IBM E02HRLL-G Administration Guide - Page 44

Algorithms supported by the ebMS, Configuration details for validating Webservices - ae channel

Page 44 highlights

Algorithms supported by the ebMS There are various algorithms supported by the ebMS including: v "Digest and Signature algorithms" v "XML encryption and SMIME encryption algorithms" Digest and Signature algorithms The digest algorithms supported are as follows: v SHA1 v SHA256 v SHA512 v RIPEMD160 The signature algorithms supported are as follows: v DSA-SHA1 v RSA-SHA1 If the signing fails because of a configuration issue, an event is logged that reads Signing Failed. Similarly if the signature verification fails, an event reading, Signature Verification Failed is logged and an ebMS error message is generated containing information as to why the signature verification process failed. XML encryption and SMIME encryption algorithms There are two supported protocols for ebMS encryption; XML encryption and SMIME encryption. If you are using the XML encryption, you can use the following algorithms: 1. 3-des-cbc 2. aes-128-cbc 3. aes-192-cbc 4. aes-256-cbc If you are using the using SMIME encryption, you can use the following algorithms: 1. 3-des-cbc 2. aes-128-cbc. 3. aes-192-cbc 4. aes-256-cbc 5. rc2-128-cbc Configuration details for validating Webservices This feature validates SOAP Body or Payload that is available under SOAP Envelope. Payload validation is supported only for XML Payloads in SOAP Envelope. This also enables the De-Envelope of SOAP Envelope before introducing the SOAP Body for further processing. Note that the De-Envelope of SOAP Envelope happens only in the event of asynchronous communication. See the WebSphere Partner Gateway Hub Configuration Guide for more information on Validating WebServices. To validate Payload under SOAP Envelope, you need to perform the following additional configurations on the top of Webservice channel configuration: 38 IBM WebSphere Partner Gateway Enterprise and Advanced Editions: Administration Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268

Algorithms supported by the ebMS
There are various algorithms supported by the ebMS including:
v
“Digest and Signature algorithms”
v
“XML encryption and SMIME encryption algorithms”
Digest and Signature algorithms
The digest algorithms supported are as follows:
v
SHA1
v
SHA256
v
SHA512
v
RIPEMD160
The signature algorithms supported are as follows:
v
DSA-SHA1
v
RSA-SHA1
If the signing fails because of a configuration issue, an event is logged that reads
Signing Failed
. Similarly if the signature verification fails, an event reading,
Signature Verification Failed
is logged and an ebMS error message is generated
containing information as to why the signature verification process failed.
XML encryption and SMIME encryption algorithms
There are two supported protocols for ebMS encryption; XML encryption and
SMIME encryption.
If you are using the XML encryption, you can use the following algorithms:
1.
3-des-cbc
2.
aes-128-cbc
3.
aes-192-cbc
4.
aes-256-cbc
If you are using the using SMIME encryption, you can use the following
algorithms:
1.
3-des-cbc
2.
aes-128-cbc.
3.
aes-192-cbc
4.
aes-256-cbc
5.
rc2-128-cbc
Configuration details for validating Webservices
This feature validates SOAP Body or Payload that is available under SOAP
Envelope. Payload validation is supported only for XML Payloads in SOAP
Envelope. This also enables the De-Envelope of SOAP Envelope before introducing
the SOAP Body for further processing. Note that the De-Envelope of SOAP
Envelope happens only in the event of asynchronous communication. See the
WebSphere Partner Gateway Hub Configuration Guide
for more information on
Validating WebServices. To validate Payload under SOAP Envelope, you need to
perform the following additional configurations on the top of Webservice channel
configuration:
38
IBM WebSphere Partner Gateway Enterprise and Advanced Editions: Administration Guide