API Connect

API Connect

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#API Connect
#Applicationintegration
#APIConnect
 View Only
  • 1.  API Connect v10.x not supporting sha3 crypto hmac algorithm

    Posted 09/20/24 10:21 AM
    Hi,
    I have implemented signature verification for webhook event, it is working with shas-1 hmac algorithm

    But had a new requirement to verify the signature with sha-3
    which the apic is throwing unsupported error

    fyr:
    Screenshot 2024-09-20 at 7.48.35 PM.png


  • 2.  RE: API Connect v10.x not supporting sha3 crypto hmac algorithm

    Posted 09/20/24 11:19 PM
    Hi @Steve,
    Could you pls comment on this.
    SHA-3 isn't working in APIC v10.
    I don't see it in the documents too as supported.

    Pls find more info on below mail trail. 

    Thx,
    Mani

    On Fri, 20 Sep 2024 at 7:49 PM, pratap vadlapati <pratapvadlapati@gmail.com> wrote:
    Hi,
    I have implemented signature verification for webhook event, it is working with shas-1 hmac algorithm

    But had a new requirement to verify the signature with sha-3
    which the apic is throwing unsupported error

    fyr:
    Screenshot 2024-09-20 at 7.48.35 PM.png





  • 3.  RE: API Connect v10.x not supporting sha3 crypto hmac algorithm

    Posted 09/23/24 12:16 AM

    Hi Team,

    Appreciate your help on the below issue. 

    We are stuck implementing this solution, I am trying to generate hmac signature using sha3 algorithm is not working, giving unsupported algorithm which is again working with sha1.

    Pls find the screenshot in trail mail. Thx







  • 4.  RE: API Connect v10.x not supporting sha3 crypto hmac algorithm

    Posted 09/23/24 01:16 AM

    Well depending on the whether the verification is made in java or in C there are different responses.

    If the verification is made in java, make sure to use the highest version of java available. I don't believe Java 8 will support Hmac with Sha3 natively.

    You may also need to add additional libraries (like Bouncy Castle)...

    Review your documentation and find the command to apply to the Integration Node or Integration Server to have it run in a higher version of Java.



    ------------------------------
    Francois Brandelik
    ------------------------------



  • 5.  RE: API Connect v10.x not supporting sha3 crypto hmac algorithm

    Posted 09/23/24 01:17 AM

    I recommend you raise a support case so the team can take a look.

    A reminder that this forum is not official support.



    ------------------------------
    Chris Dudley
    ------------------------------



  • 6.  RE: API Connect v10.x not supporting sha3 crypto hmac algorithm

    Posted 09/23/24 01:23 AM
    Hi Chris,
    Thanks for your reply. Sure will raise support.
    I would like to know whether sha3 algorithm is supported by APIC V10.