2-90 Securing WebLogic Web Services for Oracle WebLogic Server
■
Security then Performance then Compatibility SPC
■
Compatibility then Security then Performance CSP
■
Compatibility then Performance then Security CPS
■
Performance then Compatibility then Security PCS
■
Performance then Security then Compatibility PSC
3.
Save and activate your changes.
2.21.2.3 Understanding Body Encryption in Smart Policy
In smart policy selection scenarios, whether or not the Body will be encrypted for example, sp:EncryptedParts sp:Body sp:EncryptedParts
depends on the following policy selection preference rules:
■
Default -- The first policy alternative will be used for the determination. If the encrypted body assertion is in the first policy alternative, the body is encrypted. If
the encrypted body assertion is not in the first policy alternative, the body is not encrypted.
■
SCP, SPC -- encrypted
■
PCS, PSC -- not encrypted
■
CPS -- not encrypted
■
CSP -- encrypted Consider the following two examples. In
Example 2–23 , the encrypted body assertion
is in the first policy alternative. Therefore, in the default preference case the body is encrypted. For policy selection preferences other than the default, the other preference
rules apply.
Example 2–23 Body Assertion in First Policy Alternative
?xml version=1.0? wsp:Policy
xmlns:wsp=http:schemas.xmlsoap.orgws200409policy xmlns:sp=http:docs.oasis-open.orgws-sxws-securitypolicy200702
wsp:ExactlyOne sp:EncryptedParts
sp:Body sp:EncryptedParts
sp:EncryptedParts wsp:ExactlyOne
wsp:Policy
By contrast, in Example 2–24
, the encrypted body assertion is not in the first policy alternative. Therefore, in the default preference case the body is not encrypted. For
policy selection preferences other than the default, the other preference rules apply.
Example 2–24 Body Assertion Not in First Policy Alternative
?xml version=1.0? wsp:Policy
xmlns:wsp=http:schemas.xmlsoap.orgws200409policy xmlns:sp=http:docs.oasis-open.orgws-sxws-securitypolicy200702
wsp:ExactlyOne sp:EncryptedParts
Configuring Message-Level Security 2-91
sp:EncryptedParts sp:Body
sp:EncryptedParts wsp:ExactlyOne
wsp:Policy
2.21.2.4 Smart Policy Selection for a Standalone Client
You can set the policy selection preference via the stub property. The following example sets the stub property for security, compatibility, and
performance preferences: stub._setPropertyWLStub.POLICY_SELECTION_PREFERENCE,
WLStub.PREFERENCE_SECURITY_COMPATIBILITY_PERFORMANCE; If the policy selection preference is not set, then the default preference None is used.
2.21.3 Multiple Transport Assertions