WS-Security signing parts (or complete) header.
We had an issue with signing a part in the header (Timestamp) in a SOAP service. The Body signing worked direct but for the parts in the header you need a different format. We got it to work with the following Signed parts:
Body;{Element}{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd}Timestamp
The Timestamp was added with the WS-security profile. With this convention you can sign the header or parts of the header.
***Edited by Moderator Marissa to update SR Details***
Accepted Solution
Pegasystems Inc.
IN
Hi Marco,
By looking through the SR notes we found that the below resolution was provided:
Sign the Body and Timestamp part in the header (also added in the WS-Security profile) with this part name: Body;{Element}{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd}Timestamp"
Additionally, this PDN article was also updated: Creating a SOAP connector that uses a digital signature and encryption
Please confirm if the above did indeed resolve your query.
Thanks!