E-IB: IB Gateway Verify Web Service Security Message Signature Against Binary Security Token Follow CA Trust Relationship (Doc ID 3040694.1)

Last updated on AUGUST 14, 2024

Applies to:

Symptoms

When a third party sends PeopleSoft Integration Broker a web service message with a digital signature (DS), even if the the signing certificate is not imported into wss keystore, Integration Broker still incorrectly accepts the message successfully.

The issue can be reproduced at will with the following steps:
1. Setup Web Service Security Digital Signature in Integration Broker.
2. Third party application sends in a message with WSS digital signagure signed by a different certificate.
3. Check msgLog.html and observe the message is accepted.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.