Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Tcl) Sign Italian SPID Metadata XMLDemonstrates how to create an XML digital signature for Italian SPID Metadata.
load ./chilkat.dll # This example assumes the Chilkat API to have been previously unlocked. # See Global Unlock Sample for sample code. set success 1 # Load the XML to be signed. set sbXml [new_CkStringBuilder] set success [CkStringBuilder_LoadFile $sbXml "qa_data/xml_dsig/spid_metadata.xml" "utf-8"] if {$success == 0} then { puts "Failed to load the input file." delete_CkStringBuilder $sbXml exit } # The XML to sign contains XML such as this: # <?xml version="1.0" encoding="utf-8"?> # <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://***.it" ID="_AE17AFFF-A600-49D5-B81D-76EEA55B50FF"> # <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true"> # <md:KeyDescriptor use="signing"> # <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> # <ds:X509Data> # <ds:X509Certificate>MIIF5...</ds:X509Certificate> # </ds:X509Data> # </ds:KeyInfo> # </md:KeyDescriptor> # <md:KeyDescriptor use="encryption"> # <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> # <ds:X509Data> # <ds:X509Certificate>MIIF5...</ds:X509Certificate> # </ds:X509Data> # </ds:KeyInfo> # </md:KeyDescriptor> # <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://***.it/it-it/spid/logout"/> # <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> # <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://***.it/it-it/spid/loginresp" index="0" isDefault="true"/> # <md:AttributeConsumingService index="1"> # <md:ServiceName xml:lang="it">Servizi Online</md:ServiceName> # <md:ServiceDescription xml:lang="it">Accesso ai Servizi Online</md:ServiceDescription> # <md:RequestedAttribute Name="spidCode" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/> # <md:RequestedAttribute Name="name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/> # <md:RequestedAttribute Name="familyName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/> # <md:RequestedAttribute Name="fiscalNumber" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/> # </md:AttributeConsumingService> # </md:SPSSODescriptor> # <md:Organization> # <md:OrganizationName xml:lang="it">SomeCompany s.r.l.</md:OrganizationName> # <md:OrganizationDisplayName xml:lang="it">SomeCompany s.r.l.</md:OrganizationDisplayName> # <md:OrganizationURL xml:lang="it">https://***.it</md:OrganizationURL> # </md:Organization> # </md:EntityDescriptor> set gen [new_CkXmlDSigGen] CkXmlDSigGen_put_SigLocation $gen "md:EntityDescriptor|md:SPSSODescriptor" CkXmlDSigGen_put_SigLocationMod $gen 2 CkXmlDSigGen_put_SignedInfoCanonAlg $gen "EXCL_C14N" CkXmlDSigGen_put_SignedInfoDigestMethod $gen "sha256" # -------- Reference 1 -------- CkXmlDSigGen_AddSameDocRef $gen "_AE17AFFF-A600-49D5-B81D-76EEA55B50FF" "sha256" "EXCL_C14N" "" "" # Provide a certificate + private key. (PFX password is test123) set cert [new_CkCert] set success [CkCert_LoadPfxFile $cert "qa_data/pfx/cert_test123.pfx" "test123"] if {$success != 1} then { puts [CkCert_lastErrorText $cert] delete_CkStringBuilder $sbXml delete_CkXmlDSigGen $gen delete_CkCert $cert exit } CkXmlDSigGen_SetX509Cert $gen $cert 1 CkXmlDSigGen_put_KeyInfoType $gen "X509Data+KeyValue" CkXmlDSigGen_put_X509Type $gen "Certificate" CkXmlDSigGen_put_Behaviors $gen "IndentedSignature,ForceAddEnvelopedSignatureTransform,OmitAlreadyDefinedSigNamespace" # Sign the XML... set success [CkXmlDSigGen_CreateXmlDSigSb $gen $sbXml] if {$success != 1} then { puts [CkXmlDSigGen_lastErrorText $gen] delete_CkStringBuilder $sbXml delete_CkXmlDSigGen $gen delete_CkCert $cert exit } # ----------------------------------------------- # Save the signed XML to a file. set success [CkStringBuilder_WriteFile $sbXml "qa_output/signedXml.xml" "utf-8" 0] puts [CkStringBuilder_getAsString $sbXml] # ---------------------------------------- # Verify the signatures we just produced... set verifier [new_CkXmlDSig] set success [CkXmlDSig_LoadSignatureSb $verifier $sbXml] if {$success != 1} then { puts [CkXmlDSig_lastErrorText $verifier] delete_CkStringBuilder $sbXml delete_CkXmlDSigGen $gen delete_CkCert $cert delete_CkXmlDSig $verifier exit } set numSigs [CkXmlDSig_get_NumSignatures $verifier] set verifyIdx 0 while {$verifyIdx < $numSigs} { CkXmlDSig_put_Selector $verifier $verifyIdx set verified [CkXmlDSig_VerifySignature $verifier 1] if {$verified != 1} then { puts [CkXmlDSig_lastErrorText $verifier] delete_CkStringBuilder $sbXml delete_CkXmlDSigGen $gen delete_CkCert $cert delete_CkXmlDSig $verifier exit } set verifyIdx [expr $verifyIdx + 1] } puts "All signatures were successfully verified." delete_CkStringBuilder $sbXml delete_CkXmlDSigGen $gen delete_CkCert $cert delete_CkXmlDSig $verifier |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.