Red Hat NETSCAPE ENTERPRISE SERVER 6.0 - PROGRAMMER GUIDE TO SERVLETS Podręcznik Użytkownika Pobierz pdf (Strona 286)

Chapter 15: User Authentication, SOAP Digital Signature and XML Encryption for Web Services (SOAP)

15-12

Notes

• If the SOAP digital signature generation function is enabled from the Web Service Information Edit

Tool, the SOAP digital signature is automatically attached to the SOAP header based on the

settings.

• If details are not set, the signature is generated to the results of XML canonicalization after deleting

comments from the contents in the SOAP body elements of the SOAP message.

• The settings of the SOAP digital signature generation can also be configured by the

soapsecsignconf command. For information on the soapsecsignconf command refer to Reference

Manual (Command Edition).

Specifying the Signature Target

The following two types of signature target can be selected for the SOAP digital signature:

• Any nodes inside the SOAP envelope

− ID Reference

− XPath filtering

• Attachment files

− Content-Id

Specifying the Signature Target Using ID Reference

If the SOAP message is created using SAAJ-API, it is possible to add an ID attribute to the element

being signed. In the SOAP digital signature, the following attributes are regarded as an ID attribute:

Namespace URI: http://schemas.xmlsoap.org/ws/2002/07/utility

Local Name: “Id”

To sign an element with an ID attribute, specify a string of the ID attribute value after the number sign

("#") as the signature target.

Example

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"

xmlns:xsd="http://www.w3.org/2001/XMLSchema"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<soapenv:Body xmlns:wsu="http:// schemas.xmlsoap.org/ws/2002/07/utility"

wsu:Id="body">

<m:ResponseBody xmlns:m="urn:SampleMsg">

<Response>response string...</Response>

</m:ResponseBody>

</soapenv:Body>

</soapenv:Envelope

If "#body" is specified as the signature target for the above SOAP message, <soapenv:Body> and its

contents will be signed.

1 2 ... 281 282 283 284 285 286 287 288 289 290 291 ... 327 328

Brak uwag

Red Hat NETSCAPE ENTERPRISE SERVER 6.0 - PROGRAMMER GUIDE TO SERVLETS Podręcznik Użytkownika Strona 286