All messages need to be digitally signed by the sender (generally the Consumer/Requester). Then, the recipient (Producer/Supplier) must verify the signature applied.

The message should be sign by the sender Adaptor with is X.509 certificate and the signature is verified not only by the CISE Nodes involved in the transfer process but also by the final recipient Adaptor if it wants to.



The procedure for sign a message and for verify the signature is described in this section, and should be ensured:


The following excerpt is an example of a signed PullRequest message

A signed PullRequest message - see the Signature element  Expand source 
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<ns4:PullRequest xmlns:ns4="http://www.cise.eu/servicemodel/v1/message/" 
               xmlns:ns2="http://www.cise.eu/servicemodel/v1/authority/" 
               xmlns:ns3="http://www.cise.eu/servicemodel/v1/service/">
	<CorrelationID>549065e1-fbbc-43e2-9f6a2b7e4d56b869</CorrelationID>
	<CreationDateTime>2017-1106T15:33:21.660Z</CreationDateTime>
	<MessageID>549065e1-fbbc-43e2-9f6a2b7e4d56b869</MessageID>
	<RequiresAck>true</RequiresAck>
	<Sender>
		<ServiceID>pt.fornecedor.ais.gtw1.a isstreams</ServiceID>
		<ServiceOperation>Push</ServiceOperation>
		<ServiceType>VesselService</ServiceType>
	</Sender>
	<Recipient>
		<ServiceID>pt.fusion.serv.service.1</ServiceID>
	</Recipient>
	<Payload xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="ns4:XmlEntityPayload">
		<InformationSecurityLevel>EUSecret</InformationSecurityLevel>
		<InformationSensitivity>Amber</InformationSensitivity>
		<Purpose>VTM</Purpose>
		<Vessel>
			<Name>BLUE OCEAN</Name>
			<MMSI>111111</MMSI>
		</Vessel>
	</Payload>
	<PullType>Request</PullType>
	<ResponseTimeOut>2147483648</ResponseTimeOut>
	<PayloadSelector>
		<Selectors>
			<Selector>//Payload/Vessel[1]/Name</Selector>
			<Operator>EQUAL</Operator>
		</Selectors>
	</PayloadSelector>
	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
		<SignedInfo>
			<CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
			<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
			<Reference URI="">
				<Transforms>
					<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#envelopedsignature"/>
				</Transforms>
				<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
				<DigestValue>h1yA3qzDSlNVEWjBnTNqsPrsRTk=</DigestValue>
			</Reference>
		</SignedInfo>
		<SignatureValue>kCT2fx8GDu3JLPFiIW+frkpNulj+XU4MMCUdHdNAF1xzeP5wbX2RvRnlf4OvkK4nNBffhuzJgjI5iSlrU7ZdtyPzjiReiQB4bOR2VunceeRUI77Dkhyb0m3kFx7sF1tDEVji+a7VTYOaiURQFEPSHlV36u356DJ3BAZHgttV/iN412ZOy5u9IiJJsUw0D8w3kbiV3E7KftiC7qHllDBZDAsacPVUm/iUvvzlsnLHXtKmhyc/yOqvwzTEmtHXWczeaY5SW70QyZjJLmEQP7diXCpW8QrqQCThj06tPue5kLOPtepTPuqeqCyQ+4Lt9OZqwjqw3dQfa7ze3Z+LuIwLhA==</SignatureValue>
		<KeyInfo>
			<X509Data>
				<X509SubjectName>CN=prxy01-gw02.gw02.eucise.it, OU=Hosts, O=it, DC=eucise, C=it</X509SubjectName>
				<X509Certificate>MIID6jCCAtKgAwIBAgIBHzANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJpdDEWMBQGCgmSJomT8ixkARkWBmV1Y2lzZTEdMBsGA1UECwwUZXVjaXNlLml0IHNpZ25pbmcgQ0ExHTAbBgNVBAMMFGV1Y2lzZS5pdCBzaWduaW5nIENBMB4XDTE3MDcxMDE0NDk1NVoXDTE5MDcxMDE0NDk1NVowZzELMAkGA1UEBhMCaXQxFjAUBgoJkiaJk/IsZAEZFgZldWNpc2UxCzAJBgNVBAoMAml0MQ4wDAYDVQQLDAVIb3N0czEjMCEGA1UEAwwacHJ4eTAxLWd3MDIuZ3cwMi5ldWNpc2UuaXQwggEiMA0GCSqGSIb3DQEB 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</X509Certificate>
			</X509Data>
		</KeyInfo>
	</Signature>
</ns4:PullRequest>


Please, use the new version of the library for new developments. The library issued by RTI during the project EUCISE 2020 is now deprecated.