Skip to main content

Posts

Showing posts with the label SSL

Replace CSF KEYS in Oracle SOA 12C for Rest/SOAP Adapters

In 12c, the OWSM security policy configuration is saved to a separate file called wsm-assembly.xml In order to update values in wsm-assembly.xml, the service needs to use the <policySet>. e.g. A configuration plan is required to change both a HTTP port number, and the csf-key used by the oracle/wss_username_token_client_policy OWSM policy. Replacement without configuration plan: Open wsm-assembly.xml file and add below code <?xml version='1.0' encoding='windows-1252'?> <orawsp:wsm-assembly xmlns:orawsp="http://schemas.oracle.com/ws/2006/01/policy" xmlns:mds="http://xmlns.oracle.com/mds">    <sca11:policySet xmlns:sca11="http://docs.oasis-open.org/ns/opencsa/sca/200912" name="policySet" appliesTo="SCA-REST-REFERENCE()" attachTo="REFERENCE('Get_Service_Now')" orawsp:highId="2" xml:id="SCA-REST-REFERENCE__REFERENCE__Get_Service_Now__"> ...

PFX Certificate key based secured REST API Invocation in OSB with JAVA

Hello, Today we are going to see how we can invoke a REST API which is secured with private key & certificate which requires two way SSL for successful invocation. Before starting development what we need: Certificate.pfx file This PFX file contain a CERTIFICATE AND KEY, which will be used for two way SSL REST API URL like "https://SERVERURL/URL/connect/token" JAVA implementation: We need to use below external JAR's for making HTTP Call. Below is sample JAVA code for same: package com.api.client; import java.io.BufferedReader; import java.io.File; import java.io.FileInputStream; import java.io.InputStream; import java.io.InputStreamReader; import java.io.OutputStream; import java.net.HttpURLConnection; import java.net.InetSocketAddress; import java.net.Proxy; import java.net.URL; import java.security.KeyStore; import java.security.SecureRandom; import java.util.logging.Logger; import javax.net.ssl.HttpsURLConn...

NTLM based SOAP Implementation in OSB

Hello Everyone, Today i am going to discuss how we can invoke a NTLM based SOAP service into OSB, Oracle SOA 12C have this feature in-built but you can use it only when you have env up to date with latest patch. Here i am going to discuss how we can do it in OSB. There is no direct way to do it in OSB too but with help of JAVA HTTP we can do it. Create a JAVA project in Eclipse. Import below three jars and attach them in build path so it can be used as class path. Java class Code: package com.teamshare.java.client.http; import org.apache.commons.httpclient.HttpClient; import org.apache.commons.httpclient.HttpStatus; import org.apache.commons.httpclient.NTCredentials; import org.apache.commons.httpclient.auth.AuthScope; import org.apache.commons.httpclient.methods.PostMethod; import org.apache.commons.httpclient.methods.StringRequestEntity; public class TeamShareClient { public TeamShareClient() { } public static void main(String[] args) { ...

Two Way SSL implementation in Oracle SOA Suite Using TLS

Hello Everyone, Hope you all are doing well, Today i will be going to discuss how we can configure SOA server to implement two way SSL by which request/response encryption and secure/trusted connection can be done. You will see lots of blog over it, Here i am not going to discuss in theory about it as who ever is going to start work with two way SSL implementation, Must read below oracle documentation and make clear about terms and their specifications. https://docs.oracle.com/middleware/12213/soasuite/administer/GUID-5E4E3425-F0E3-4E97-B5AE-2EEE7A205ACF.htm Here we will focus how we can make a SOA composite two way SSL enabled, You need to follow same type of implementation when you are in process of consuming any third party SOAP service in SOA composites. Let's Start, Before actual implementation let's have a show review of terms will be used in this implementation. SSL/TLS: S SL stands for Secure Sockets Layer. SSL is the predecessor of TLS. SSL should be con...