How To Get The Shared Secret For CXML Transactions In Clear Text Rather Than Encrypted Format

Agenda:

In this blog we will discuss how to send shared secret key in clear text.

In 11i by default password will be encrypted. In order to send clear text you may need to do customization. However in r12 you do not have to worry.

Please refer below Oracle support document

How To Get The Shared Secret For CXML Transactions In Clear Text Rather Than Encrypted Format ? (Doc ID 553000.1)
The Shared Secret is Sent Encrypted on cXML Purchase Orders to the Supplier (Doc ID 563954.1)


By default r12 sends the password in plain text. You want to know how? Let's find out.

Check out PO_XML_DELIVERY.get_cxml_header_info package it calls ecx_eng_utils.get_tp_pwd API to get the encrypted password. Hence the order xml file will have the encrypted password available in the payload.

But what happens is before the payload goes into queue process.
ecx_eng_utils.convertEncryCodeClob is called to convert to plan text and then queued. After it is queued again password is encrypted and stored in ECX_DOCLOGS table.

To validate if right password is sent, stop Oracle Transport Agent and test the process.

Since OTA is down the order will be still in the queue table (ECX_OUTQUEUE).

In the user_data column you will see password in plain text.


Thanks for visiting the blog.