|
Chilkat • HOME • .NET Core C# • Android™ • AutoIt • C • C# • C++ • Chilkat2-Python • CkPython • Classic ASP • DataFlex • Delphi ActiveX • Delphi DLL • Go • Java • Lianja • Mono C# • Node.js • Objective-C • PHP ActiveX • PHP Extension • Perl • PowerBuilder • PowerShell • PureBasic • Ruby • SQL Server • Swift 2 • Swift 3,4,5... • Tcl • Unicode C • Unicode C++ • VB.NET • VBScript • Visual Basic 6.0 • Visual FoxPro • Xojo Plugin
(Classic ASP) Create AuthNRequest with embedded signature (HTTP-POST binding)Demonstrates how to create a SAML AuthNRequest with embedded signature (HTTP-POST binding).
<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body> <% ' This example requires the Chilkat API to have been previously unlocked. ' See Global Unlock Sample for sample code. ' This example will sign the following SAML AuthNRequest: ' <samlp:AuthnRequest ' xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ' xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ' ID="pfx41d8ef22-e612-8c50-9960-1b16f15741b3" ' Version="2.0" ProviderName="SP test" IssueInstant="2014-07-16T23:52:45Z" ' Destination="http://idp.example.com/SSOService.php" ' ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" ' AssertionConsumerServiceURL="http://sp.example.com/demo1/index.php?acs"> ' <saml:Issuer>http://sp.example.com/demo1/metadata.php</saml:Issuer> ' <samlp:NameIDPolicy Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" AllowCreate="true"/> ' <samlp:RequestedAuthnContext Comparison="exact"> ' <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef> ' </samlp:RequestedAuthnContext> ' </samlp:AuthnRequest> ' First we build the XML to be signed. ' ' Use this online tool to generate the code from sample XML: ' Generate Code to Create XML success = 1 ' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Xml") set xmlToSign = Server.CreateObject("Chilkat.Xml") xmlToSign.Tag = "samlp:AuthnRequest" success = xmlToSign.AddAttribute("xmlns:samlp","urn:oasis:names:tc:SAML:2.0:protocol") success = xmlToSign.AddAttribute("xmlns:saml","urn:oasis:names:tc:SAML:2.0:assertion") success = xmlToSign.AddAttribute("ID","pfx41d8ef22-e612-8c50-9960-1b16f15741b3") success = xmlToSign.AddAttribute("Version","2.0") success = xmlToSign.AddAttribute("ProviderName","SP test") success = xmlToSign.AddAttribute("IssueInstant","2014-07-16T23:52:45Z") success = xmlToSign.AddAttribute("Destination","http://idp.example.com/SSOService.php") success = xmlToSign.AddAttribute("ProtocolBinding","urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST") success = xmlToSign.AddAttribute("AssertionConsumerServiceURL","http://sp.example.com/demo1/index.php?acs") xmlToSign.UpdateChildContent "saml:Issuer","http://sp.example.com/demo1/metadata.php" success = xmlToSign.UpdateAttrAt("samlp:NameIDPolicy",1,"Format","urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress") success = xmlToSign.UpdateAttrAt("samlp:NameIDPolicy",1,"AllowCreate","true") success = xmlToSign.UpdateAttrAt("samlp:RequestedAuthnContext",1,"Comparison","exact") xmlToSign.UpdateChildContent "samlp:RequestedAuthnContext|saml:AuthnContextClassRef","urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport" ' Also see the online tool to generate the code from sample already-signed XML: ' Generate XML Signature Creation Code from an Already-Signed XML Sample ' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.XmlDSigGen") set gen = Server.CreateObject("Chilkat.XmlDSigGen") gen.SigLocation = "samlp:AuthnRequest" gen.SigNamespacePrefix = "ds" gen.SigNamespaceUri = "http://www.w3.org/2000/09/xmldsig#" gen.SignedInfoCanonAlg = "EXCL_C14N" gen.SignedInfoDigestMethod = "sha1" ' -------- Reference 1 -------- success = gen.AddSameDocRef("pfx41d8ef22-e612-8c50-9960-1b16f15741b3","sha1","EXCL_C14N","","") ' Provide a certificate + private key. (PFX password is test123) ' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Cert") set cert = Server.CreateObject("Chilkat.Cert") success = cert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123") If (success <> 1) Then Response.Write "<pre>" & Server.HTMLEncode( cert.LastErrorText) & "</pre>" Response.End End If success = gen.SetX509Cert(cert,1) gen.KeyInfoType = "X509Data" gen.X509Type = "Certificate" ' Load XML to be signed... ' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.StringBuilder") set sbXml = Server.CreateObject("Chilkat.StringBuilder") success = xmlToSign.GetXmlSb(sbXml) gen.Behaviors = "IndentedSignature,ForceAddEnvelopedSignatureTransform" ' Sign the XML... success = gen.CreateXmlDSigSb(sbXml) If (success <> 1) Then Response.Write "<pre>" & Server.HTMLEncode( gen.LastErrorText) & "</pre>" Response.End End If ' Save the signed XMl to a file. success = sbXml.WriteFile("qa_output/signedXml.xml","utf-8",0) ' A sample of the signed XML is shown below.. Response.Write "<pre>" & Server.HTMLEncode( sbXml.GetAsString()) & "</pre>" ' ---------------------------------------- ' Verify the signature we just produced... ' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.XmlDSig") set verifier = Server.CreateObject("Chilkat.XmlDSig") success = verifier.LoadSignatureSb(sbXml) If (success <> 1) Then Response.Write "<pre>" & Server.HTMLEncode( verifier.LastErrorText) & "</pre>" Response.End End If verified = verifier.VerifySignature(1) If (verified <> 1) Then Response.Write "<pre>" & Server.HTMLEncode( verifier.LastErrorText) & "</pre>" Response.End End If Response.Write "<pre>" & Server.HTMLEncode( "This signature was successfully verified.") & "</pre>" ' ----------------------------------------- ' Sample output of AuthNRequest signed XML: ' (Line-breaks and some indenting added for readability..) ' <?xml version="1.0" encoding="utf-8"?> ' <samlp:AuthnRequest ' xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ' xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ' ID="pfx41d8ef22-e612-8c50-9960-1b16f15741b3" ' Version="2.0" ProviderName="SP test" ' IssueInstant="2014-07-16T23:52:45Z" ' Destination="http://idp.example.com/SSOService.php" ' ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" ' AssertionConsumerServiceURL="http://sp.example.com/demo1/index.php?acs"> ' <saml:Issuer>http://sp.example.com/demo1/metadata.php</saml:Issuer> ' <samlp:NameIDPolicy Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" AllowCreate="true"/> ' <samlp:RequestedAuthnContext Comparison="exact"> ' <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef> ' </samlp:RequestedAuthnContext> ' <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> ' <ds:SignedInfo> ' <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/> ' <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> ' <ds:Reference URI="#pfx41d8ef22-e612-8c50-9960-1b16f15741b3"> ' <ds:Transforms> ' <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/> ' <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/> ' </ds:Transforms> ' <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> ' <ds:DigestValue>5d+/YNShy4qnvZcvik8fHHg2SWQ=</ds:DigestValue> ' </ds:Reference> ' </ds:SignedInfo> ' <ds:SignatureValue>QS16H5...U5LQ==</ds:SignatureValue> ' <ds:KeyInfo> ' <ds:X509Data> ' <ds:X509Certificate>MIIF...tjlF4=</ds:X509Certificate> ' </ds:X509Data> ' </ds:KeyInfo> ' </ds:Signature> ' </samlp:AuthnRequest> ' %> </body> </html> |
||||
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.