Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
A couple of weeks ago I wrote a brief post about how to generate symmetric keys that can be used with DataPower. It demonstrates how to generate shared keys of various lengths using the Unix dd command. Today, someone asked how a shared key (or symmetric key) can be generated using the openssl…
Read article: Symmetric Keys—AddendumThis is an old picture that I made for a 2010 JBoss World security presentation. It came in handy not so long ago when I was explaining the SSL Handshake to someone.
Read article: SSL Handshake—The VisualI will be leading a discussion panel at IBM Impact 2012 in Las Vegas on Monday, April 30th, 3:45-4pm. More information can be found here. It will be an open ended discussion and Q&A session detailing experiences rolling out IBM technology for an ESB. I’ve done this at a couple of different…
Read article: IBM Impact 2012 Client Panel: Experiences with IBM SOA Stack RolloutAnyone who has spent time working with DataPower has had to write an XSLT stylesheet at some point. DataPower provides a library of functions and elements that provide access to various DataPower functionality.
Read article: DataPower Extension Functions and ElementsXSLT is the only scripting language supported by WebSphere DataPower appliances. It is the only way to customize DataPower functionality and behavior. So, anyone that works with DataPower for a while will sooner be writing XSLT stylesheets.
Read article: XSLT & XPathI often have to go back and look up these details; so, I decided to post a standard starting point for a new stylesheet.
Read article: Sample Stylesheet—Starting PointPreviously, I wrote a Wire Protocols post that outlined the common protocols that I’ve encountered when working with ESBs and SOA technology-especially DataPower. A primary function of an ESB is to provide the ability to convert service requests between these different protocols in a mostly…
Read article: Protocol TransformationsI have watched this debate unfold at every client site I have visited in the past few years. There are several angles to this question. From a technical stand point, a service is a program that takes some type of input, performs a task, and return some type of output. This is vague. It can describe…
Read article: What is a Web Service? What is a Service?DataPower does not seem to provide a tool to generate a Shared Key that can be used with 3DES or AES algorithms. DataPower does provide a tool for generating X509 private keys, certificate requests, and self-signed certificates-in the Crypto Tools section-but we are concerned with Shared Keys…
Read article: Generating and Uploading a Shared Key (Symmetric Key) to DataPower AppliancesLooking for something specific? Browse all 124 topics.
