Lua
Lua
Create Signed SOAP XML for DIAN Colombia WCF Service
See more XAdES Examples
Demonstrates how to create a signed SOAP XML document for DIAN Colombia.Chilkat Lua Downloads
local chilkat = require("chilkat")
-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.
-- This example will produce a signed SOAP XML message that looks like this:
-- <?xml version="1.0" encoding="utf-8"?>
-- <soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:wcf="http://wcf.dian.colombia">
-- <soap:Header xmlns:wsa="http://www.w3.org/2005/08/addressing">
-- <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
-- <wsu:Timestamp wsu:Id="TS-F25839120CBA3ECDAD68754D0443A667636FDA68">
-- <wsu:Created>2019-08-23T23:03:01Z</wsu:Created>
-- <wsu:Expires>2019-08-24T15:43:01Z</wsu:Expires>
-- </wsu:Timestamp>
-- <wsse:BinarySecurityToken EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"
-- ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"
-- wsu:Id="ABCXYZ-9F0F7E15A59816E680B4735080A789DC1EED6C9C">MIIG8jCCBd ... zLjGQUB6lcz</wsse:BinarySecurityToken>
-- <ds:Signature Id="SIG-F25839120CBA3ECDAD68754D0443A667636FDA68" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-- <ds:SignedInfo>
-- <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
-- <ec:InclusiveNamespaces PrefixList="wsa soap wcf" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/>
-- </ds:CanonicalizationMethod>
-- <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
-- <ds:Reference URI="#ID-F25839120CBA3ECDAD68754D0443A667636FDA68">
-- <ds:Transforms>
-- <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
-- <ec:InclusiveNamespaces PrefixList="soap wcf" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/>
-- </ds:Transform>
-- </ds:Transforms>
-- <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
-- <ds:DigestValue>gSIKtjS/BKA2bgecXkM8lYVBDqlXcU3juNYT9a+bSnM=</ds:DigestValue>
-- </ds:Reference>
-- </ds:SignedInfo>
-- <ds:SignatureValue>sL7rOdyfkEnKgJja0eWrv ... YqG0T0pflBsGW9zXkjQ9NvAw==</ds:SignatureValue>
-- <ds:KeyInfo Id="KI-F25839120CBA3ECDAD68754D0443A667636FDA68">
-- <wsse:SecurityTokenReference wsu:Id="STR-F25839120CBA3ECDAD68754D0443A667636FDA68">
-- <wsse:Reference URI="#ABCXYZ-9F0F7E15A59816E680B4735080A789DC1EED6C9C" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/>
-- </wsse:SecurityTokenReference>
-- </ds:KeyInfo>
-- </ds:Signature>
-- </wsse:Security>
-- <wsa:Action>http://wcf.dian.colombia/IWcfDianCustomerServices/GetStatus</wsa:Action>
-- <wsa:To wsu:Id="ID-F25839120CBA3ECDAD68754D0443A667636FDA68" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">https://vpfe-hab.dian.gov.co/WcfDianCustomerServices.svc</wsa:To>
-- </soap:Header>
-- <soap:Body>
-- <wcf:GetStatus>
-- <wcf:trackId>123456666</wcf:trackId>
-- </wcf:GetStatus>
-- </soap:Body>
-- </soap:Envelope>
-- Use this online tool to generate code from sample Signed XML:
-- Generate Code to Create Signed XML
local success = true
-- Create the XML to be signed...
local xmlToSign = chilkat.Xml.new()
xmlToSign.tag = "soap:Envelope"
xmlToSign:add_attribute("xmlns:soap", "http://www.w3.org/2003/05/soap-envelope")
xmlToSign:add_attribute("xmlns:wcf", "http://wcf.dian.colombia")
xmlToSign:update_attr_at("soap:Header", true, "xmlns:wsa", "http://www.w3.org/2005/08/addressing")
xmlToSign:update_attr_at("soap:Header|wsse:Security", true, "xmlns:wsse", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd")
xmlToSign:update_attr_at("soap:Header|wsse:Security", true, "xmlns:wsu", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd")
xmlToSign:update_attr_at("soap:Header|wsse:Security|wsu:Timestamp", true, "wsu:Id", "TS-F25839120CBA3ECDAD68754D0443A667636FDA68")
xmlToSign:update_child_content("soap:Header|wsse:Security|wsu:Timestamp|wsu:Created", "2019-08-23T23:03:01Z")
xmlToSign:update_child_content("soap:Header|wsse:Security|wsu:Timestamp|wsu:Expires", "2019-08-24T15:43:01Z")
xmlToSign:update_attr_at("soap:Header|wsse:Security|wsse:BinarySecurityToken", true, "EncodingType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary")
xmlToSign:update_attr_at("soap:Header|wsse:Security|wsse:BinarySecurityToken", true, "ValueType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3")
xmlToSign:update_attr_at("soap:Header|wsse:Security|wsse:BinarySecurityToken", true, "wsu:Id", "ABCXYZ-9F0F7E15A59816E680B4735080A789DC1EED6C9C")
xmlToSign:update_child_content("soap:Header|wsse:Security|wsse:BinarySecurityToken", "BinarySecurityToken_Base64Binary_Content")
xmlToSign:update_child_content("soap:Header|wsa:Action", "http://wcf.dian.colombia/IWcfDianCustomerServices/GetStatus")
xmlToSign:update_attr_at("soap:Header|wsa:To", true, "wsu:Id", "ID-F25839120CBA3ECDAD68754D0443A667636FDA68")
xmlToSign:update_attr_at("soap:Header|wsa:To", true, "xmlns:wsu", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd")
xmlToSign:update_child_content("soap:Header|wsa:To", "https://vpfe-hab.dian.gov.co/WcfDianCustomerServices.svc")
xmlToSign:update_child_content("soap:Body|wcf:GetStatus|wcf:trackId", "123456666")
local gen = chilkat.XmlDSigGen.new()
gen.sig_location = "soap:Envelope|soap:Header|wsse:Security"
gen.sig_location_mod = 0
gen.sig_id = "SIG-F25839120CBA3ECDAD68754D0443A667636FDA68"
gen.sig_namespace_prefix = "ds"
gen.sig_namespace_uri = "http://www.w3.org/2000/09/xmldsig#"
gen.signed_info_canon_alg = "EXCL_C14N"
gen.signed_info_digest_method = "sha256"
-- Set the KeyInfoId before adding references..
gen.key_info_id = "KI-F25839120CBA3ECDAD68754D0443A667636FDA68"
-- -------- Reference 1 --------
gen:add_same_doc_ref("ID-F25839120CBA3ECDAD68754D0443A667636FDA68", "sha256", "EXCL_C14N", "soap wcf", "")
-- Provide a certificate + private key. (PFX password is test123)
local cert = chilkat.Cert.new()
success = cert:load_pfx_file("qa_data/pfx/cert_test123.pfx", "test123")
if not success then
print(cert.last_error_text)
return
end
gen:set_x509_cert(cert, true)
gen.key_info_type = "Custom"
-- Create the custom KeyInfo XML..
local xmlCustomKeyInfo = chilkat.Xml.new()
xmlCustomKeyInfo.tag = "wsse:SecurityTokenReference"
xmlCustomKeyInfo:add_attribute("wsu:Id", "STR-F25839120CBA3ECDAD68754D0443A667636FDA68")
xmlCustomKeyInfo:update_attr_at("wsse:Reference", true, "URI", "#ABCXYZ-9F0F7E15A59816E680B4735080A789DC1EED6C9C")
xmlCustomKeyInfo:update_attr_at("wsse:Reference", true, "ValueType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3")
xmlCustomKeyInfo.emit_xml_decl = false
gen.custom_key_info_xml = xmlCustomKeyInfo:get_xml()
-- Load XML to be signed...
local sbXml = chilkat.StringBuilder.new()
xmlToSign:get_xml_sb(sbXml)
-- Update BinarySecurityToken_Base64Binary_Content with the actual X509 of the signing cert.
local bdCert = chilkat.BinData.new()
cert:export_cert_der_bd(bdCert)
local nReplaced = sbXml:replace("BinarySecurityToken_Base64Binary_Content", bdCert:get_encoded("base64"))
gen.behaviors = "IndentedSignature"
-- Sign the XML...
success = gen:create_xml_dsig_sb(sbXml)
if not success then
print(gen.last_error_text)
return
end
-- -----------------------------------------------
-- Save the signed XML to a file.
success = sbXml:write_file("qa_output/signedXml.xml", "utf-8", false)
print(sbXml:get_as_string())
-- ----------------------------------------
-- Verify the signatures we just produced...
local verifier = chilkat.XmlDSig.new()
success = verifier:load_signature_sb(sbXml)
if not success then
print(verifier.last_error_text)
return
end
local numSigs = verifier.num_signatures
local verifyIdx = 0
while verifyIdx < numSigs do
verifier.selector = verifyIdx
local verified = verifier:verify_signature(true)
if not verified then
print(verifier.last_error_text)
return
end
verifyIdx = verifyIdx + 1
end
print("All signatures were successfully verified.")
-- --------------------------------------------------------------------------------
-- Also see Chilkat's Online WSDL Code Generator
-- to generate code and SOAP Request and Response XML for each operation in a WSDL.
-- --------------------------------------------------------------------------------