Question

我们必须实现基于wsdl的代理服务，我们必须使用这样的安全策略

<localEntry xmlns="http://ws.apache.org/ns/synapse" key="policy">
      <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="SigOnly">
         <wsp:ExactlyOne>
            <wsp:All>
               <sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                  <wsp:Policy>
                     <sp:InitiatorToken>
                        <wsp:Policy>
                           <sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
                              <wsp:Policy>
                                 <sp:WssX509V3Token10/>
                                 <!-- sp:WssX509V3Token10/ --></wsp:Policy>
                           </sp:X509Token>
                        </wsp:Policy>
                     </sp:InitiatorToken>
                     <sp:RecipientToken>
                        <wsp:Policy>
                           <sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
                              <wsp:Policy>
                                 <sp:WssX509V3Token10/>
                                 <!-- sp:WssX509V3Token10/ --></wsp:Policy>
                           </sp:X509Token>
                        </wsp:Policy>
                     </sp:RecipientToken>
                     <sp:AlgorithmSuite>
                        <wsp:Policy>
                           <sp:TripleDesRsa15/>
                        </wsp:Policy>
                     </sp:AlgorithmSuite>
                     <sp:Layout>
                        <wsp:Policy>
                           <sp:Strict/>
                        </wsp:Policy>
                     </sp:Layout>
                     <sp:IncludeTimestamp/>
                     <sp:ProtectTokens/>
                     <sp:OnlySignEntireHeadersAndBody/>
                  </wsp:Policy>
               </sp:AsymmetricBinding>
               <sp:Wss10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                  <wsp:Policy>
                     <sp:MustSupportRefKeyIdentifier/>
                     <sp:MustSupportRefIssuerSerial/>
                  </wsp:Policy>
               </sp:Wss10>
               <sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                  <sp:Body/>
               </sp:SignedParts>
            </wsp:All>
         </wsp:ExactlyOne>
      </wsp:Policy>
   </localEntry>

我们该怎么办？我们必须遵循哪些步骤来实施它？我们需要任何壁垒配置吗？

提前致谢。

Answer 1

您需要使用WSO2 Developer Studio IDE执行此任务...

步骤1：创建用于存储策略的注册表资源项目。
步骤2：将安全策略应用于代理服务。
步骤3：创建复合应用程序并部署代理和 WSO2 ESB的安全政策。

看看这个：https://docs.wso2.com/display/ESB500/Applying+Security+to+a+Proxy+Service

我们如何在WSO2 ESB 5.0中实现这个ws-security策略

1 个答案: