(Visual FoxPro) XAdES XML Signature using ARSS (Aruba Remote Signing Service)

See more Signing in the Cloud Examples

Demonstrates how to sign XML using ARSS (Aruba Remote Signing Service).

Note: This example requires Chilkat v9.5.0.96 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL loSbXml
LOCAL lnBCrlf
LOCAL loCert
LOCAL lnSuccess
LOCAL loJsonArss
LOCAL loGen
LOCAL lnBUsePrivateKey

* This example requires the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

* --------------------------------------------------------------------------------
* Also see Chilkat's Online WSDL Code Generator
* to generate code and SOAP Request and Response XML for each operation in a WSDL.
* --------------------------------------------------------------------------------

* Create the XML to be signed.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.StringBuilder')
loSbXml = CreateObject('Chilkat.StringBuilder')

lnBCrlf = 1
loSbXml.AppendLine('<?xml version="1.0" encoding="UTF-8" standalone="no" ?>',lnBCrlf)
loSbXml.AppendLine('<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">',lnBCrlf)
loSbXml.AppendLine("    <SOAP-ENV:Header>",lnBCrlf)
loSbXml.AppendLine('        <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" SOAP-ENV:mustUnderstand="1"></wsse:Security>',lnBCrlf)
loSbXml.AppendLine("    </SOAP-ENV:Header>",lnBCrlf)
loSbXml.AppendLine('    <SOAP-ENV:Body xmlns:SOAP-SEC="http://schemas.xmlsoap.org/soap/security/2000-12" SOAP-SEC:id="Body">',lnBCrlf)
loSbXml.AppendLine('        <z:FooBar xmlns:z="http://example.com" />',lnBCrlf)
loSbXml.AppendLine("    </SOAP-ENV:Body>",lnBCrlf)
loSbXml.AppendLine("</SOAP-ENV:Envelope>",lnBCrlf)

* Specify the signing certificate and the ARSS credentials

* Load the certificate used for signing.  The certificate's private key is stored on 
* the Aruba.it server and the signing will happen remotely using the
* ARSS (Aruba Remote Signing Service).
* However, we still need the certificate locally (without private key).
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Cert')
loCert = CreateObject('Chilkat.Cert')
lnSuccess = loCert.LoadFromFile("qa_data/certs/myCert.cer")
IF (lnSuccess = 0) THEN
    ? loCert.LastErrorText
    RELEASE loSbXml
    RELEASE loCert
    CANCEL
ENDIF

* To sign using the Aruba Remote Signing Service, 
* add the following lines of code to specify your authentication credentials,
* and the ID of the certificate w/ private key on the server to be used.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.JsonObject')
loJsonArss = CreateObject('Chilkat.JsonObject')

* Set the "service" equal to "ARSS" to tell Chilkat to use ARSS for signing.
loJsonArss.UpdateString("service","ARSS")
* Specify the certificate ID, such as "AS0"
* This certificate should match the certificate loaded in the above code.
loJsonArss.UpdateString("certID","YOUR_ARSS_CERT_ID")
loJsonArss.UpdateString("otpPwd","YOUR_OTP_PWD")
loJsonArss.UpdateString("typeOtpAuth","demoprod")
loJsonArss.UpdateString("user","YOUR_ARSS_USERNAME")
loJsonArss.UpdateString("userPWD","YOUR_ARSS_PASSWORD")
lnSuccess = loCert.SetCloudSigner(loJsonArss)

* Prepare for signing...
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.XmlDSigGen')
loGen = CreateObject('Chilkat.XmlDSigGen')

* Indicate where the Signature will be inserted.
loGen.SigLocation = "SOAP-ENV:Envelope|SOAP-ENV:Header|wsse:Security"

* Add a reference to the fragment of the XML to be signed.

* Note: "Body" refers to the XML element having an "id" equal to "Body", where "id" is case insensitive
* and where any namespace might qualify the attribute.  In this case, the SOAP-ENV:Body fragment is signed
* NOT because the tag = "Body", but because it has SOAP-SEC:id="Body"
loGen.AddSameDocRef("Body","sha1","EXCL_C14N","","")

* (You can read about the SignedInfoPrefixList in the online reference documentation.  It's optional..)
loGen.SignedInfoPrefixList = "wsse SOAP-ENV"

loGen.KeyInfoType = "X509Data"
loGen.X509Type = "IssuerSerial"

lnBUsePrivateKey = 1
lnSuccess = loGen.SetX509Cert(loCert,lnBUsePrivateKey)
IF (lnSuccess <> 1) THEN
    ? loGen.LastErrorText
    RELEASE loCert
    RELEASE loSbXml
    RELEASE loCert
    RELEASE loJsonArss
    RELEASE loGen
    CANCEL
ENDIF

* Everything's specified.  Now create and insert the Signature
* (The actual signing of the hash will happen on the Aruba server.)
lnSuccess = loGen.CreateXmlDSigSb(loSbXml)
IF (lnSuccess <> 1) THEN
    ? loGen.LastErrorText
    RELEASE loSbXml
    RELEASE loCert
    RELEASE loJsonArss
    RELEASE loGen
    CANCEL
ENDIF

* Examine the XML with the digital signature inserted
? loSbXml.GetAsString()

RELEASE loSbXml
RELEASE loCert
RELEASE loJsonArss
RELEASE loGen