(Classic ASP) Examine KeyInfo Certificate in XML Signature

This example loads signed XML and gets the signing certificate, assuming the certificate is contained in X509Certificate within the KeyInfo.

Chilkat ActiveX Downloads

ActiveX for 32-bit and 64-bit Windows

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
' This example requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.XmlDSig")
set dsig = Server.CreateObject("Chilkat.XmlDSig")
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.StringBuilder")
set sbXml = Server.CreateObject("Chilkat.StringBuilder")

success = sbXml.LoadFile("c:/aaworkarea/elias/3/face_f09006808443a699d1b.xml","utf-8")
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( "Failed to load XML file.") & "</pre>"
    Response.End
End If

success = dsig.LoadSignatureSb(sbXml)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( dsig.LastErrorText) & "</pre>"
    Response.End
End If

' Get the KeyInfo XML.
' xmlKeyInfo is a Chilkat.Xml
Set xmlKeyInfo = dsig.GetKeyInfo()
If (dsig.LastMethodSuccess <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( dsig.LastErrorText) & "</pre>"
    Response.End
End If

Response.Write "<pre>" & Server.HTMLEncode( xmlKeyInfo.GetXml()) & "</pre>"
Response.Write "<pre>" & Server.HTMLEncode( "----") & "</pre>"

' Assuming the X509Certificate is in the KeyInfo, it will look like this:

'   <ds:KeyInfo Id="...">
'     <ds:KeyValue>
'     ...  
'     <ds:X509Data>
'       <ds:X509Certificate>MIIHAz...</ds:X509Certificate>
'     </ds:X509Data>
'   </ds:KeyInfo>
certBase64 = xmlKeyInfo.GetChildContent("*:X509Data|*:X509Certificate")
If (xmlKeyInfo.LastMethodSuccess <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( "No X509Certificate found in the KeyInfo.") & "</pre>"
    Response.End
End If

' Load a certificate object w/ the base64.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Cert")
set cert = Server.CreateObject("Chilkat.Cert")
success = cert.LoadFromBase64(certBase64)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( cert.LastErrorText) & "</pre>"
    Response.End
End If

' Examine the cert..
Response.Write "<pre>" & Server.HTMLEncode( "SubjectDN: " & cert.SubjectDN) & "</pre>"
Response.Write "<pre>" & Server.HTMLEncode( "IssuerDN: " & cert.IssuerDN) & "</pre>"
Response.Write "<pre>" & Server.HTMLEncode( "SerialNumber as Decimal: " & cert.SerialDecimal) & "</pre>"


%>
</body>
</html>