TEC Workbook - IBM

3.2.7 Verifying the request signature and signing the response
In the next steps, you’ll modify the ProductServiceProxy Multi-Protocol Gateway to verify the digital
signature sent by soapUI, and to put a digital signature on the response sent back to soapUI.
__1. In the search field above the navigation tree, type the word multi.
__2. In the search results, locate and click on: Edit Multi-Protocol Gateway
__3. Select ProductServiceProxy from the list.
__4. As you’ve done before, open the policy editor window by clicking on the ellipsis in the
Multi-Protocol Gateway Policy field.
3.2.8 Verify the request’s digital signature
__1. Drag a Verify action onto the processing rule after the match action.
__2. Double click the yellow outlined verify action to complete its configuration.
IBM Software
__3. In the Validation Credential field's dropdown list, select: ProductdSvcConsumersValcred. This
validation credential contains soapUI’s public certificate which will be used when verifying the
digital signature.
__4. Click Done.
In the following steps, you'll add a transform action that will strip off the digital signature that soapUI
created. This is not required, but is often done in order to reduce the overall message size. WebSphere
DataPower appliances come with a library of pre-built stylesheets that perform various useful tasks such
as stripping a digital signature. These pre-built stylesheets can be found in the store: directory.
Lab 3 - Securing XML Message Content using WS-Security Page 57