(moved to a more technical/infrastructure-focused community, who will know more about X509)
Does that mean that in addition to the two-way SSL layer, the data itself inside the XML request is encrypted ?
Is the decrypted data a string or a file to save as an attachment ?
Another question is, do you have the right to store it once it's decrypted ? Is your database itself encrypted ?
Yes. On top of SSL, the webservice itself establishes mutual authentication by requiring the consumer (Remedy) to decrypt a payload (an encrypted byte array encapsulated in a Base64 encoded string) using it's private key. The payload contains a special short lived session key which is then used in subsequent calls to the webservice.
Once decrypted, the payload is a string. That string then needs to be saved for a short period of time while various calls to the web service occur across filters into a staging form, which ultimately populate a final form for consumption / viewing in Remedy. Hence why I am asking if there is a way to then again encrypt that across forms for a short period of time within a user's session.
It all starts and stops by understanding just what sort of crypto can be done in Remedy. I come from a world where we aren't so shackled and can write C# or Java code directly to do a lot of manipulation; I haven't found a way to do that within Remedy.
As to your questions on perms and db encryption, the fact is we are building this integration to work with any Remedy deployment. This will be a COTS addon for Remedy that integrates with our company's product line. So the least impact we can be on the target Remedy system, the better.
1 of 1 people found this helpful
Often when one's hands are tied they will either call another binary/script using a Run Process action or write a plug-in.
AR System® Filter Scripting Plug-Ins (really old, doc 63 )
Here is an example where somebody created a regex plug-in since you cannot perform regex natively in Remedy: Regular Expression (Regex) AR API Filter Plug-in (v4.1)
Now this is interesting. If I can write a plugin to do the heavy lifting behind the scenes, I would be a REALLY happy camper. Especially if I can write it in C# as the article seems to indicate. I will dig into that right now.
Thanks for the tip. I will let you know how it goes once I dive a bit deeper into the docs to see how to write such plugins.
Cool! I hope this works well for your purpose (I think it will).
Here is some more info: https://docs.bmc.com/docs/display/public/ars81/Creating+C+plug-ins
One thing you may want to consider is AR things have been moving away from C to Java. Not sure how long C support will remain. Here is the Java info: https://docs.bmc.com/docs/display/public/ars81/Creating+Java+plug-ins
I am actually looking at the Filter Script Library, and using C#, or maybe Java. I need to find out if that is supported in 8.1 though, and what the requirements are so I can verify what requirements are needed. Just trying to dig through the docs now to see.
Man the Filter Script Library for C# was EXACTLY what I need. Unfortunately, it doesn't look like there has been any work on it since around 2009, and there are plenty of people asking if it works anymore after v7.6.
That's really too bad. BMC, if you are listening, that was a powerful library. You were on to something.
I'll check the Java plug-in library next. That is definitely supported and I just need to figure out how to get the BMC libs into my external dev env for that. Should be able to get that from the Remedy server though.
1 of 1 people found this helpful
Yes Java is the way to go.
This should get you started pretty fast, before getting serious with Jason's links: