Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Unicode C) PKCS11 XML Signature using Certificate and Private Key on Smart Card / USB TokenSee more PKCS11 ExamplesSample code showing how to use PKCS11 to create an XML digital signature with a certificate and private key stored on a smart card or USB token. Note: This example requires Chilkat v9.5.0.96 or later.
#include <C_CkPkcs11W.h> #include <C_CkCertW.h> #include <C_CkXmlW.h> #include <C_CkXmlDSigGenW.h> #include <C_CkStringBuilderW.h> void ChilkatSample(void) { HCkPkcs11W pkcs11; int userType; const wchar_t *pin; BOOL success; HCkCertW cert; HCkXmlW xml; HCkXmlDSigGenW gen; BOOL bUsePrivateKey; HCkStringBuilderW sbXml; // This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems. pkcs11 = CkPkcs11W_Create(); // This example is tested on Windows using a Giesecke and Devrient Sm@rtCafe Expert 3.2 smart card. // You will use the DLL (or shared lib) provided by your smart card vendor, or a DLL compatible with your smart card. // On Windows, if the DLL is located in C:\Windows\System32, specify only the filename. // Otherwise provide the full path. CkPkcs11W_putSharedLibPath(pkcs11,L"aetpkss1.dll"); // Make it an authenticated session by calling Login. userType = 1; // Make sure to use the correct PIN for your smart card.. pin = L"0000"; success = CkPkcs11W_QuickSession(pkcs11,userType,pin); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); CkPkcs11W_Dispose(pkcs11); return; } // Get the certificate (on the smart card) that has a private key. cert = CkCertW_Create(); success = CkPkcs11W_FindCert(pkcs11,L"privateKey",L"",cert); if (success == TRUE) { wprintf(L"Cert with private key: %s\n",CkCertW_subjectCN(cert)); } else { wprintf(L"No certificates having a private key were found.\n"); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); return; } // -------------------------------------------------------------------------- // At this point, we have the cert to be used for signing. // Our XML signing code is the same as for a cert obtained from any other source.. // First generate the following XML to be signed: // Use this online tool to generate code from sample XML: // Generate Code to Create XML // <?xml version="1.0" encoding="UTF-8" standalone="no" ?> // <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"> // <SOAP-ENV:Header> // <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" SOAP-ENV:mustUnderstand="1"></wsse:Security> // </SOAP-ENV:Header> // <SOAP-ENV:Body xmlns:SOAP-SEC="http://schemas.xmlsoap.org/soap/security/2000-12" SOAP-SEC:id="Body"> // <z:FooBar xmlns:z="http://example.com" /> // </SOAP-ENV:Body> // </SOAP-ENV:Envelope> xml = CkXmlW_Create(); CkXmlW_putTag(xml,L"SOAP-ENV:Envelope"); CkXmlW_AddAttribute(xml,L"xmlns:SOAP-ENV",L"http://schemas.xmlsoap.org/soap/envelope/"); CkXmlW_UpdateAttrAt(xml,L"SOAP-ENV:Header|wsse:Security",TRUE,L"xmlns:wsse",L"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"); CkXmlW_UpdateAttrAt(xml,L"SOAP-ENV:Header|wsse:Security",TRUE,L"SOAP-ENV:mustUnderstand",L"1"); CkXmlW_UpdateAttrAt(xml,L"SOAP-ENV:Body",TRUE,L"xmlns:SOAP-SEC",L"http://schemas.xmlsoap.org/soap/security/2000-12"); CkXmlW_UpdateAttrAt(xml,L"SOAP-ENV:Body",TRUE,L"SOAP-SEC:id",L"Body"); CkXmlW_UpdateAttrAt(xml,L"SOAP-ENV:Body|z:FooBar",TRUE,L"xmlns:z",L"http://example.com"); gen = CkXmlDSigGenW_Create(); // Indicate where the Signature will be inserted. CkXmlDSigGenW_putSigLocation(gen,L"SOAP-ENV:Envelope|SOAP-ENV:Header|wsse:Security"); // Add a reference to the fragment of the XML to be signed. // Note: "Body" refers to the XML element having an "id" equal to "Body", where "id" is case insensitive // and where any namespace might qualify the attribute. In this case, the SOAP-ENV:Body fragment is signed // NOT because the tag = "Body", but because it has SOAP-SEC:id="Body" CkXmlDSigGenW_AddSameDocRef(gen,L"Body",L"sha1",L"EXCL_C14N",L"",L""); // (You can read about the SignedInfoPrefixList in the online reference documentation. It's optional..) CkXmlDSigGenW_putSignedInfoPrefixList(gen,L"wsse SOAP-ENV"); // Provide the private key for signing via the certificate, and indicate that // we want the base64 of the certificate embedded in the KeyInfo. CkXmlDSigGenW_putKeyInfoType(gen,L"X509Data"); CkXmlDSigGenW_putX509Type(gen,L"Certificate"); bUsePrivateKey = TRUE; success = CkXmlDSigGenW_SetX509Cert(gen,cert,bUsePrivateKey); if (success != TRUE) { wprintf(L"%s\n",CkXmlDSigGenW_lastErrorText(gen)); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkXmlW_Dispose(xml); CkXmlDSigGenW_Dispose(gen); return; } // Everything's specified. Now create and insert the Signature sbXml = CkStringBuilderW_Create(); CkXmlW_putEmitCompact(xml,TRUE); CkXmlW_GetXmlSb(xml,sbXml); success = CkXmlDSigGenW_CreateXmlDSigSb(gen,sbXml); if (success != TRUE) { wprintf(L"%s\n",CkXmlDSigGenW_lastErrorText(gen)); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkXmlW_Dispose(xml); CkXmlDSigGenW_Dispose(gen); CkStringBuilderW_Dispose(sbXml); return; } // Examine the XML with the digital signature inserted wprintf(L"%s\n",CkStringBuilderW_getAsString(sbXml)); // -------------------------------------------------------------------------- // Revert to an unauthenticated session by calling Logout. success = CkPkcs11W_Logout(pkcs11); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkXmlW_Dispose(xml); CkXmlDSigGenW_Dispose(gen); CkStringBuilderW_Dispose(sbXml); return; } // When finished, close the session. // It is important to close the session (memory leaks will occur if the session is not properly closed). success = CkPkcs11W_CloseSession(pkcs11); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkXmlW_Dispose(xml); CkXmlDSigGenW_Dispose(gen); CkStringBuilderW_Dispose(sbXml); return; } wprintf(L"Success.\n"); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkXmlW_Dispose(xml); CkXmlDSigGenW_Dispose(gen); CkStringBuilderW_Dispose(sbXml); } |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.