WAS v8.5 > Develop applications > Develop web services - Security (WS-Security) > Configure Web Services Security during application assembly > Configure XML encryption for v5.x web services with an assembly toolConfigure the client for response decryption: decrypting the message parts
To configure the client for response decryption, specify which response message parts to decrypt when configuring the client. The server response encryption and client response decryption configurations must match.
There is an important distinction between v5.x and v6 and later applications. The information in this article supports v5.x applications only used with WebSphere Application Server v6.0.x and later. The information does not apply to v6.0.x and later applications.
Prior to completing these steps, read either of the following topics to become familiar with the WS Extensions tab and the WS Binding tab in the Client Deployment Descriptor Editor within an assembly tool:
- Configure the client security bindings using an assembly tool
- Configure the security bindings on a server acting as a client
These two tabs are used to configure the Web Services Security extensions and the Web Services Security bindings, respectively. To specify which response message parts to decrypt when configuring the client for response decryption. The server response encryption and client response decryption configurations must match.
- Launch an assembly tool. For more information, see the related information on Assembly Tools.
- Switch to the Java EE perspective. Click Window > Open Perspective > J2EE.
- Click Application Client Projects > application_name > appClientModule > META-INF.
- Right-click the application-client.xml file, select Open with > Deployment descriptor editor.
- Click the WS Extensions tab, located at the bottom of the deployment descriptor editor within the assembly tool.
- Expand the Response receiver configuration > Required confidentiality section.
- Select the parts of the message that you must decrypt by clicking Add and selecting either Bodycontent or Usernametoken. The following information describes these message parts:
- Bodycontent
- The user data portion of the message.
- Usernametoken
- The basic authentication information, if selected.
The information selected in this step is encrypted by the server in the response sender.
A Username Token is typically not sent in the response. Thus, you usually do not need to select username token.
After we specify which message parts to decrypt, specify which method to use when decrypting the response message. See Configure the client for response decryption: choosing a decryption method for more information.
Related concepts:
XML encryption
Development and assembly tools
Related
Configure the client for response decryption: choosing a decryption method
Configure the client security bindings using an assembly tool
Configure the security bindings on a server acting as a client
Configure key locators using an assembly tool
Configure key locators