Upgrading Oracle WSM Custom Policies

13-8 Oracle Fusion Middleware Upgrade Guide for Oracle SOA Suite, WebCenter, and ADF 1. Attach policies as follows: Client : oraclewss10_message_protection_client_policy. Web service : oraclewss10_message_protection_service_policy. For more information about attaching policies in Oracle Fusion Middleware 11g, see Attaching Policies to Web Services in Oracle Fusion Middleware Security and Administrator’s Guide for Web Services. 2. Leave the configuration set for message body signing and encryption.

13.2.3 Anonymous Authentication with Message Integrity WS-Security 1.0

The following sections describe how to implement authentication with message integrity that conforms to the WS-Security 1.0 standard, and compare the steps required for the OC4J 10g and Oracle WSM 11g environments.

13.2.3.1 OC4J 10g

Edit the deployment descriptors for the Web service and client, as described in the following sections. For more information about the deployment descriptor elements, see OracleAS Web Services Security Schema in Oracle Application Server Web Services Security Guide in the Oracle Application Server 10g Release 3 10.1.3.1.0 documentation library at: http:www.oracle.comtechnologydocumentation Web Service Client with sample data Define the signature element in the client deployment descriptor. For example: signature signature-methodRSA-SHA1signature-method tbs-elements tbs-element local-part=Body name-space= http:schemas.xmlsoap.orgsoapenvelope tbs-element name-space= http:docs.oasis-open.orgwss200401oasis-200401-wss-wssecurity-utility-1.0.xs d local-part=Timestamp tbs-elements add-timestamp created=true expiry=28800 signature Web Service with sample data Define the verify-signature element in the service deployment descriptor. For example: verify-signature tbs-elements tbs-element name-space=http:schemas.xmlsoap.orgsoapenvelope local-part=Body tbs-element name-space= http:docs.oasis-open.orgwss200401oasis-200401-wss-wssecurity-utility-1.0.xs d local-part=Timestamp tbs-elements verify-timestamp expiry=28800 created=true verify-signature