Use Case for WSS Consumer Reference

This is the second task of the use case. It is a use case to demonstrate the use of the command-line interface in the following scenario: you want to deploy a governance control to sign the request sent from the WSS Consumer. You also want the governance control to set a timestamp on the request.

Procedure

  1. Navigate to <TIBCO_HOME>/ogp/1.2/samples/WSSConsumer-WSSProvider and open the data file corresponding to WSS Consumer Reference.
  2. This step helps you create the WSS Consumer governance control. Under the element, <rule:StandaloneRule>, enter the appropriate values for the <name> and <description>, and <template> parameters.
    <description>Rule created via CLI</description> 
    <name>WSConsumerSignVerifySignatureOnResponseCLI</name>
    <template localPart="WssConsumer" namespace="http://xsd.tns.tibco.com/governance/rule/template/2010"/> <templateVersion>1.0.0</templateVersion>
  3. Under the parameter group WSS Processor, provide the name of the resource instance:
    <ParamGroup> 
       <name>WssProcessor</name> 
       <Param> 
          <name>WssAsp</name>
          <value>wssAspRI</value>
        </Param> 
    </ParamGroup>
  4. This step helps you achieve integrity by signing the request. Under the parameter group Integrity, provide the following values:
    <ParamGroup> 
      <name>Integrity</name> 
      <Param> 
         <name>SignRequestSelected</name>
         <value>true</value> 
      </Param> 
      <Param> 
         <name>SignSetting</name> 
         <value>SignParts</value> 
      </Param> 
      <Param> 
         <name>SubjectIsp</name> 
         <value>mutualIspRI</value> 
      </Param> 
      <Param> 
         <name>SignHeaderSelected</name> 
         <value>false</value>
      </Param> 
      <Param> 
         <name>SignBodySelected</name> 
         <value>true</value> 
      </Param> 
      <Param>
         <name>VerifySignatureSelected</name> 
         <value>true</value>
      </Param> 
  5. This step helps you set a timestamp. Under the parameter group Timestamp, provide the following values:
    <ParamGroup> 
       <name>Timestamp</name> 
       <Param> 
          <name>TimeToLive</name> 
          <value>300</value> 
       </Param> 
       <Param> 
          <name>SetRequestTimestampSelected</name> 
          <value>true</value> 
       </Param> 
       <Param> 
          <name>VerifyTimestamp</name> 
          <value>true</value> 
       </Param>
    </ParamGroup>
  6. This step helps you distribute the governance control to selected object groups. Specify the object groups that get affected by the governance control.
    <ParamGroup> 
       <name>Default</name> 
       <Param> 
          <name>ObjectGroups</name> 
          <value>MCR-DAA1-SoapReference</value>
       </Param> 
    </ParamGroup>
  7. Save the file.