pub.security.xml:decryptXML

WmPublic. Decrypts the encrypted XML, and returns the XML as either a string or stream object.

Input Parameters

xmldata	String Optional. Encrypted XML that needs to be decrypted as plain text.
xmlStream	InputStream Optional. Encrypted XML in the form of an input stream. Note: If both xmldata and xmlStream are provided, xmlStream takes precedence; Integration Server uses the xmlStream value and returns only decryptedXMLStream.
keyStoreAlias	String Optional. Alias of the keystore that contains the private key used for decryption.
keyAlias	String Optional. Alias of the private key, contained in the keystore specified by the keyStoreAlias parameter, that is used for decryption.
encoding	String Optional. Specifies the encoding to use if the encoding cannot be extracted from the XML. If encoding is not specified in the XML document or in the encoding parameter, Integration Server uses UTF-8. The encoding value must be a valid IANA encoding.

Output Parameters

decryptedXMLData	String Conditional. Decrypted XML data. decryptedXMLData is returned when the input parameter xmldata is provided.
decryptedXMLStream	Object Conditional. A decrypted XML OutputStream object. decryptedXMLStream is returned when the input parameter xmlStream is provided.

Usage Notes

There are several prerequisites to using pub.security.xml:decryptXML:

Certificates must be configured for Integration Server and the client with which it is exchanging secure XML.

The sending, encrypting client must have access to Integration Server's public key before the document exchange can occur.

Integration Server stores its certificates in keystores and truststores. You must configure a keystore and truststore for Integration Server before using the XML encryption services.

You access the public and private keys for Integration Server through aliases. For information about Integration Server keystores and truststores, refer to webMethods Integration Server Administrator’s Guide.

The pub.security.xml:decryptXML service works as follows:

1. The external system sends the XML document encrypted with the Integration Server's public key.

2. Integration Server receives the document and passes it to the XML service.

3. Integration Server uses the private key member of the key pair to decrypt the XML.

4. The decrypted XML is returned from the service.

If both xmldata and xmlStream are provided, xmlStream takes precedence; Integration Server uses the xmlStream value and returns only decryptedXMLStream.

keyAlias and keyStoreAlias should either both be provided or both be absent from the input. If no value is provided for these parameters, Integration Server uses the private key/certificate specified for the Decryption Key. If no value is specified for Decryption Key, Integration Server uses the SSL Key.

For information about configuring the Decryption Key and SSL Key keystore aliases, refer to webMethods Integration Server Administrator’s Guide.