Zugang zur SOA-Plattform testen

WS-Security Policy

Die Security Policy ist an alle eingehenden SOAP-Berichte gekoppelt.

                    <wsp:Policy xmlns:wsp="https://schemas.xmlsoap.org/ws/2004/09/policy"
                    	xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702"> 
                        <sp:AsymmetricBinding>
                            <wsp:Policy> 
                                <sp:InitiatorToken>
                                    <wsp:Policy>
                                        <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
                                            <wsp:Policy>
                                                <sp:WssX509V3Token10/>
                                            </wsp:Policy>
                                        </sp:X509Token>
                                    </wsp:Policy>
                                </sp:InitiatorToken>
                            <sp:RecipientToken>
                                <wsp:Policy>
                                    <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
                                <wsp:Policy>
                                    <sp:WssX509V3Token10/>
                                </wsp:Policy>
                                    </sp:X509Token>
                                </wsp:Policy>
                            </sp:RecipientToken>
                            <sp:AlgorithmSuite>
                                <wsp:Policy>
                                    <sp:Basic256/>
                                </wsp:Policy>
                            </sp:AlgorithmSuite>
                            <sp:Layout>
                                <wsp:Policy>
                                    <sp:Lax/>
                                </wsp:Policy>
                            </sp:Layout>
                            <sp:IncludeTimestamp/>
                            <sp:ProtectTokens/>
                            <sp:OnlySignEntireHeadersAndBody/>
                            </wsp:Policy>
                        </sp:AsymmetricBinding>
                        <sp:Wss10>
                            <wsp:Policy>
                                <sp:MustSupportRefKeyIdentifier/>
                                <sp:MustSupportRefIssuerSerial/>
                            </wsp:Policy>
                        </sp:Wss10>
                        <sp:SignedParts>
                            <sp:Body/>
                        </sp:SignedParts>
                    </wsp:Policy>