PowerBuilder
PowerBuilder
Belgium eHealth Platform - checkAccessControl
See more Belgian eHealth Platform Examples
Demonstrates the checkAccessControl operation of PlatformIntegrationConsumerTest, which requires an X.509 certificate and signature. This tests the validity of your certificate and signature.Chilkat PowerBuilder Downloads
integer li_rc
integer li_Success
oleobject loo_Cert
oleobject loo_XmlToSign
oleobject loo_BdCert
oleobject loo_Dt
oleobject loo_Gen
oleobject loo_XmlCustomKeyInfo
oleobject loo_SbXml
oleobject loo_Http
oleobject loo_Resp
li_Success = 0
// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
// Provide a certificate + private key.
// Note: If your certificate + private key is located on a hardware token or smartcard, you can call a different function to load from smartcard..
loo_Cert = create oleobject
li_rc = loo_Cert.ConnectToNewObject("Chilkat.Cert")
if li_rc < 0 then
destroy loo_Cert
MessageBox("Error","Connecting to COM object failed")
return
end if
li_Success = loo_Cert.LoadPfxFile("SSIN=12345678.acc.p12","p12_password")
if li_Success = 0 then
Write-Debug loo_Cert.LastErrorText
destroy loo_Cert
return
end if
// Create the XML to be signed...
loo_XmlToSign = create oleobject
li_rc = loo_XmlToSign.ConnectToNewObject("Chilkat.Xml")
loo_XmlToSign.Tag = "soapenv:Envelope"
loo_XmlToSign.AddAttribute("xmlns:soapenv","http://schemas.xmlsoap.org/soap/envelope/")
loo_XmlToSign.AddAttribute("xmlns:urn","urn:be:fgov:ehealth:platformintegrationconsumertest:v1")
loo_XmlToSign.AddAttribute("xmlns:urn1","urn:be:fgov:ehealth:platformintegrationconsumertest:types:v1")
loo_XmlToSign.UpdateAttrAt("soapenv:Header|wsse:Security",1,"xmlns:wsse","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd")
loo_XmlToSign.UpdateAttrAt("soapenv:Header|wsse:Security",1,"xmlns:wsu","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd")
loo_XmlToSign.UpdateAttrAt("soapenv:Header|wsse:Security|wsse:BinarySecurityToken",1,"EncodingType","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary")
loo_XmlToSign.UpdateAttrAt("soapenv:Header|wsse:Security|wsse:BinarySecurityToken",1,"ValueType","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3")
loo_XmlToSign.UpdateAttrAt("soapenv:Header|wsse:Security|wsse:BinarySecurityToken",1,"wsu:Id","X509-FC77E2C72083DA8E0F16711753508182856")
// ---------------------------------------------------------------------------------------------------------------
// A note about the Id's, such as X509-FC77E2C72083DA8E0F16711753508182856, TS-FC77E2C72083DA8E0F16711753508042855, etc.
// These Id's simply need to be unique within the XML document. You don't need to generate new Id's every time.
// You can use the same Id's in each XML document that is submitted. The purpose of each Id is to
// match the XMLDsig Reference to the element in XML being referenced.
// In other words, you could use the Id's "mickey_mouse", "donald_duck", and "goofy", and it would work perfectly OK,
// as long as no other XML elements also use the Id's "mickey_mouse", "donald_duck", or "goofy"
// ---------------------------------------------------------------------------------------------------------------
loo_BdCert = create oleobject
li_rc = loo_BdCert.ConnectToNewObject("Chilkat.BinData")
loo_Cert.ExportCertDerBd(loo_BdCert)
loo_XmlToSign.UpdateChildContent("soapenv:Header|wsse:Security|wsse:BinarySecurityToken",loo_BdCert.GetEncoded("base64"))
loo_XmlToSign.UpdateAttrAt("soapenv:Header|wsse:Security|wsu:Timestamp",1,"wsu:Id","TS-FC77E2C72083DA8E0F16711753508042855")
loo_Dt = create oleobject
li_rc = loo_Dt.ConnectToNewObject("Chilkat.CkDateTime")
loo_Dt.SetFromCurrentSystemTime()
loo_XmlToSign.UpdateChildContent("soapenv:Header|wsse:Security|wsu:Timestamp|wsu:Created",loo_Dt.GetAsTimestamp(0))
loo_Dt.AddSeconds(3600)
loo_XmlToSign.UpdateChildContent("soapenv:Header|wsse:Security|wsu:Timestamp|wsu:Expires",loo_Dt.GetAsTimestamp(0))
loo_Dt.AddSeconds(-3600)
loo_XmlToSign.UpdateAttrAt("soapenv:Body",1,"wsu:Id","id-FC77E2C72083DA8E0F16711753508182859")
loo_XmlToSign.UpdateAttrAt("soapenv:Body",1,"xmlns:wsu","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd")
loo_XmlToSign.UpdateChildContent("soapenv:Body|urn:CheckAccessControlRequest|urn1:Message","Hello World")
// Create a timestamp with the current date/time in the following format: 2014-12-30T15:29:03.157+01:00
loo_XmlToSign.UpdateChildContent("soapenv:Body|urn:CheckAccessControlRequest|urn1:Timestamp",loo_Dt.GetAsTimestamp(1))
loo_Gen = create oleobject
li_rc = loo_Gen.ConnectToNewObject("Chilkat.XmlDSigGen")
loo_Gen.SigLocation = "soapenv:Envelope|soapenv:Header|wsse:Security|wsse:BinarySecurityToken"
loo_Gen.SigLocationMod = 1
loo_Gen.SigId = "SIG-FC77E2C72083DA8E0F16711753508252860"
loo_Gen.SigNamespacePrefix = "ds"
loo_Gen.SigNamespaceUri = "http://www.w3.org/2000/09/xmldsig#"
loo_Gen.SignedInfoPrefixList = "soapenv urn urn1"
loo_Gen.IncNamespacePrefix = "ec"
loo_Gen.IncNamespaceUri = "http://www.w3.org/2001/10/xml-exc-c14n#"
loo_Gen.SignedInfoCanonAlg = "EXCL_C14N"
loo_Gen.SignedInfoDigestMethod = "sha256"
// Set the KeyInfoId before adding references..
loo_Gen.KeyInfoId = "KI-FC77E2C72083DA8E0F16711753508182857"
// -------- Reference 1 --------
loo_Gen.AddSameDocRef("TS-FC77E2C72083DA8E0F16711753508042855","sha256","EXCL_C14N","wsse soapenv urn urn1","")
// -------- Reference 2 --------
loo_Gen.AddSameDocRef("id-FC77E2C72083DA8E0F16711753508182859","sha256","EXCL_C14N","urn urn1","")
// -------- Reference 3 --------
loo_Gen.AddSameDocRef("X509-FC77E2C72083DA8E0F16711753508182856","sha256","EXCL_C14N","_EMPTY_","")
loo_Gen.SetX509Cert(loo_Cert,1)
loo_Gen.KeyInfoType = "Custom"
// Create the custom KeyInfo XML..
loo_XmlCustomKeyInfo = create oleobject
li_rc = loo_XmlCustomKeyInfo.ConnectToNewObject("Chilkat.Xml")
loo_XmlCustomKeyInfo.Tag = "wsse:SecurityTokenReference"
loo_XmlCustomKeyInfo.AddAttribute("wsu:Id","STR-FC77E2C72083DA8E0F16711753508182858")
loo_XmlCustomKeyInfo.UpdateAttrAt("wsse:Reference",1,"URI","#X509-FC77E2C72083DA8E0F16711753508182856")
loo_XmlCustomKeyInfo.UpdateAttrAt("wsse:Reference",1,"ValueType","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3")
loo_XmlCustomKeyInfo.EmitXmlDecl = 0
loo_Gen.CustomKeyInfoXml = loo_XmlCustomKeyInfo.GetXml()
// Load XML to be signed...
loo_SbXml = create oleobject
li_rc = loo_SbXml.ConnectToNewObject("Chilkat.StringBuilder")
loo_XmlToSign.GetXmlSb(loo_SbXml)
loo_Gen.Behaviors = "IndentedSignature"
// Sign the XML...
li_Success = loo_Gen.CreateXmlDSigSb(loo_SbXml)
if li_Success = 0 then
Write-Debug loo_Gen.LastErrorText
destroy loo_Cert
destroy loo_XmlToSign
destroy loo_BdCert
destroy loo_Dt
destroy loo_Gen
destroy loo_XmlCustomKeyInfo
destroy loo_SbXml
return
end if
// -----------------------------------------------
// Send the signed XML...
loo_Http = create oleobject
li_rc = loo_Http.ConnectToNewObject("Chilkat.Http")
li_Success = loo_Http.SetSslClientCert(loo_Cert)
if li_Success = 0 then
Write-Debug loo_Http.LastErrorText
destroy loo_Cert
destroy loo_XmlToSign
destroy loo_BdCert
destroy loo_Dt
destroy loo_Gen
destroy loo_XmlCustomKeyInfo
destroy loo_SbXml
destroy loo_Http
return
end if
loo_Http.SetRequestHeader("Content-Type","text/xml")
// Change to services.ehealth.fgov.be for the production environment.
loo_Resp = create oleobject
li_rc = loo_Resp.ConnectToNewObject("Chilkat.HttpResponse")
li_Success = loo_Http.HttpSb("POST","https://services-acpt.ehealth.fgov.be/PlatformIntegrationConsumerTest/v1",loo_SbXml,"utf-8","application/xml",loo_Resp)
if li_Success = 0 then
Write-Debug loo_Http.LastErrorText
destroy loo_Cert
destroy loo_XmlToSign
destroy loo_BdCert
destroy loo_Dt
destroy loo_Gen
destroy loo_XmlCustomKeyInfo
destroy loo_SbXml
destroy loo_Http
destroy loo_Resp
return
end if
Write-Debug loo_Resp.BodyStr
Write-Debug "response status code = " + string(loo_Resp.StatusCode)
// A successful response is a 200 status code, with this sample response:
// <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
// <soapenv:Header xmlns:v1="urn:be:fgov:ehealth:platformintegrationconsumertest:v1" xmlns:v11="urn:be:fgov:ehealth:platformintegrationconsumertest:types:v1"/>
// <soapenv:Body xmlns:ic="urn:be:fgov:ehealth:platformintegrationconsumertest:v1" xmlns:type="urn:be:fgov:ehealth:platformintegrationconsumertest:types:v1">
// <ic:CheckAccessControlResponse>
// <type:Message>Hello World</type:Message>
// <type:Timestamp>2023-09-28T22:17:26.643+02:00</type:Timestamp>
// <type:AuthenticatedConsumer>CN="SSIN=aaaaaa", OU=eHealth-platform Belgium, OU=bbbb, OU="SSIN=aaaaaaa", O=Federal Government, C=BE</type:AuthenticatedConsumer>
// </ic:CheckAccessControlResponse>
// </soapenv:Body>
// </soapenv:Envelope>
destroy loo_Cert
destroy loo_XmlToSign
destroy loo_BdCert
destroy loo_Dt
destroy loo_Gen
destroy loo_XmlCustomKeyInfo
destroy loo_SbXml
destroy loo_Http
destroy loo_Resp