Can any one please specify the process to generate digital signature in apigee

[rajeshnimmadan]

I am trying to validate my API by using digital signature. Can any one from the team could you please specify the process.

[zubermohammad · Accepted solution]

Hi @Rajesh Nimmada ,

There is not standard policy available for doing Digital Signature validation.

You will have write custom Java Callout.

Please refer this tutorial for Generating and Verifying digital signatures in Java.

https://docs.oracle.com/javase/tutorial/security/apisign/

They have shown very simple verification process, check and Weakness and Alternatives section as well for more advanced and production ready checks.

I haven't tried doing this in any proxy but should work as its plain Java code which can be stubbed in a Java Callout policy.

Hope to see it in a proxy. Keep us posted!

Cheers.

[rajeshnimmadan]

super thank you very much