Signing parameter configuration settings

Signing parameter configuration settings

Use this page to configure new signing parameters. Important distinction between V5.x and v6.x applications
Note: The information in this article supports v5.x applications only that are used with WAS v6.x. The information does not apply to v6.0.x applications.
The specifications that are listed on this page for the signature method, digest method, and canonicalization method are located in the World Wide Web Consortium (W3C) document entitled, XML Signature Syntax and Specification: W3C Recommendation 12 Feb 2002.
To view this administrative console page, complete the following steps:

Click Enterprise Applications > appname.
Under Related items, click EJB modules or Web Modules > URI_file_name
Under Additional properties, one can access the signing information for the following bindings:

For the Request sender binding, click Web services: Client security bindings. Under Request sender binding, click Edit. Under Additional properties, click Signing information.
For the Response sender binding, click Web services: Server security bindings. Under Response sender binding, click Edit. Under Additional properties, click Signing information.

In the Request Sender Binding column, click Edit > Signing Information.

If the signing information is not available, select None.
If the signing information is available, select Dedicated Signing Information and specify the configuration in the following fields:

Signature method

Specifies the algorithm Uniform Resource Identifiers (URI) of the signature method.
The following algorithms are supported:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2000/09/xmldsig#dsa-sha1
http://www.w3.org/2000/09/xmldsig#hmac-sha1

We can also add custom algorithms.

Digest method

Specifies the algorithm URI of the digest method.
WebSphere Application Server supports the http://www.w3.org/2000/09/xmldsig#sha1 algorithm.

Canonicalization method

Specifies the algorithm URI of the canonicalization method.
The following algorithms are supported:

http://www.w3.org/2001/10/xml-exc-c14n#
http://www.w3.org/2001/10/xml-exc-c14n#WithComments
http://www.w3.org/TR/2001/REC-xml-c14n-20010315
http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments

Key name

Name of the key object found in the keystore file.

Key locator reference

Name used to reference the key locator
One can configure these key locator reference options on the cell level, the server level, and the application level. The configurations that are listed in the field are a combination of the configurations on these three levels.
We can specify a key locator configuration for the following bindings on the following levels:

Binding name Cell level, server level, or application level Path
N/A Cell level

Click Security > Web services.
Under Additional properties, click Key locators.

N/A Server level

Click Servers > Application servers > servername.
Under Security, click Web services: Default bindings for Web services security.
Under Additional properties, click Key locators.

Request sender Application level

Click Applications > Enterprise applications > appname.
Under Related items, click EJB modules > URI_name.
Click Web services: Client security bindings.
Under Request sender binding, click Edit.
Under Additional properties, click Key locators.

Request receiver Application level

Click Applications > Enterprise applications > appname.
Under Related items, click EJB modules > URI_name.
Click Web services: Server security bindings.
Under Request receiver binding, click Edit.
Under Additional properties, click Key locators.

Response sender Application level

Click Applications > Enterprise applications > appname.
Under Related items, click EJB modules > URI_name.
Click Web services: Server security bindings.
Under Response sender binding, click Edit.
Under Additional properties, click Key locators.

Response receiver Application level

Click Applications > Enterprise applications > appname.
Under Related items, click EJB modules > URI_name.
Click Web services: Client security bindings.
Under Response receiver binding, click Edit.
Under Additional properties, click Key locators.

Binding name	Cell level, server level, or application level	Path
N/A	Cell level	Click Security > Web services. Under Additional properties, click Key locators.
N/A	Server level	Click Servers > Application servers > servername. Under Security, click Web services: Default bindings for Web services security. Under Additional properties, click Key locators.
Request sender	Application level	Click Applications > Enterprise applications > appname. Under Related items, click EJB modules > URI_name. Click Web services: Client security bindings. Under Request sender binding, click Edit. Under Additional properties, click Key locators.
Request receiver	Application level	Click Applications > Enterprise applications > appname. Under Related items, click EJB modules > URI_name. Click Web services: Server security bindings. Under Request receiver binding, click Edit. Under Additional properties, click Key locators.
Response sender	Application level	Click Applications > Enterprise applications > appname. Under Related items, click EJB modules > URI_name. Click Web services: Server security bindings. Under Response sender binding, click Edit. Under Additional properties, click Key locators.
Response receiver	Application level	Click Applications > Enterprise applications > appname. Under Related items, click EJB modules > URI_name. Click Web services: Client security bindings. Under Response receiver binding, click Edit. Under Additional properties, click Key locators.