Sample code for 30+ languages & platforms
Xbase++

Sign Italian SPID Metadata XML

See more XML Digital Signatures Examples

Demonstrates how to create an XML digital signature for Italian SPID Metadata.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++
Xbase++ 
LOCAL nSuccess
LOCAL oSbXml
LOCAL oGen
LOCAL oCert
LOCAL oVerifier
LOCAL nNumSigs
LOCAL nVerifyIdx
LOCAL nVerified

nSuccess := 0

//  This example assumes the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

nSuccess := 1

//  Load the XML to be signed.
oSbXml := CreateObject("Chilkat.StringBuilder")
nSuccess := oSbXml:LoadFile("qa_data/xml_dsig/spid_metadata.xml", "utf-8")
IF (nSuccess == 0)
    ? "Failed to load the input file."
    oSbXml:destroy()
    RETURN
ENDIF

//  The XML to sign contains XML such as this:

//  <?xml version="1.0" encoding="utf-8"?>
//  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://***.it" ID="_AE17AFFF-A600-49D5-B81D-76EEA55B50FF">
//      <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true">
//          <md:KeyDescriptor use="signing">
//              <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
//                  <ds:X509Data>
//                      <ds:X509Certificate>MIIF5...</ds:X509Certificate>
//                  </ds:X509Data>
//              </ds:KeyInfo>
//          </md:KeyDescriptor>
//          <md:KeyDescriptor use="encryption">
//              <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
//                  <ds:X509Data>
//                      <ds:X509Certificate>MIIF5...</ds:X509Certificate>
//                  </ds:X509Data>
//              </ds:KeyInfo>
//          </md:KeyDescriptor>
//          <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://***.it/it-it/spid/logout"/>
//          <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
//          <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://***.it/it-it/spid/loginresp" index="0" isDefault="true"/>
//          <md:AttributeConsumingService index="1">
//              <md:ServiceName xml:lang="it">Servizi Online</md:ServiceName>
//              <md:ServiceDescription xml:lang="it">Accesso ai Servizi Online</md:ServiceDescription>
//              <md:RequestedAttribute Name="spidCode" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
//              <md:RequestedAttribute Name="name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
//              <md:RequestedAttribute Name="familyName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
//              <md:RequestedAttribute Name="fiscalNumber" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
//          </md:AttributeConsumingService>
//      </md:SPSSODescriptor>
//      <md:Organization>
//          <md:OrganizationName xml:lang="it">SomeCompany s.r.l.</md:OrganizationName>
//          <md:OrganizationDisplayName xml:lang="it">SomeCompany s.r.l.</md:OrganizationDisplayName>
//          <md:OrganizationURL xml:lang="it">https://***.it</md:OrganizationURL>
//      </md:Organization>
//  </md:EntityDescriptor>

oGen := CreateObject("Chilkat.XmlDSigGen")

oGen:SigLocation := "md:EntityDescriptor|md:SPSSODescriptor"
oGen:SigLocationMod := 2
oGen:SignedInfoCanonAlg := "EXCL_C14N"
oGen:SignedInfoDigestMethod := "sha256"

//  -------- Reference 1 --------
oGen:AddSameDocRef("_AE17AFFF-A600-49D5-B81D-76EEA55B50FF", "sha256", "EXCL_C14N", "", "")

//  Provide a certificate + private key. (PFX password is test123)
oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadPfxFile("qa_data/pfx/cert_test123.pfx", "test123")
IF (nSuccess != 1)
    ? oCert:LastErrorText
    oSbXml:destroy()
    oGen:destroy()
    oCert:destroy()
    RETURN
ENDIF

oGen:SetX509Cert(oCert, 1)

oGen:KeyInfoType := "X509Data+KeyValue"
oGen:X509Type := "Certificate"

oGen:Behaviors := "IndentedSignature,ForceAddEnvelopedSignatureTransform,OmitAlreadyDefinedSigNamespace"

//  Sign the XML...
nSuccess := oGen:CreateXmlDSigSb(oSbXml)
IF (nSuccess != 1)
    ? oGen:LastErrorText
    oSbXml:destroy()
    oGen:destroy()
    oCert:destroy()
    RETURN
ENDIF

//  -----------------------------------------------

//  Save the signed XML to a file.
nSuccess := oSbXml:WriteFile("qa_output/signedXml.xml", "utf-8", 0)

? oSbXml:GetAsString()

//  ----------------------------------------
//  Verify the signatures we just produced...
oVerifier := CreateObject("Chilkat.XmlDSig")
nSuccess := oVerifier:LoadSignatureSb(oSbXml)
IF (nSuccess != 1)
    ? oVerifier:LastErrorText
    oSbXml:destroy()
    oGen:destroy()
    oCert:destroy()
    oVerifier:destroy()
    RETURN
ENDIF

nNumSigs := oVerifier:NumSignatures
nVerifyIdx := 0
DO WHILE nVerifyIdx < nNumSigs
    oVerifier:Selector := nVerifyIdx
    nVerified := oVerifier:VerifySignature(1)
    IF (nVerified != 1)
        ? oVerifier:LastErrorText
        oSbXml:destroy()
        oGen:destroy()
        oCert:destroy()
        oVerifier:destroy()
        RETURN
    ENDIF

    nVerifyIdx := nVerifyIdx + 1
ENDDO
? "All signatures were successfully verified."

oSbXml:destroy()
oGen:destroy()
oCert:destroy()
oVerifier:destroy()