web services - Use single certificate in WS Security -
i'm working in ws-security configurations in soap ui. in signature, have option called "use single certificate signing" tried checking , unchecking it, request same. don't find differences. when should use option?
i tried search on google, couldn't find answer. pardon me if understanding wrong.
after little search op seems found answer.
this checks adds specific <wsse:binarysecuritytoken> in <wsse:security> headers, specifying certificate (in soapui specific case specifying certificate used perform signature).
from oasis spec can see definition of element:
3.1 token types
this profile defines syntax of, , processing rules for, 3 types of binary security token using uri values specified in table 2 (note uri fragments relative uri specification).

3.1.1 x509v3 token type
the type of end-entity authenticated certificate used in manner matter of policy outside scope of specification.
in document there sample of <wsse:binarysecuritytoken> node added <wsse:security> headers, <wsse:binarysecuritytoken> valuetype"wsse:x509v3" attribute , certificate codified base64 in text value of node:
<wsse:binarysecuritytoken     wsu:id="binarytoken"     valuetype="wsse:x509v3"    encodingtype="wsse:base64binary">miiezzcca9cgawibagiqemtjzc0… </wsse:binarysecuritytoken>  
Comments
Post a Comment