(PowerBuilder) Sign XML (XAdES) in the Cloud using Azure Key Vault

See more Signing in the Cloud Examples

Note: This example requires Chilkat v9.5.0.96 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
oleobject loo_SbXml
integer li_BCrlf
oleobject loo_Cert
integer li_Success
oleobject loo_JsonAzure
oleobject loo_Gen
integer li_BUsePrivateKey

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Create the XML to be signed.
loo_SbXml = create oleobject
// Use "Chilkat_9_5_0.StringBuilder" for versions of Chilkat < 10.0.0
li_rc = loo_SbXml.ConnectToNewObject("Chilkat.StringBuilder")
if li_rc < 0 then
    destroy loo_SbXml
    MessageBox("Error","Connecting to COM object failed")
    return
end if

li_BCrlf = 1
loo_SbXml.AppendLine("<?xml version=~"1.0~" encoding=~"UTF-8~" standalone=~"no~" ?>",li_BCrlf)
loo_SbXml.AppendLine("<SOAP-ENV:Envelope xmlns:SOAP-ENV=~"http://schemas.xmlsoap.org/soap/envelope/~">",li_BCrlf)
loo_SbXml.AppendLine("    <SOAP-ENV:Header>",li_BCrlf)
loo_SbXml.AppendLine("        <wsse:Security xmlns:wsse=~"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd~" SOAP-ENV:mustUnderstand=~"1~"></wsse:Security>",li_BCrlf)
loo_SbXml.AppendLine("    </SOAP-ENV:Header>",li_BCrlf)
loo_SbXml.AppendLine("    <SOAP-ENV:Body xmlns:SOAP-SEC=~"http://schemas.xmlsoap.org/soap/security/2000-12~" SOAP-SEC:id=~"Body~">",li_BCrlf)
loo_SbXml.AppendLine("        <z:FooBar xmlns:z=~"http://example.com~" />",li_BCrlf)
loo_SbXml.AppendLine("    </SOAP-ENV:Body>",li_BCrlf)
loo_SbXml.AppendLine("</SOAP-ENV:Envelope>",li_BCrlf)

// Load the certificate used for signing.  The certificate's private key is stored in 
// the Azure Key Vault.
// However, we still need the certificate locally (without private key).
loo_Cert = create oleobject
// Use "Chilkat_9_5_0.Cert" for versions of Chilkat < 10.0.0
li_rc = loo_Cert.ConnectToNewObject("Chilkat.Cert")

li_Success = loo_Cert.LoadFromFile("qa_data/certs/myCert.cer")
if li_Success = 0 then
    Write-Debug loo_Cert.LastErrorText
    destroy loo_SbXml
    destroy loo_Cert
    return
end if

// Here's a screenshot of our certificate with private key on Azure Key Vault:


// To sign using the Azure Key Vault, 
// add the following lines of code to specify your authentication credentials,
// and the name of the certificate w/ private key on the Azure server to be used.
loo_JsonAzure = create oleobject
// Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
li_rc = loo_JsonAzure.ConnectToNewObject("Chilkat.JsonObject")

// Set the "service" equal to "azure_keyvault" to tell Chilkat to use Azure Key Vault for signing.
loo_JsonAzure.UpdateString("service","azure_keyvault")
loo_JsonAzure.UpdateString("client_id","APP_ID")
loo_JsonAzure.UpdateString("client_secret","APP_PASSWORD")
loo_JsonAzure.UpdateString("tenant_id","TENANT_ID")
// In the above screenshot, our vault name is "kvchilkat".  You will use your vault name.
loo_JsonAzure.UpdateString("vault_name","VAULT_NAME")
// In the above screenshot, our cert name is "ChilkatTest1".  You will use your cert name.
loo_JsonAzure.UpdateString("cert_name","CERT_NAME")
// In the above screenshot, our cert version is "63b94a23389546ecbc8eb6208a1bef37".  You will use your cert version.
loo_JsonAzure.UpdateString("cert_version","CERT_VERSION")
li_Success = loo_Cert.SetCloudSigner(loo_JsonAzure)

// Prepare for signing...
loo_Gen = create oleobject
// Use "Chilkat_9_5_0.XmlDSigGen" for versions of Chilkat < 10.0.0
li_rc = loo_Gen.ConnectToNewObject("Chilkat.XmlDSigGen")

// Indicate where the Signature will be inserted.
loo_Gen.SigLocation = "SOAP-ENV:Envelope|SOAP-ENV:Header|wsse:Security"

// Add a reference to the fragment of the XML to be signed.

// Note: "Body" refers to the XML element having an "id" equal to "Body", where "id" is case insensitive
// and where any namespace might qualify the attribute.  In this case, the SOAP-ENV:Body fragment is signed
// NOT because the tag = "Body", but because it has SOAP-SEC:id="Body"
loo_Gen.AddSameDocRef("Body","sha1","EXCL_C14N","","")

// (You can read about the SignedInfoPrefixList in the online reference documentation.  It's optional..)
loo_Gen.SignedInfoPrefixList = "wsse SOAP-ENV"

loo_Gen.KeyInfoType = "X509Data"
loo_Gen.X509Type = "IssuerSerial"

li_BUsePrivateKey = 1
li_Success = loo_Gen.SetX509Cert(loo_Cert,li_BUsePrivateKey)
if li_Success <> 1 then
    Write-Debug loo_Gen.LastErrorText
    destroy loo_Cert
    destroy loo_SbXml
    destroy loo_Cert
    destroy loo_JsonAzure
    destroy loo_Gen
    return
end if

// Everything's specified.  Now create and insert the Signature
// (The actual signing of the hash will happen on the Aruba server.)
li_Success = loo_Gen.CreateXmlDSigSb(loo_SbXml)
if li_Success <> 1 then
    Write-Debug loo_Gen.LastErrorText
    destroy loo_SbXml
    destroy loo_Cert
    destroy loo_JsonAzure
    destroy loo_Gen
    return
end if

// Examine the XML with the digital signature inserted
Write-Debug loo_SbXml.GetAsString()

// --------------------------------------------------------------------------------
// Also see Chilkat's Online WSDL Code Generator
// to generate code and SOAP Request and Response XML for each operation in a WSDL.
// --------------------------------------------------------------------------------


destroy loo_SbXml
destroy loo_Cert
destroy loo_JsonAzure
destroy loo_Gen