Xbase++
Decrypt a govtalk.gov.uk SOAP GovTalkMessage

Demonstrates how to decrypt the content contained in the XML of a GovTalkMessage SOAP response.
Chilkat Xbase++ Downloads

Xbase++
LOCAL nSuccess
LOCAL oXml
LOCAL cBody
LOCAL oCert
LOCAL oCrypt
LOCAL oBd

nSuccess := 0

//  This example assumes the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  The GovTalkMessage response looks something like this:

//  <?xml version="1.0" encoding="utf-8"?>
//  <GovTalkMessage xmlns="http://www.govtalk.gov.uk/CM/envelope">
//    <EnvelopeVersion>3.1</EnvelopeVersion>
//    <Header>
//      <MessageDetails>
//        <Class>CSSZ_DZDPN</Class>
//        <Qualifier>request</Qualifier>
//        <Function>submit</Function>
//        <TransactionID />
//        <AuditID />
//        <CorrelationID>aaaaa</CorrelationID>
//        <ResponseEndPoint PollInterval="0" />
//        <Transformation>XML</Transformation>
//        <GatewayTest />
//        <GatewayTimestamp />
//      </MessageDetails>
//      <SenderDetails>
//        <IDAuthentication>
//          <SenderID />
//          <Authentication>
//            <Method>clear</Method>
//            <Role />
//            <Value />
//          </Authentication>
//        </IDAuthentication>
//        <X509Certificate />
//        <EmailAddress>somebody@example.com</EmailAddress>
//      </SenderDetails>
//    </Header>
//    <GovTalkDetails>
//      <Keys>
//        <Key Type="vars">9999999999</Key>
//      </Keys>
//      <GatewayAdditions>
//        <Source>VREP</Source>
//      </GatewayAdditions>
//    </GovTalkDetails>
//    <Body>
//      <Message xmlns="http://www.cssz.cz/XMLSchema/envelope" version="1.2" eType="DZDPN20">
//        <Header>
//          <Signature xmlns:dt="urn:schemas-microsoft-com:datatypes" dt:dt="bin.base64">MIIJ0A ... UMw=
//  </Signature>
//          <Vendor productName="some product name" version="2019" />
//        </Header>
//        <Body xmlns:dt="urn:schemas-microsoft-com:datatypes" encrypted="yes" contentEncoding="gzip" dt:dt="bin.base64">MIIF2w ... N2vW</Body>
//      </Message>
//    </Body>
//  </GovTalkMessage>

//  We want to get the content of the Body and decrypt it.

//  First, let's get the content of the Body XML element, which is a base64 string starting with MIIF2w...

oXml := CreateObject("Chilkat.Xml")
nSuccess := oXml:LoadXmlFile("qa_data/xml/govTalkMessageResponse.xml")
IF (nSuccess == 0)
    ? oXml:LastErrorText
    oXml:destroy()
    RETURN
ENDIF

cBody := oXml:GetChildContent("Body|Message|Body")
? cBody

oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadPfxFile("qa_data/pfx/govTalkMessage_aaa.pfx", "aaa")
IF (nSuccess == 0)
    ? oCert:LastErrorText
    oXml:destroy()
    oCert:destroy()
    RETURN
ENDIF

oCrypt := CreateObject("Chilkat.Crypt2")
oCrypt:CryptAlgorithm := "pki"
nSuccess := oCrypt:SetDecryptCert(oCert)
IF (nSuccess == 0)
    ? oCrypt:LastErrorText
    oXml:destroy()
    oCert:destroy()
    oCrypt:destroy()
    RETURN
ENDIF

oBd := CreateObject("Chilkat.BinData")
//  Append the bytes to bd.
nSuccess := oBd:AppendEncoded(cBody, "base64")

//  Decrypt in-place.
nSuccess := oCrypt:DecryptBd(oBd)
IF (nSuccess == 0)
    ? oCrypt:LastErrorText
    oXml:destroy()
    oCert:destroy()
    oCrypt:destroy()
    oBd:destroy()
    RETURN
ENDIF

//  Save the decrypted data to a file.
nSuccess := oBd:WriteFile("qa_output/out.dat")

//  If the decrypted data is non-text (binary) then we can examine it in an encoding, such as hex:
? "Decrypted bytes as hex: " + oBd:GetEncoded("hex")

oXml:destroy()
oCert:destroy()
oCrypt:destroy()
oBd:destroy()