Java

Verify XML Digital Signature

See more XML Digital Signatures Examples

Verifies XML signatures in an XML file. Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.StringBuilder;
import com.chilkatsoft.chilkat2.XmlDSig;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        StringBuilder sbXml = new StringBuilder();
        try {
            sbXml.loadFile("qa_data/xml_dsig_verify/csioz_sample.xml", "utf-8");
        } catch (ChilkatException e) {
            System.out.println("Failed to load XML file.");
            return;
        }

        XmlDSig dsig = new XmlDSig();

        // First load the XML containing the signatures to be verified.
        try {
            dsig.loadSignatureSb(sbXml);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // It's possible that an XML document can contain multiple signatures.
        // Each can be verified as follows:
        int i = 0;
        while (i < dsig.getNumSignatures()) {
            // Select the Nth signature by setting the Selector property.
            dsig.setSelector(i);

            // The bVerifyReferenceDigests argument determines if we want
            // to also verify each reference digest.  If set to false,
            // then only the SignedInfo part of the Signature is verified.
            boolean bVerifyReferenceDigests = true;
            boolean bVerified;
            try {
                dsig.verifySignature(bVerifyReferenceDigests);
                bVerified = true;
            } catch (ChilkatException e) {
                bVerified = false;
            }
            System.out.println("Signature " + (i + 1) + " verified = " + bVerified);

            i = i + 1;
        }
    }
}