciated.Thanks.
Kash

Go to See the other 3 answers

Confirming method to secure web services through oracle web service manager

Category:DefaultRelease time:2015-10-11Views:130

Hi All, I am just wondering about the method to secure web service through oracle web service manager. I have a unsecure web service "helloworld" which is deployed on JWSDP1.6 toolkit.I want to secure it through oracle web service manager. Inord[More]

Error while invoking a WS-Security secured web service from Oracle BPEL..

Category:DefaultRelease time:2015-10-11Views:130

Hi , We are facing some error while invoking a WS-Security secured web service from our BPEL Process on the windows platform(SOA 10.1.3.3.0). For the BPEL process we are following the same steps as given in an AMIS blog : - [http://technology.amis.nl[More]

Secured web service for secured AM method

Category:DefaultRelease time:2015-10-11Views:130

Hello, I need to invoke method of secured Application Module (jbo.security.enforce = Must) from secured web service. I have a simple java class with Configuration.createRootApplicationModule ... and a web service built for this java class. I found I[More]

SJSAS 8.2 secure and unsecure methods in one web service with ws-security

Category:DefaultRelease time:-0001-11-30Views:130

Hi I'm trying to deploy a web-service (using SJSAS 8.2) using JAXRPC using message security (at the application level). I have one simple question: I have an EJB that exposes 2 methods as web-services, I specified in the sun-ejb-jar.xml that one of t[More]

How Oracle IDM secure web services ?

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I am using Oracle Product. Wanted to know How IDM can secure web services or one has to use OWSM/OPSS something like this or what security setting we can do at weblogic level? Help Appreciated.Hi, I am using Oracle Product. Wanted to know How IDM[More]

Calling secured web service, cross domain security

Category:DefaultRelease time:2015-10-11Views:130

Hey all, I am trying to call a secured service, for which i need to enable cross domain security. I have followed the steps described in http://download.oracle.com/docs/cd/E15523_01/web.1111/e13707/domain.htm#i1176046 i.e. enabling trust between webl[More]

Calling secured Web Service

Category:DefaultRelease time:2015-10-11Views:130

Hi, I am new in calling web service from PL/SQL block. From the code I'm successfully able to call non-secured webservice like this "http://www.ignyte.com/webservices/ignyte.whatsshowing.webservice/moviefunctions.asmx?wsdl" And also by setting t[More]

Secured Web service performance problem in BPEL 11g

Category:DefaultRelease time:-0001-11-30Views:130

Hi, When calling Secured web service from BPEL 11g, performance issue is coming. Actually when we test a Secured web service using SOAP UI, Average response time is 2-3 secs. Where when we are calling from BPEL, average response time is 18-22 secs. S[More]

Can config wallet on cloud DB for security web service invoke ?

Category:DefaultRelease time:-0001-11-30Views:130

Currently, I can invoke the security web service by APEX at my local DB env. based the apex_web_service API http://docs.oracle.com/cd/E37546_01/doc/doc.41/e28475/apex_web_service.htm#AEAPI537 we need wallet to store the cert files. want to confirm th[More]

[ANN] Online seminar - Web services management and security seminar

Category:DefaultRelease time:-0001-11-30Views:130

Join us now (Thu 09:00am) for a live seminar about Web services management and security here: http://www.oracle.com/technology/tech/java/newsletter/seminars.htmlI have got the following error when i run the WebServicesAssembler.jar D:\Oracle\Oc4j\j2e[More]

Error when trying to access a secured web service from Forms 10g 10.1.2.3

Category:DefaultRelease time:2015-10-11Views:130

Hello, I'm trying to access a secured web service from Forms10g 10.1.2.3 but i'm getting the next error when pressing the button the first time: java.rmi.RemoteException: ; nested exception is: HTTP transport error: javax.xml.soap.SOAPException: java[More]

Hot
I have an older version of iTunes on my office computer and it will not allow me to upgrade to the newer version without an administrative password. How can I get around this???If you have an iBook G4, (PPC) you can't do much. But if that is a MacBoo [More]
Hi since I have went to firefox 5 I am having trouble with working on websites going from post to post is painfully slow. most all page changes are like this I have checked with del the pc builder and no answers there I am using a new del vostro 430 [More]
Hi Masterminds, I need to post IDoc from ECC to same R/3 system. For that i need to develop a standalone program which will post Idoc 'ORDERS05'. I had the following data: E1EDKA1                         - PARTN E1EDK02; QUALF = 001        - BELNR E1 [More]
Hi Experts, As I known delivery is not possible in CRM,it is through R/3 Only. If the CRM system is standalone what we have do for delivery.    Can anyone plz give me the inputs. Regards BalaYou "export" the order to the system that will do that [More]
My ruleset doesnn't work..please help... i get this error message... An error occurred: java.rmi.RemoteException: Exception in non-transactional EJB invoke: javax.ejb.EJBException: org.xml.sax.SAXException: java.rmi.RemoteException: java.io.IOExcepti [More]
Hi All, I have gone thru most of the threads related to the issue of uploading Batches. Header DocNum     DocType     Handwrtten     Printed     DocDate     CardCode     Ref1     Ref1 500     dDocument_Items     tNO     psYes     20110303     BRI012  [More]
Hi  Guys, I am installing SAP ECC 6.0 (My Sap ERP) after Installing SolMan4.0 ,  After runing 21 of 49  process it has showing "Installation phase in Progress"  but is not moving  as of now it's taken nearly 14 hrs. this current process "Im [More]
I have firefox and adobe flash, I have disabled hardware acceleration in browser and Adobe, I have done all possible suggested solution but it keeps crashing and makes firefox really slow.Recent crashes of certain multimedia contents (this includes Y [More]
Hello, I'm seeking for general directional advices from anyone having gone thru an SPP implementation. We are currently investigating how to handle machinery service parts in one of our main production plants. ERP6.0 does have anything specific in te [More]
is it possible to integrate flash with TAPI if so what would i need. The Telephony Application Programming Interface (TAPI) is a Microsoft Windows API, which provides computer telephony integration and enables PCs running Microsoft Windows to use tel [More]