Oracle SOA Blogs- Sandeep

In 12c, the OWSM security policy configuration is saved to a separate file called wsm-assembly.xml In order to update values in wsm-assembly.xml, the service needs to use the <policySet>. e.g. A configuration plan is required to change both a HTTP port number, and the csf-key used by the oracle/wss_username_token_client_policy OWSM policy. Replacement without configuration plan: Open wsm-assembly.xml file and add below code <?xml version='1.0' encoding='windows-1252'?> <orawsp:wsm-assembly xmlns:orawsp="http://schemas.oracle.com/ws/2006/01/policy" xmlns:mds="http://xmlns.oracle.com/mds">    <sca11:policySet xmlns:sca11="http://docs.oasis-open.org/ns/opencsa/sca/200912" name="policySet" appliesTo="SCA-REST-REFERENCE()" attachTo="REFERENCE('Get_Service_Now')" orawsp:highId="2" xml:id="SCA-REST-REFERENCE__REFERENCE__Get_Service_Now__"> ...

Hello, Today we are going to see how we can invoke a REST API which is secured with private key & certificate which requires two way SSL for successful invocation. Before starting development what we need: Certificate.pfx file This PFX file contain a CERTIFICATE AND KEY, which will be used for two way SSL REST API URL like "https://SERVERURL/URL/connect/token" JAVA implementation: We need to use below external JAR's for making HTTP Call. Below is sample JAVA code for same: package com.api.client; import java.io.BufferedReader; import java.io.File; import java.io.FileInputStream; import java.io.InputStream; import java.io.InputStreamReader; import java.io.OutputStream; import java.net.HttpURLConnection; import java.net.InetSocketAddress; import java.net.Proxy; import java.net.URL; import java.security.KeyStore; import java.security.SecureRandom; import java.util.logging.Logger; import javax.net.ssl.HttpsURLConn...

Hello Everyone, Hope you all are doing well, Today i will be going to discuss how we can configure SOA server to implement two way SSL by which request/response encryption and secure/trusted connection can be done. You will see lots of blog over it, Here i am not going to discuss in theory about it as who ever is going to start work with two way SSL implementation, Must read below oracle documentation and make clear about terms and their specifications. https://docs.oracle.com/middleware/12213/soasuite/administer/GUID-5E4E3425-F0E3-4E97-B5AE-2EEE7A205ACF.htm Here we will focus how we can make a SOA composite two way SSL enabled, You need to follow same type of implementation when you are in process of consuming any third party SOAP service in SOA composites. Let's Start, Before actual implementation let's have a show review of terms will be used in this implementation. SSL/TLS: S SL stands for Secure Sockets Layer. SSL is the predecessor of TLS. SSL should be con...