Signing parameter configuration settings

Use this page to configure new signing parameters.

There is an important distinction between V5.x and V6 and later applications. The information in this article supports V5.x applications only that are used with WAS V6.0.x and later. The information does not apply to V6.0.x and later applications.

The specifications that are listed on this page for the signature method, digest method, and canonicalization method are located in the World Wide Web Consortium (W3C) document entitled, XML Signature Syntax and Specification: W3C Recommendation 12 Feb 2002. To view this console page...

1. Click Enterprise Applications > application.

2. Click Manage modules > URI_file_name

3. Under Additional properties, you can access the signing information for the following bindings:

   1. For the Request sender binding, click Web services: Client security bindings. Under Request sender binding, click Edit. Under Additional properties, click Signing information.

   2. For the Response sender binding, click Web services: Server security bindings. Under Response sender binding, click Edit. Under Additional properties, click Signing information.

4. In the Request Sender Binding column, click Edit > Signing Information.

If the signing information is not available, select None.

If the signing information is available, select Dedicated Signing Information and specify the configuration in the following fields:

Signature method

Specify the algorithm Uniform Resource Identifiers (URI) of the signature method. The following algorithms are supported:

• http://www.w3.org/2000/09/xmldsig#rsa-sha1

• http://www.w3.org/2000/09/xmldsig#dsa-sha1

• http://www.w3.org/2000/09/xmldsig#hmac-sha1

You can also add custom algorithms.

Digest method

Specify the algorithm URI of the digest method.

WAS supports the http://www.w3.org/2000/09/xmldsig#sha1 algorithm.

Canonicalization method

Specify the algorithm URI of the canonicalization method. The following algorithms are supported:

• http://www.w3.org/2001/10/xml-exc-c14n#

• http://www.w3.org/2001/10/xml-exc-c14n#WithComments

• http://www.w3.org/TR/2001/REC-xml-c14n-20010315

• http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments

Key name

Name of the key object found in the keystore file.

Key locator reference

Name used to reference the key locator

You can configure these key locator reference options on the cell level, the server level, and the application level. The configurations that are listed in the field are a combination of the configurations on these three levels. You can specify a key locator configuration for the following bindings on the following levels:

Binding name	Cell level, server level, or application level	Path
N/A	Cell level	Click Security > Web services. Under Additional properties, click Key locators.
N/A	Server level	Click Servers > Application servers > server. Under Security, click Web services: Default bindings for Web services security. Under Additional properties, click Key locators.
Request sender	Application level	Click Applications > Enterprise applications > application. Click Manage modules > URI_name. Click Web services: Client security bindings. Under Request sender binding, click Edit. Under Additional properties, click Key locators.
Request receiver	Application level	Click Applications > Enterprise applications > application. Click Manage modules > URI_name. Click Web services: Server security bindings. Under Request receiver binding, click Edit. Under Additional properties, click Key locators.
Response sender	Application level	Click Applications > Enterprise applications > application. Click Manage modules > URI_name. Click Web services: Server security bindings. Under Response sender binding, click Edit. Under Additional properties, click Key locators.
Response receiver	Application level	Click Applications > Enterprise applications > application. Click Manage modules > URI_name. Click Web services: Client security bindings. Under Response receiver binding, click Edit. Under Additional properties, click Key locators.

---

 

Related tasks

Securing Web services for V5.x applications based on WS-Security

 

Related Reference

Request sender binding collection

 

Reference topic