Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Lianja) Create Signed SOAP XML for DIAN Colombia WCF ServiceDemonstrates how to create a signed SOAP XML document for DIAN Colombia.
// This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // This example will produce a signed SOAP XML message that looks like this: // <?xml version="1.0" encoding="utf-8"?> // <soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:wcf="http://wcf.dian.colombia"> // <soap:Header xmlns:wsa="http://www.w3.org/2005/08/addressing"> // <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"> // <wsu:Timestamp wsu:Id="TS-F25839120CBA3ECDAD68754D0443A667636FDA68"> // <wsu:Created>2019-08-23T23:03:01Z</wsu:Created> // <wsu:Expires>2019-08-24T15:43:01Z</wsu:Expires> // </wsu:Timestamp> // <wsse:BinarySecurityToken EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" // ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" // wsu:Id="ABCXYZ-9F0F7E15A59816E680B4735080A789DC1EED6C9C">MIIG8jCCBd ... zLjGQUB6lcz</wsse:BinarySecurityToken> // <ds:Signature Id="SIG-F25839120CBA3ECDAD68754D0443A667636FDA68" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> // <ds:SignedInfo> // <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"> // <ec:InclusiveNamespaces PrefixList="wsa soap wcf" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/> // </ds:CanonicalizationMethod> // <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/> // <ds:Reference URI="#ID-F25839120CBA3ECDAD68754D0443A667636FDA68"> // <ds:Transforms> // <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"> // <ec:InclusiveNamespaces PrefixList="soap wcf" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/> // </ds:Transform> // </ds:Transforms> // <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/> // <ds:DigestValue>gSIKtjS/BKA2bgecXkM8lYVBDqlXcU3juNYT9a+bSnM=</ds:DigestValue> // </ds:Reference> // </ds:SignedInfo> // <ds:SignatureValue>sL7rOdyfkEnKgJja0eWrv ... YqG0T0pflBsGW9zXkjQ9NvAw==</ds:SignatureValue> // <ds:KeyInfo Id="KI-F25839120CBA3ECDAD68754D0443A667636FDA68"> // <wsse:SecurityTokenReference wsu:Id="STR-F25839120CBA3ECDAD68754D0443A667636FDA68"> // <wsse:Reference URI="#ABCXYZ-9F0F7E15A59816E680B4735080A789DC1EED6C9C" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/> // </wsse:SecurityTokenReference> // </ds:KeyInfo> // </ds:Signature> // </wsse:Security> // <wsa:Action>http://wcf.dian.colombia/IWcfDianCustomerServices/GetStatus</wsa:Action> // <wsa:To wsu:Id="ID-F25839120CBA3ECDAD68754D0443A667636FDA68" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">https://vpfe-hab.dian.gov.co/WcfDianCustomerServices.svc</wsa:To> // </soap:Header> // <soap:Body> // <wcf:GetStatus> // <wcf:trackId>123456666</wcf:trackId> // </wcf:GetStatus> // </soap:Body> // </soap:Envelope> // Use this online tool to generate code from sample Signed XML: // Generate Code to Create Signed XML llSuccess = .T. // Create the XML to be signed... loXmlToSign = createobject("CkXml") loXmlToSign.Tag = "soap:Envelope" loXmlToSign.AddAttribute("xmlns:soap","http://www.w3.org/2003/05/soap-envelope") loXmlToSign.AddAttribute("xmlns:wcf","http://wcf.dian.colombia") loXmlToSign.UpdateAttrAt("soap:Header",.T.,"xmlns:wsa","http://www.w3.org/2005/08/addressing") loXmlToSign.UpdateAttrAt("soap:Header|wsse:Security",.T.,"xmlns:wsse","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd") loXmlToSign.UpdateAttrAt("soap:Header|wsse:Security",.T.,"xmlns:wsu","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd") loXmlToSign.UpdateAttrAt("soap:Header|wsse:Security|wsu:Timestamp",.T.,"wsu:Id","TS-F25839120CBA3ECDAD68754D0443A667636FDA68") loXmlToSign.UpdateChildContent("soap:Header|wsse:Security|wsu:Timestamp|wsu:Created","2019-08-23T23:03:01Z") loXmlToSign.UpdateChildContent("soap:Header|wsse:Security|wsu:Timestamp|wsu:Expires","2019-08-24T15:43:01Z") loXmlToSign.UpdateAttrAt("soap:Header|wsse:Security|wsse:BinarySecurityToken",.T.,"EncodingType","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary") loXmlToSign.UpdateAttrAt("soap:Header|wsse:Security|wsse:BinarySecurityToken",.T.,"ValueType","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3") loXmlToSign.UpdateAttrAt("soap:Header|wsse:Security|wsse:BinarySecurityToken",.T.,"wsu:Id","ABCXYZ-9F0F7E15A59816E680B4735080A789DC1EED6C9C") loXmlToSign.UpdateChildContent("soap:Header|wsse:Security|wsse:BinarySecurityToken","BinarySecurityToken_Base64Binary_Content") loXmlToSign.UpdateChildContent("soap:Header|wsa:Action","http://wcf.dian.colombia/IWcfDianCustomerServices/GetStatus") loXmlToSign.UpdateAttrAt("soap:Header|wsa:To",.T.,"wsu:Id","ID-F25839120CBA3ECDAD68754D0443A667636FDA68") loXmlToSign.UpdateAttrAt("soap:Header|wsa:To",.T.,"xmlns:wsu","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd") loXmlToSign.UpdateChildContent("soap:Header|wsa:To","https://vpfe-hab.dian.gov.co/WcfDianCustomerServices.svc") loXmlToSign.UpdateChildContent("soap:Body|wcf:GetStatus|wcf:trackId","123456666") loGen = createobject("CkXmlDSigGen") loGen.SigLocation = "soap:Envelope|soap:Header|wsse:Security" loGen.SigLocationMod = 0 loGen.SigId = "SIG-F25839120CBA3ECDAD68754D0443A667636FDA68" loGen.SigNamespacePrefix = "ds" loGen.SigNamespaceUri = "http://www.w3.org/2000/09/xmldsig#" loGen.SignedInfoCanonAlg = "EXCL_C14N" loGen.SignedInfoDigestMethod = "sha256" // Set the KeyInfoId before adding references.. loGen.KeyInfoId = "KI-F25839120CBA3ECDAD68754D0443A667636FDA68" // -------- Reference 1 -------- loGen.AddSameDocRef("ID-F25839120CBA3ECDAD68754D0443A667636FDA68","sha256","EXCL_C14N","soap wcf","") // Provide a certificate + private key. (PFX password is test123) loCert = createobject("CkCert") llSuccess = loCert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123") if (llSuccess <> .T.) then ? loCert.LastErrorText release loXmlToSign release loGen release loCert return endif loGen.SetX509Cert(loCert,.T.) loGen.KeyInfoType = "Custom" // Create the custom KeyInfo XML.. loXmlCustomKeyInfo = createobject("CkXml") loXmlCustomKeyInfo.Tag = "wsse:SecurityTokenReference" loXmlCustomKeyInfo.AddAttribute("wsu:Id","STR-F25839120CBA3ECDAD68754D0443A667636FDA68") loXmlCustomKeyInfo.UpdateAttrAt("wsse:Reference",.T.,"URI","#ABCXYZ-9F0F7E15A59816E680B4735080A789DC1EED6C9C") loXmlCustomKeyInfo.UpdateAttrAt("wsse:Reference",.T.,"ValueType","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3") loXmlCustomKeyInfo.EmitXmlDecl = .F. loGen.CustomKeyInfoXml = loXmlCustomKeyInfo.GetXml() // Load XML to be signed... loSbXml = createobject("CkStringBuilder") loXmlToSign.GetXmlSb(loSbXml) // Update BinarySecurityToken_Base64Binary_Content with the actual X509 of the signing cert. loBdCert = createobject("CkBinData") loCert.ExportCertDerBd(loBdCert) lnNReplaced = loSbXml.Replace("BinarySecurityToken_Base64Binary_Content",loBdCert.GetEncoded("base64")) loGen.Behaviors = "IndentedSignature" // Sign the XML... llSuccess = loGen.CreateXmlDSigSb(loSbXml) if (llSuccess <> .T.) then ? loGen.LastErrorText release loXmlToSign release loGen release loCert release loXmlCustomKeyInfo release loSbXml release loBdCert return endif // ----------------------------------------------- // Save the signed XML to a file. llSuccess = loSbXml.WriteFile("qa_output/signedXml.xml","utf-8",.F.) ? loSbXml.GetAsString() // ---------------------------------------- // Verify the signatures we just produced... loVerifier = createobject("CkXmlDSig") llSuccess = loVerifier.LoadSignatureSb(loSbXml) if (llSuccess <> .T.) then ? loVerifier.LastErrorText release loXmlToSign release loGen release loCert release loXmlCustomKeyInfo release loSbXml release loBdCert release loVerifier return endif lnNumSigs = loVerifier.NumSignatures lnVerifyIdx = 0 do while lnVerifyIdx < lnNumSigs loVerifier.Selector = lnVerifyIdx llVerified = loVerifier.VerifySignature(.T.) if (llVerified <> .T.) then ? loVerifier.LastErrorText release loXmlToSign release loGen release loCert release loXmlCustomKeyInfo release loSbXml release loBdCert release loVerifier return endif lnVerifyIdx = lnVerifyIdx + 1 enddo ? "All signatures were successfully verified." // -------------------------------------------------------------------------------- // Also see Chilkat's Online WSDL Code Generator // to generate code and SOAP Request and Response XML for each operation in a WSDL. // -------------------------------------------------------------------------------- release loXmlToSign release loGen release loCert release loXmlCustomKeyInfo release loSbXml release loBdCert release loVerifier |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.