Embedding Signature in SOAP XML requests in Web services for SiteScope monitors

Idea ID 2691709

Embedding Signature in SOAP XML requests in Web services for SiteScope monitors

0 Votes

Details (SD02501928)
SiteScope Web Service Monitors are today used to send XML Requests and check errors in the Response by parsing text as Regular Expression.

PLEASE NOTE I had difficulties pasting the example SIGNED and UNSIGNED examples into this web page.

The current Configuration in "User Defined SOAP XML" only allows for the XML Request to be pasted so we are having to paste Signed XML request as below::


   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QZw98OmWrtyo38DcyALJvUqL7j5/9S+ArixzKt+2cV4qeIu/YcJlI7MF8dvfgoDxZrU7pR7nN6jv
jcYs7YoomqK8SCHGYUk8shXg2eoZV9Cq5Ihb+McZDmltEYNk4amMAyOQZGKrnZN+pQKL7xEi0S9o
5jYpPWWdgKOLxcDsn8Jua2y+zziS0ZfDtiP7apW1WElDO9j2xK1poatnFM1XcdjeWmUPVk5Q4qvS
SwinSgKbWrj66NYiJBtIzGgtGyg00EALfNTCewwJvmQ2DR5DXdQHIFrCiEaVgNxRSHLI0tdx1uWw
HwdAmFGGD/F0J0UdDe+AqJiimWwGQVB3hIbQIA==

   
      
         ODESitescope
      
   

************************************************
This needs to be enhanced so the Signature can be applied externally by using a certificate that can be selected so we can just paste the XML without signing:


   
   
      
         ?
      
   

Scenario

Every web service where XML Request / Response is used for monitoring.

Workaround

EVERY Request is signed using SoapUI and then the signed XML is pasted in User Defined XML

Unacceptable

Every time an update needs to be made to the web service monitor, the XML has to be signed using SoapUI. This is a lot of re work to change every one of the 40,000 monitors whenever a new cert has to be used. This is adding hundreds of man hours for our team to update every monitor. Each monitor needs to be first run in SoapUI to sign the XML. Then the signed request needs to be pasted in SiteScope.

Required

This is used for all Web Service Monitors being used.

UNSIGNED REQUEST


   
   
      
         test
      
   

SAME REQUEST SIGNED


   syyF+7+73v31CLNOD6wbi/UpAGs=xqPLyUyyJpSO8PH84IKuQZtQapGyTkC4K0qhf8o/3m0ng98XHdcRF5QtHH+8+yxoYoXvyDgK/Ggd
FmPAzbNjPPulPLb6/rPoqeBI2T3JsKDUP2xDQPsmzAY004/exyCc+QzjwFthqHue1OyBSirU9gOM
EgPmTRU3EfgicDlRvxth/W8N1E1TuEiu7deF/fZbciJIiH3tSwhrHoffBbBsu3B5dmmL24DWMlmW
dLAwWrfCnE1bHatIj0wJInM2xMwgy91X3sJW00VnN94NYCnjnEZRsZAPgey4zIQj6IzSsb3LeUpT
I5VW1mKAeKMRhA1j+16Kqe7XXUWLUUxYDnGBrw==CN=soaDevelopment.XXXX.com,OU=soacoetest,O=XXXX_IT,L=Atlanta,ST=GA,C=US,1.2.840.113549.1.9.1=#161a534f41506f6c6963794d676d742e49544064656c74612e636f6d1471635281
   
      
         test
      
   

 

2 Comments
Cadet 3rd Class
Cadet 3rd Class
Status changed to: Waiting for Votes
 
Micro Focus Contributor
Micro Focus Contributor
Status changed to: Declined

Moving this Idea to “Declined” status as it has been open for > 1 year and has not gathered broad customer interest and/or there are no plans to implement.

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.