MQSeries.net :: View topic - SignatureValue as part of WS reply message using HTTP nodes

PravinG · Posted: Sat Oct 17, 2009 4:39 am Post subject:

MB V6.1

We have a requirement wherein message flow will act as a Web service provider. The web service call will be synchronous in nature and will go through a secured SSL environment (We are using digital certificates with Server authentication).

As a reply to the web service call, we have to provide a â€˜successâ€™ message to WS-client. The sample of the same is given at the bottom of this topic.

We are asked to create the SignatureValue in the reply message to the WS-client. We know that this is possible using the SOAP nodes (WS-security - BinarySecurityToken) but we are not sure how we can achieve this using HTTP nodes.

We cannot use SOAP nodes because the message is not in SOAP message format. Itâ€™s a normal XML message.

Can anyone throw a light on whether this can be achieved using HTTP nodes? If so, how?

This is actually a â€˜message level securityâ€™ which I guess is not possible using HTTP nodes.

Here is the sample message for your reference.

<?xml version="1.0" encoding="utf-8"?>
<RootTag xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="G:\USERGU~1\NEWDOC~1\System_4.0.xsd">
<SignonRs>
<ClientDt>2007-08-25T17:02:02</ClientDt>
<ServerDt>2007-08-25T17:02:02</ServerDt>
<LanguagePref>en-gb</LanguagePref>
<SignonProfile>
<Sender>011</Sender>
<Receiver>Receiver-001</Receiver>
<MsgCode>PNOTRS</MsgCode>
</SignonProfile>
</SignonRs>
<BillerSvcRs>â€¦..</BillerSvcRs>
<Signature>
<XPath>/System/BillerSvcRs/PmtNotifyRs</XPath>
<SignatureValue>MIIKTwYJKoZIhvcNAQcCoIIKQDCCCjwCAQExCzAJ......</SignatureValue> </Signature>
</RootTag>