ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » IIB9: Selectively encrypting / decrypting elements in XML

Post new topic  Reply to topic
 IIB9: Selectively encrypting / decrypting elements in XML « View previous topic :: View next topic » 
Author Message
akil
PostPosted: Wed Oct 08, 2014 10:07 pm    Post subject: IIB9: Selectively encrypting / decrypting elements in XML Reply with quote

Partisan

Joined: 27 May 2014
Posts: 338
Location: Mumbai

Hi

I have a use-case in which an XML like the following needs to be created. There are 2 elements, of which the second one is Mpin, this is an RSA encrypted value. To do this, I can write a JCN but is there a better (in built way?).

1. Can the certificates in the broker KeyStore be accessed programmatically in a JCN to avoid managing the certificates separately?
2. Is there any other way to do this without writing a JCN?

This is not a SOAP message , this is an XML payload sent over HTTPS.


Quote:

<Params>
<Param>
<ParamId>4</ParamId>
<ParamName>MainMenu</ParamName>
<ParamValue>8</ParamValue>
<ParamType>String</ParamType>
</Param>
<Param>
<ParamId>5</ParamId>
<ParamName>Mpin</ParamName>
<ParamValue>
7JlEfu1pmqkrAqjjDBC9XaqL4JJ7l9%2fxM4qxgp2CpnNJXT2lKlrHdFGLQCiFX3t6%2fNmriZp1H5fJmCP21H3fL2FlmVfdpQ2cuEV%2fhvSToDPDPvTqmx9Pbfs
bLACeqRiOG5BwgFxZ5a3vXVpqUhIakbTqO8ftO3nqXF2zL%2b5K%2b94nVwBtWtHOpDz6B%2fVycy988SsTfp7tVDOugweaf5spsqDZJezklVe2nRYL2BYesJ
ZTWekcwSRArUJGOkavWMYwYjNHol5FJUTaucrLcbLMhQkDYcpVdywe2fMLmvKMQyTX74mRXFboqBP9gXA9GDIO8LvSwMWEXN9JrH9uzjWKSg%3d%3d
</ParamValue>
<ParamType>String</ParamType>
</Param>
</Param>
[/list]
_________________
Regards
Back to top
View user's profile Send private message Visit poster's website
akil
PostPosted: Sat Oct 18, 2014 3:45 am    Post subject: Reply with quote

Partisan

Joined: 27 May 2014
Posts: 338
Location: Mumbai

Hi

So I gave this a shot with custom code in JCN, I am now at a stage where I need to read the private key from the brokers keystore to decrypt the incoming field. I can access the location of the brokers key store using the CMP , but I am unable to figure out how do I open the keystore and get hold of the key as both have passwords.

Any suggestions on how I can proceed with using the standard broker keystore, instead of doing file operations in my JCN ?

Regards
Akhilesh
_________________
Regards
Back to top
View user's profile Send private message Visit poster's website
fjb_saper
PostPosted: Sat Oct 18, 2014 5:51 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

akil wrote:
Hi

So I gave this a shot with custom code in JCN, I am now at a stage where I need to read the private key from the brokers keystore to decrypt the incoming field. I can access the location of the brokers key store using the CMP , but I am unable to figure out how do I open the keystore and get hold of the key as both have passwords.

Any suggestions on how I can proceed with using the standard broker keystore, instead of doing file operations in my JCN ?

Regards
Akhilesh

Have you thought about setting up a SOAP service passing it the XML? Could you then use wss to decrypt it?
Have fun
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
akil
PostPosted: Sat Oct 18, 2014 8:07 am    Post subject: Reply with quote

Partisan

Joined: 27 May 2014
Posts: 338
Location: Mumbai

Hi

Do you mean a flow like as follows

Flow 1 (that will send the encrypted element mPIN):
HTTPInput --> SoapRequest

Flow 2 (created to decrypt the element)
SoapInput --> ...

I thought about it, but wasn't too sure if something that's usually, done. I can try it for sure, I prefer using built in nodes as much as possible..but some specs like these are dictated by folks who don't really care much about standard..

I also went through the CMP documents & the Plugin JavaDoc, but did not find any information that could tell me if I could just get the loaded private keys..

Regards
Akhilesh
_________________
Regards
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » IIB9: Selectively encrypting / decrypting elements in XML
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.