Use Case for WSS Provider Reference

This is the third task of the use case. It is a use case to demonstrate the use of the command-line interface in the following scenario: you want to deploy a governance control to verify the signed request received by the WSS Provider. You also want the governance control to verify timestamps.

Procedure

  1. Navigate to <TIBCO_HOME>/ogp/1.2/samples/WSSConsumer-WSSProvider and open the data file corresponding to WSS Provider Reference.
  2. This step helps you create the WSS Provider governance control. Under the element, <rule:StandaloneRule>, enter the appropriate values for the <name> and <description>, and <template> parameters.
  3. Under the parameter group WSS Processor, provide the name of the resource instance.
  4. This step helps you achieve integrity by verifying the signed request. In this case, remember to select the same elements as the ones selected in WSS Consumer. Under the parameter group, Integrity, provide the following values: 
    <ParamGroup>
   <name>Integrity</name> 
   <Param> 
      <name>SubjectIsp</name> 
      <value>mutualIspRI</value>
   </Param>
   <Param> 
      <name>VerifySignatureSelected</name> 
      <value>true</value> 
   </Param> 
   <Param> 
      <name>SignHeaderSelected</name> 
      <value>true</value> 
   </Param> 
   <Param> 
      <name>SignResponseSelected</name> 
      <value>true</value> 
   </Param> 
   <Param> 
      <name>SignSetting</name> 
      <value>SignParts</value>
   </Param> 
   <Param> 
      <name>SignBodySelected</name> 
      <value>false</value> 
   </Param>
  5. This step helps you verify a timestamp. Under the parameter group Timestamp, provide the following values: 
    <ParamGroup> 
    <name>Timestamp</name> 
    <Param> 
       <name>VerifyTimestamp</name> 
       <value>true</value> 
    </Param> 
    <Param> 
       <name>TimeToLive</name> 
       <value>300</value>
    </Param> 
    <Param> 
       <name>SetResponseTimestampSelected</name> 
       <value>true</value> 
    </Param> 
</ParamGroup>
  6. Specify the object groups that get affected by the governance control.
  7. Save the file.