Lua Requires Chilkat v11.0.0+

Signing HTTP Messages

See more RSA Examples

Demonstrates how to sign HTTP messages per draft-cavage-http-signatures-10 Lua

local chilkat = require("chilkat")

-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

local bCrlf = true
local sbPublicKeyPem = chilkat.StringBuilder.new()
sbPublicKeyPem:append_line("-----BEGIN PUBLIC KEY-----", bCrlf)
sbPublicKeyPem:append_line("MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCFENGw33yGihy92pDjZQhl0C3", bCrlf)
sbPublicKeyPem:append_line("6rPJj+CvfSC8+q28hxA161QFNUd13wuCTUcq0Qd2qsBe/2hFyc2DCJJg0h1L78+6", bCrlf)
sbPublicKeyPem:append_line("Z4UMR7EOcpfdUE9Hf3m/hs+FUR45uBJeDK1HSFHD8bHKD6kv8FPGfJTotc+2xjJw", bCrlf)
sbPublicKeyPem:append_line("oYi+1hqp1fIekaxsyQIDAQAB", bCrlf)
sbPublicKeyPem:append_line("-----END PUBLIC KEY-----", bCrlf)

local pubKey = chilkat.PublicKey.new()
pubKey:load_from_string(sbPublicKeyPem:get_as_string())

local sbPrivateKeyPem = chilkat.StringBuilder.new()
sbPrivateKeyPem:append_line("-----BEGIN RSA PRIVATE KEY-----", bCrlf)
sbPrivateKeyPem:append_line("MIICXgIBAAKBgQDCFENGw33yGihy92pDjZQhl0C36rPJj+CvfSC8+q28hxA161QF", bCrlf)
sbPrivateKeyPem:append_line("NUd13wuCTUcq0Qd2qsBe/2hFyc2DCJJg0h1L78+6Z4UMR7EOcpfdUE9Hf3m/hs+F", bCrlf)
sbPrivateKeyPem:append_line("UR45uBJeDK1HSFHD8bHKD6kv8FPGfJTotc+2xjJwoYi+1hqp1fIekaxsyQIDAQAB", bCrlf)
sbPrivateKeyPem:append_line("AoGBAJR8ZkCUvx5kzv+utdl7T5MnordT1TvoXXJGXK7ZZ+UuvMNUCdN2QPc4sBiA", bCrlf)
sbPrivateKeyPem:append_line("QWvLw1cSKt5DsKZ8UETpYPy8pPYnnDEz2dDYiaew9+xEpubyeW2oH4Zx71wqBtOK", bCrlf)
sbPrivateKeyPem:append_line("kqwrXa/pzdpiucRRjk6vE6YY7EBBs/g7uanVpGibOVAEsqH1AkEA7DkjVH28WDUg", bCrlf)
sbPrivateKeyPem:append_line("f1nqvfn2Kj6CT7nIcE3jGJsZZ7zlZmBmHFDONMLUrXR/Zm3pR5m0tCmBqa5RK95u", bCrlf)
sbPrivateKeyPem:append_line("412jt1dPIwJBANJT3v8pnkth48bQo/fKel6uEYyboRtA5/uHuHkZ6FQF7OUkGogc", bCrlf)
sbPrivateKeyPem:append_line("mSJluOdc5t6hI1VsLn0QZEjQZMEOWr+wKSMCQQCC4kXJEsHAve77oP6HtG/IiEn7", bCrlf)
sbPrivateKeyPem:append_line("kpyUXRNvFsDE0czpJJBvL/aRFUJxuRK91jhjC68sA7NsKMGg5OXb5I5Jj36xAkEA", bCrlf)
sbPrivateKeyPem:append_line("gIT7aFOYBFwGgQAQkWNKLvySgKbAZRTeLBacpHMuQdl1DfdntvAyqpAZ0lY0RKmW", bCrlf)
sbPrivateKeyPem:append_line("G6aFKaqQfOXKCyWoUiVknQJAXrlgySFci/2ueKlIE1QqIiLSZ8V8OlpFLRnb1pzI", bCrlf)
sbPrivateKeyPem:append_line("7U1yQXnTAEFYM560yJlzUpOb1V4cScGd365tiSMvxLOvTA==", bCrlf)
sbPrivateKeyPem:append_line("-----END RSA PRIVATE KEY-----", bCrlf)

local privKey = chilkat.PrivateKey.new()
privKey:load_pem(sbPrivateKeyPem:get_as_string())

--    All examples use this request:
--
--    POST /foo?param=value&pet=dog HTTP/1.1
--    Host: example.com
--    Date: Sun, 05 Jan 2014 21:31:40 GMT
--    Content-Type: application/json
--    Digest: SHA-256=X48E9qOokqqrvdts8nOJRJN3OWDUoyWxBf7kbu9DBPE=
--    Content-Length: 18
--
--    {"hello": "world"}

-- C.1.  Default Test
--
--    If a list of headers is not included, the date is the only header
--    that is signed by default.  The string to sign would be:
--
--    date: Sun, 05 Jan 2014 21:31:40 GMT
--
--    The Authorization header would be:
--
--    Authorization: Signature keyId="Test",algorithm="rsa-sha256",
--    signature="SjWJWbWN7i0wzBvtPl8rbASWz5xQW6mcJmn+ibttBqtifLN7Sazz
--    6m79cNfwwb8DMJ5cou1s7uEGKKCs+FLEEaDV5lp7q25WqS+lavg7T8hc0GppauB
--    6hbgEKTwblDHYGEtbGmtdHgVCk9SuS13F0hZ8FD0k/5OxEPXe5WozsbM="
--
--    The Signature header would be:
--
--    Signature: keyId="Test",algorithm="rsa-sha256",
--    signature="SjWJWbWN7i0wzBvtPl8rbASWz5xQW6mcJmn+ibttBqtifLN7Sazz
--    6m79cNfwwb8DMJ5cou1s7uEGKKCs+FLEEaDV5lp7q25WqS+lavg7T8hc0GppauB
--    6hbgEKTwblDHYGEtbGmtdHgVCk9SuS13F0hZ8FD0k/5OxEPXe5WozsbM="
--

local dtNow = chilkat.DateTime.new()
local success = dtNow:set_from_current_system_time()
local dateStr = dtNow:get_as_rfc822(false)

-- To duplicate the above result, we'll hard-code the date string.
dateStr = "Sun, 05 Jan 2014 21:31:40 GMT"

local rsa = chilkat.Rsa.new()
success = rsa:use_private_key(privKey)
if not success then
    print(rsa.last_error_text)
    return
end

local sbStringToSign = chilkat.StringBuilder.new()
sbStringToSign:append("date: ")
sbStringToSign:append(dateStr)

rsa.encoding_mode = "base64"
local b64Signature = rsa:sign_string_enc(sbStringToSign:get_as_string(), "SHA256")
print(b64Signature)
print("---------------------------")

-- The result should be:
-- SjWJWbWN7i0wzBvtPl8rbASW ... FD0k/5OxEPXe5WozsbM=

-- ----------------------------------------------------------------------------------------------------

-- C.2.  Basic Test
--
--    The minimum recommended data to sign is the (request-target), host,
--    and date.  In this case, the string to sign would be:
--
--    (request-target): post /foo?param=value&pet=dog
--    host: example.com
--    date: Sun, 05 Jan 2014 21:31:40 GMT
--
--    The Authorization header would be:
--
--    Authorization: Signature keyId="Test",algorithm="rsa-sha256",
--    headers="(request-target) host date", signature="qdx+H7PHHDZgy4
--    y/Ahn9Tny9V3GP6YgBPyUXMmoxWtLbHpUnXS2mg2+SbrQDMCJypxBLSPQR2aAjn
--    7ndmw2iicw3HMbe8VfEdKFYRqzic+efkb3nndiv/x1xSHDJWeSWkx3ButlYSuBs
--    kLu6kd9Fswtemr3lgdDEmn04swr2Os0="

sbStringToSign:clear()
sbStringToSign:append("(request-target): ")
sbStringToSign:append_line("post /foo?param=value&pet=dog", false)
sbStringToSign:append("host: ")
sbStringToSign:append_line("example.com", false)
sbStringToSign:append("date: ")
sbStringToSign:append(dateStr)

print("StringToSign:")
print(sbStringToSign:get_as_string())
b64Signature = rsa:sign_string_enc(sbStringToSign:get_as_string(), "SHA256")
print(b64Signature)
print("---------------------------")

-- The result should be:
-- qdx+H7PHHDZgy4y/Ahn ... mn04swr2Os0=