User guide

Chapter 15: User Authentication, SOAP Digital Signature and XML Encryption for Web Services (SOAP)
15-20
• descendant::*[local-name()='ResponseBody' and namespace-uri()='urn:SampleMsg'][1]
Specify the first m:ResponseBody element, which is a descendant of the SOAP envelope. If
"XPath" is specified as the type of encryption, the m:ResponseBody element will be encrypted. If
"XPath(Content)" is specified as the type of encryption, the Response element, which is the content
of the m:ResponseBody element, will be encrypted.
Specifying the Encryption Target Using Content-Id
The encryption target can be specified using Content-Id in the same manner as the SOAP digital
signature using Content-Id. For information about how to specify the encryption target, refer to
Specifying the Signature Target.
Decrypting SOAP Messages Using the XML Encryption
The following explains the procedure for decrypting SOAP messages that have been encrypted using
the XML encryption.
Implementing an Application that Performs Decryption Using the XML Encryption
An application that decrypts the SOAP message using the XML encryption is implemented by changing
the Web service information. There is no need to change the application programs.
Preparing a Private Key
To decrypt an encrypted SOAP message, a private key and a site certificate corresponding to the
private key are needed. For information on how to specify the private key and site certificate, refer to
Chapter 14 How to prepare PKI Environment for Web Services (SOAP).