| Author |
Message
|
| gag_nm |
 Posted: Wed Feb 10, 2016 9:04 am Post subject: Sign XML with PKCS7 Signing Standard using ESQL/WMB. |
 |
|
Centurion
Joined: 16 Oct 2008
Posts: 102
|
Hi,
i have requirement to Sign XML with PKCS7 Signing Standard with provided .pfx certificate and generate signature.
Generated signature embed in request XML.
can someone provide clue how to do this in WMB using ESQL.
 |
|
| Back to top |
|
 |
| smdavies99 |
| Posted: Wed Feb 10, 2016 11:57 am Post subject: |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
Where have you looked for information in this already?
What experiements have you done to learn this for yourself?
What went wrong?
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| gag_nm |
| Posted: Wed Feb 10, 2016 12:08 pm Post subject: |
|
|
Centurion
Joined: 16 Oct 2008
Posts: 102
|
I have learnt about pckcs7 standard and to sign data using .pfx or p12 certificate.
I tried using Java code to sign data ended up with some errors.
If my Java code works fine, then decided to this as tool sign message using External syntax in ESQL.
Is their any to do same with Java code in ESQL.??? |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Feb 10, 2016 12:11 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
All of the statements and functions that can be used from within ESQL are fully documented in the KnowledgeCenter.
If your Java code "has errors", you should debug it.
If you need to sign this data before you send it over a SOAP request, then you shouldn't be writing any code at all.
_________________
chmod -R ugo-wx / |
|
| Back to top |
|
|
| gag_nm |
| Posted: Wed Feb 10, 2016 12:42 pm Post subject: |
|
|
Centurion
Joined: 16 Oct 2008
Posts: 102
|
| Can you please provide me specific URL for details.... |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Feb 10, 2016 12:49 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| gag_nm wrote: |
| Can you please provide me specific URL for details.... |
For what? The IIB Knowledge Center? You should know that by heart, or at least have it bookmarked.
_________________
chmod -R ugo-wx / |
|
| Back to top |
|
|
| gag_nm |
| Posted: Wed Feb 10, 2016 10:49 pm Post subject: |
|
|
Centurion
Joined: 16 Oct 2008
Posts: 102
|
HI,
I went thorugh IIB Knowledge Center, but How to generate digital signature through ESQL. so that , i can embeed signature in request XML.
Do i need do "Implementing WS-Security
Configure authentication, XML encryption, XML signature, and message expiration by using the Policy Sets and Policy Set Bindings editor."
how can i generate Signature thorugh ESQL.
Request message should be..
| Code: |
<Req>
<Message>
123
</Message>
<signature>
<Value>
MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAaCAJIAEggPoPFRyYW5zYWN0aW9uPjxjbGllbnRTaG9ydE5hbWU
</Value>
</signature>
</Req> |
may be i am going in wrong direction.. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Feb 11, 2016 5:14 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
No you're hitting the right direction. You don't do it through ESQL, you use the policies for that... 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| gag_nm |
| Posted: Sat Feb 13, 2016 5:26 am Post subject: |
|
|
Centurion
Joined: 16 Oct 2008
Posts: 102
|
Hi,
I have explored policy and bindings option.
I need to send xml to Java servlet service which is not SOAP service.i.e no Soap header,Soap body.
WS-security can be implemented only on SOAP service,So how can we implement WS-security on non-soap based service.
I am able to connect this service using HTTP request node.with SOAP node it fails(webservice exception).
Vendor accepts request message with XML signature .
Now I am back to square one... |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sat Feb 13, 2016 6:06 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Well you should have said so right away. No way around it but coding it in java (easier than ESLQ in this instance). Or may be it can be done in DataPower?
Have fun
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
