Red Hat NETSCAPE ENTERPRISE SERVER 6.0 - PROGRAMMER GUIDE TO SERVLETS Guide de l'utilisateur télécharger pdf (Page 287)

Settings for the SOAP Digital Signature

15-13

Specifying the Signature Target Using XPath Filtering

If XPath is specified, nodes for which the result of evaluation of the XPath expression for all nodes

inside the SOAP envelope turns out to be true are selected as the signature targets.

Specifying Contents of the SOAP Body as a Signature Target Using XPath Filtering

Specify the signature target as shown below when only the contents in the SOAP body should be

signed:

ancestor::soapenv:Body

Here, "soapenv" represents the namespace prefix of SOAPBody. If the prefix is changed, its value must

also be changed when specifying it in XPath.

Specifying Arbitrary Elements as the Signature Target Using XPath Filtering

To sign an element with the namespace URI "urn:sample" and the local name "localName", specify in

the following manner:

ancestor-or-self::*[local-name()='localName' and namespace-

uri()='urn:sample']

Specifying the Signature Target Using Content-Id

To sign an attachment file contained in the SOAP message, specify a string of "cid:" followed by the

MIME header "Content-Id" value.

Verifying the SOAP Digital Signature for SOAP Messages

Implementing an Application that Verifies the SOAP Digital Signature

An application that verifies the SOAP digital signature is implemented by changing the Web service

information. There is no need to change the application programs.

Preparing a Site Certificate and Certification Authority Certificate

For the verification of a SOAP digital signature, a certificate of the remote site that generates the SOAP

digital signature or a certificate of the certification authority that issued the site certificate is needed. For

information about how to manage acquired certificates, refer to Chapter 14 How to prepare PKI

Environment for Web Services (SOAP).

Settings for the SOAP Digital Signature Verification

The Web Service Information Edit Tool is used to make the settings for the SOAP digital signature

verification.

The following figure shows the window that displays detailed information in a server system environment.

The following explanation uses the RPC application window as an example.

1 2 ... 282 283 284 285 286 287 288 289 290 291 292 ... 327 328

Pas de commentaire

Red Hat NETSCAPE ENTERPRISE SERVER 6.0 - PROGRAMMER GUIDE TO SERVLETS Guide de l'utilisateur Page 287