web services - Use single certificate in WS Security -


i'm working in ws-security configurations in soap ui. in signature, have option called "use single certificate signing" tried checking , unchecking it, request same. don't find differences. when should use option?

i tried search on google, couldn't find answer. pardon me if understanding wrong.

after little search op seems found answer.

this checks adds specific <wsse:binarysecuritytoken> in <wsse:security> headers, specifying certificate (in soapui specific case specifying certificate used perform signature).

from oasis spec can see definition of element:

3.1 token types

this profile defines syntax of, , processing rules for, 3 types of binary security token using uri values specified in table 2 (note uri fragments relative uri specification).

enter image description here

3.1.1 x509v3 token type

the type of end-entity authenticated certificate used in manner matter of policy outside scope of specification.

in document there sample of <wsse:binarysecuritytoken> node added <wsse:security> headers, <wsse:binarysecuritytoken> valuetype"wsse:x509v3" attribute , certificate codified base64 in text value of node:

<wsse:binarysecuritytoken     wsu:id="binarytoken"     valuetype="wsse:x509v3"    encodingtype="wsse:base64binary">miiezzcca9cgawibagiqemtjzc0… </wsse:binarysecuritytoken>  

Comments

Popular posts from this blog

How has firefox/gecko HTML+CSS rendering changed in version 38? -

javascript - Complex json ng-repeat -

jquery - Cloning of rows and columns from the old table into the new with colSpan and rowSpan -