PowerBuilder

Add EncapsulatedTimestamp to Already-Signed XML

See more XML Digital Signatures Examples

Demonstrates how to add an EncapsulatedTimestamp to an existing XML signature.

Note: This example requires Chilkat v9.5.0.90 or greater.

PowerBuilder

integer li_rc
integer li_Success
oleobject loo_SbXml
oleobject loo_Dsig
oleobject loo_Json
oleobject loo_SbOut
oleobject loo_Verifier
integer li_NumSigs
integer li_VerifyIdx
integer li_Verified

li_Success = 0

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Note: We cannot load the already-signed XML into a Chilkat XML object because it would re-format the XML when re-emitted.
// (i.e. indentation and whitespace could change, and it would invalidate the existing signature.)
// We must use a StringBuilder.
loo_SbXml = create oleobject
li_rc = loo_SbXml.ConnectToNewObject("Chilkat.StringBuilder")
if li_rc < 0 then
    destroy loo_SbXml
    MessageBox("Error","Connecting to COM object failed")
    return
end if
li_Success = loo_SbXml.LoadFile("qa_data/xml_dsig_valid_samples/encapsulatedTimestamp_not_yet_added.xml","utf-8")
if li_Success = 0 then
    Write-Debug "Failed to load the XML file."
    destroy loo_SbXml
    return
end if

loo_Dsig = create oleobject
li_rc = loo_Dsig.ConnectToNewObject("Chilkat.XmlDSig")

li_Success = loo_Dsig.LoadSignatureSb(loo_SbXml)
if li_Success = 0 then
    Write-Debug loo_Dsig.LastErrorText
    destroy loo_SbXml
    destroy loo_Dsig
    return
end if

if loo_Dsig.HasEncapsulatedTimeStamp() = 1 then
    Write-Debug "This signed XML already has an EncapsulatedTimeStamp"
    destroy loo_SbXml
    destroy loo_Dsig
    return
end if

// Specify the timestamping authority URL
loo_Json = create oleobject
li_rc = loo_Json.ConnectToNewObject("Chilkat.JsonObject")

loo_Json.UpdateString("timestampToken.tsaUrl","http://timestamp.digicert.com")
loo_Json.UpdateBool("timestampToken.requestTsaCert",1)

// Call AddEncapsulatedTimeStamp to add the EncapsulatedTimeStamp to the signature.
// Note: If the signed XML contains multiple signatures, the signature modified is the one 
// indicated by the dsig.Selector property.
loo_SbOut = create oleobject
li_rc = loo_SbOut.ConnectToNewObject("Chilkat.StringBuilder")

li_Success = loo_Dsig.AddEncapsulatedTimeStamp(loo_Json,loo_SbOut)
if li_Success = 0 then
    Write-Debug loo_Dsig.LastErrorText
    destroy loo_SbXml
    destroy loo_Dsig
    destroy loo_Json
    destroy loo_SbOut
    return
end if

loo_SbOut.WriteFile("qa_output/addedEncapsulatedTimeStamp.xml","utf-8",0)

// The EncapsulatedTimeStamp can be validated when validating the signature by adding the VerifyEncapsulatedTimeStamp
// keyword to UncommonOptions.  See here:

// ----------------------------------------
// Verify the signatures we just produced...
loo_Verifier = create oleobject
li_rc = loo_Verifier.ConnectToNewObject("Chilkat.XmlDSig")

li_Success = loo_Verifier.LoadSignatureSb(loo_SbOut)
if li_Success <> 1 then
    Write-Debug loo_Verifier.LastErrorText
    destroy loo_SbXml
    destroy loo_Dsig
    destroy loo_Json
    destroy loo_SbOut
    destroy loo_Verifier
    return
end if

// Add "VerifyEncapsulatedTimeStamp" to the UncommonOptions to also verify any EncapsulatedTimeStamps
loo_Verifier.UncommonOptions = "VerifyEncapsulatedTimeStamp"

li_NumSigs = loo_Verifier.NumSignatures
li_VerifyIdx = 0
do while li_VerifyIdx < li_NumSigs
    loo_Verifier.Selector = li_VerifyIdx
    li_Verified = loo_Verifier.VerifySignature(1)
    if li_Verified <> 1 then
        Write-Debug loo_Verifier.LastErrorText
        destroy loo_SbXml
        destroy loo_Dsig
        destroy loo_Json
        destroy loo_SbOut
        destroy loo_Verifier
        return
    end if

    li_VerifyIdx = li_VerifyIdx + 1
loop
Write-Debug "All signatures were successfully verified."


destroy loo_SbXml
destroy loo_Dsig
destroy loo_Json
destroy loo_SbOut
destroy loo_Verifier