Use WSE encryption SOAP packet (8)

zhaozj2021-02-16  45

Below is the result of the packet encrypted after the WSE is serialized at runtime

XMLns: xsi = "http://www.w3.org/2001/xmlschema-instance"

XMLns: xsd = "http://www.w3.org/2001/xmlschema">

XMLns: WSU = "http://schemas.xmlsoap.org/ws/2002/07/UTILITY">

2003-02-11T20: 21: 52Z

2003-02-11T20: 26: 52Z

XMLns: wsse = "http://schemas.xmlsoap.org/ws/2002/07/secext">

TYPE = "http://www.w3.org/2001/04/xmlenc#encryptedkey"

XMLns: Xenc = "http://www.w3.org/2001/04/xmlenc#">

Algorithm = "http://www.w3.org/2001/04/xmlenc#rsa-1_5" />

Ymlkvwxyd8vuguyliuioxoy7zyn9pwhbfahciyov0aydeaqqpw =

UYKGBEXDY8LYSZQGDGXOXOY7ZYN9PWHBFAHCIYOV0 ... BWRNWK =

"# EncryptedContent-CF014249-0E2A-4F8B-9002-13A7DE916BE0" />

TYPE = "http://www.w3.org/2001/04/xmlenc#encryptedkey"

XMLns: Xenc = "http://www.w3.org/2001/04/xmlenc#">

Algorithm = "http://www.w3.org/2001/04/xmlenc#rsa-1_5" />

Ymlkvwxyd8vuguyliuiydeaqqpw =

IN8KF1CIJJJXCLZ ... WMQBeevxmzk =

"# EncryptedContent-0744279A-02BF-4AD1-998E-622208EDED0E" />

THIS Part of The Response Does Not NEED ENCRYPTION

WSU: ID = "ID: E5E8D792-ABE7-4476-91D0-856FBDF4A958"

XMLns: WSU = "http://schemas.xmlsoap.org/ws/2002/07/UTILITY">

ID =

"EncryptedContent-CF014249-0E2A-4F8B-9002-13A7DE916BE0"

TYPE = "http://www.w3.org/2001/04/xmlenc#content"

XMLns: Xenc = "http://www.w3.org/2001/04/xmlenc#">

Algorithm =

"http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />

2MnHckgvh / 5JB0PF4PCH3U2VAUKSWSA ... AFEVJZT =

Note that in this encrypted message, there is a binaryseircurityToken element for representing the X.509 certificate, but there are two separate EncryptedKey elements, each EncryptedData element is added to SOAPCONText, which is encrypted in the outermost EncryptedResponse, you can only see EncryptedData elements. When EncryptedResponse is encrypted, the EncryptedData element that represents EncryptedSub elements is also converted to ciphertext. When this message is received at the client, SecurityInputFilter uses information from the mark to obtain a private key that has been decrypted by the two EncryptedKey elements.

转载请注明原文地址:https://www.9cbs.com/read-25185.html

New Post(0)