How to sign and verify signature in mule

1. Signature Security Feature
Mule
1. Sign Signature
2. Verify Signature

2. Mule Digital Signature Processor
• The Mule Digital Signature Processor adds a digital
signature to a message payload, or part of the
payload, to prove the identity of the message’s
sender. Mule can also verify a signature on a
message it receives to confirm the authenticity of the
message’s sender. To sign or verify the signature of a
message, Mule uses one of the following two Digital
Signature Strategies:
• JCE Signer
• XML Signer

3. Adding a Digital JCE Signature to a
Message
• HTTP Connector
• Convent String to Byte Array(This is required
because mule sign on byte array format)
• Sign the message payload

4. Global Signature configuration
information
• Set JCE_SIGNER as default Signer, Other option is XML_SIGHNER

5. Global Signature configuration
information
• Select Jce Signer Tab
• Select Radio Button – Define attribute
• Algorithm – HmacMD5
• Key – Sample value

6. Sign Signature
• Connector Configuration done at last slide
• Operation will be Sign
• Input reference is payload, data that will be signed
• Variable, signed value will be stored by mule signature

7. Sign Signature Flow
Sample URL :http://localhost:8081/sign , body Contain sunil as text
“sunil” signature will be generated

8. Verify Signature
• Connector Configuration same as done for sign signature
• Operation will be “Verify Signature”
• Input reference is actual value of signature
• Expected Signature will contain the signature that need to be verified

9. Verify Signature Flow
Sample URL :
http://localhost:8081/verifySignature?user=sunil&token=7i3AoaN5hJih8AEH9bUxag
==
Verify sunil signature passed in token

10. Verify Signature Flow
Sample URL :
http://localhost:8081/verifySignature?user=sunil&token=7i3AoaN5hJih8AEH9bUxag
==
Verify sunil signature passed in token