Hi,
I am implementing a scenario to call from PI, a webservice with WS-Security username token standard,along with message encryption and signature.
- Username Token Base64( SHA1 (Username+Password + Nonce + Time stamp))
- Username 4 digit code used for the consumer application as set up in Planning IT.
- Password Password for consumer application as set up by HP on the server
- Nonce Random number generated for each request by the application server
- Time stamp Time stamp for each request
I have deployed and am using the axis protocol of soap adapter and configured the modules as shown in attached screen.
It is almost same . But it gives me the below error when I use password Digest.
Error While Sending Message: Additional error text from response: com.sap.engine.interfaces.messaging.api.exception.MessagingException: security.wssecurity.WSSContextImpl.s02: com.ibm.websphere.security.WSSecurityException: Exception org.apache.axis2.AxisFault: CWWSS6521E: The Login failed because of an exception: javax.security.auth.login.LoginException: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest was supplied, but only http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText is supported. ocurred while running action: com.ibm.ws.wssecurity.handler.WSSecurityConsumerHandler$1@4d774d77 |
When I used PasswordText instead of PasswordDigest (Rest all is same), I get the below error,even though I have added it as UsernameToken Timestamp
Error While Sending Message: Additional error text from response: com.sap.engine.interfaces.messaging.api.exception.MessagingException: security.wssecurity.WSSContextImpl.s02: com.ibm.websphere.security.WSSecurityException: Exception org.apache.axis2.AxisFault: CWWSS6521E: The Login failed because of an exception: javax.security.auth.login.LoginException: CWWSS5327E: A null value is not allowed for the created time of the time stamp. The Application Server expected the wsu:Created element. ocurred while running action: com.ibm.ws.wssecurity.handler.WSSecurityConsumerHandler$1@7d5e7d5e
I needed security configuration for encryption and signature as well for encoding the username token. I have deployed the public provider in trusted CAs and private key pair in the default key store.But I have still not configured the encryption modules as I wanted to get through this username token issue in the first place.
Please also find attached the security xml the provider is expecting.
Could you please help me here?
Regards,
Mahesh