1 About This Recipe

Use this recipe to sign and verify messages using Oracle Cloud Infrastructure (OCI) Vault.

Note:

This recipe is available as Oracle Integration — OCI Vault | Sign and Verify Messages in Oracle Integration. Oracle provides this recipe as a sample only. The recipe is meant only for guidance, and is not warranted to be error-free. No support is provided for this recipe.

Overview

This recipe enables you to sign and verify messages received from external systems using either Oracle or customer-managed keys in OCI Vault.

The recipe uses the OCI Vault REST APIs to sign and verify messages received from external applications. It contains two integration flows:

  • Sign Message: Accepts message in string format as part of the request payload and invokes the OCI Vault Sign REST API, which generates a message signature and sends the signed message as part of the response.
  • Verify Message: Accepts signed message as part of the request payload and invokes the OCI Vault Verify REST API, which verifies the message signature and sends the response as true or false.

System and Access Requirements

  • Oracle Integration, Version 24.04 or higher

  • OCI Vault

  • An account on OCI with the Administrator role

  • OpenSSL version 3