Rust Requires Chilkat v11.0.0+

Signing HTTP Messages

See more RSA Examples

Demonstrates how to sign HTTP messages per draft-cavage-http-signatures-10 Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

let b_crlf = true;
let sb_public_key_pem = chilkat::StringBuilder::new();
let _ = sb_public_key_pem.append_line("-----BEGIN PUBLIC KEY-----", b_crlf);
let _ = sb_public_key_pem.append_line("MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCFENGw33yGihy92pDjZQhl0C3", b_crlf);
let _ = sb_public_key_pem.append_line("6rPJj+CvfSC8+q28hxA161QFNUd13wuCTUcq0Qd2qsBe/2hFyc2DCJJg0h1L78+6", b_crlf);
let _ = sb_public_key_pem.append_line("Z4UMR7EOcpfdUE9Hf3m/hs+FUR45uBJeDK1HSFHD8bHKD6kv8FPGfJTotc+2xjJw", b_crlf);
let _ = sb_public_key_pem.append_line("oYi+1hqp1fIekaxsyQIDAQAB", b_crlf);
let _ = sb_public_key_pem.append_line("-----END PUBLIC KEY-----", b_crlf);

let pub_key = chilkat::PublicKey::new();
let _ = pub_key.load_from_string(&sb_public_key_pem.get_as_string().unwrap_or_default());

let sb_private_key_pem = chilkat::StringBuilder::new();
let _ = sb_private_key_pem.append_line("-----BEGIN RSA PRIVATE KEY-----", b_crlf);
let _ = sb_private_key_pem.append_line("MIICXgIBAAKBgQDCFENGw33yGihy92pDjZQhl0C36rPJj+CvfSC8+q28hxA161QF", b_crlf);
let _ = sb_private_key_pem.append_line("NUd13wuCTUcq0Qd2qsBe/2hFyc2DCJJg0h1L78+6Z4UMR7EOcpfdUE9Hf3m/hs+F", b_crlf);
let _ = sb_private_key_pem.append_line("UR45uBJeDK1HSFHD8bHKD6kv8FPGfJTotc+2xjJwoYi+1hqp1fIekaxsyQIDAQAB", b_crlf);
let _ = sb_private_key_pem.append_line("AoGBAJR8ZkCUvx5kzv+utdl7T5MnordT1TvoXXJGXK7ZZ+UuvMNUCdN2QPc4sBiA", b_crlf);
let _ = sb_private_key_pem.append_line("QWvLw1cSKt5DsKZ8UETpYPy8pPYnnDEz2dDYiaew9+xEpubyeW2oH4Zx71wqBtOK", b_crlf);
let _ = sb_private_key_pem.append_line("kqwrXa/pzdpiucRRjk6vE6YY7EBBs/g7uanVpGibOVAEsqH1AkEA7DkjVH28WDUg", b_crlf);
let _ = sb_private_key_pem.append_line("f1nqvfn2Kj6CT7nIcE3jGJsZZ7zlZmBmHFDONMLUrXR/Zm3pR5m0tCmBqa5RK95u", b_crlf);
let _ = sb_private_key_pem.append_line("412jt1dPIwJBANJT3v8pnkth48bQo/fKel6uEYyboRtA5/uHuHkZ6FQF7OUkGogc", b_crlf);
let _ = sb_private_key_pem.append_line("mSJluOdc5t6hI1VsLn0QZEjQZMEOWr+wKSMCQQCC4kXJEsHAve77oP6HtG/IiEn7", b_crlf);
let _ = sb_private_key_pem.append_line("kpyUXRNvFsDE0czpJJBvL/aRFUJxuRK91jhjC68sA7NsKMGg5OXb5I5Jj36xAkEA", b_crlf);
let _ = sb_private_key_pem.append_line("gIT7aFOYBFwGgQAQkWNKLvySgKbAZRTeLBacpHMuQdl1DfdntvAyqpAZ0lY0RKmW", b_crlf);
let _ = sb_private_key_pem.append_line("G6aFKaqQfOXKCyWoUiVknQJAXrlgySFci/2ueKlIE1QqIiLSZ8V8OlpFLRnb1pzI", b_crlf);
let _ = sb_private_key_pem.append_line("7U1yQXnTAEFYM560yJlzUpOb1V4cScGd365tiSMvxLOvTA==", b_crlf);
let _ = sb_private_key_pem.append_line("-----END RSA PRIVATE KEY-----", b_crlf);

let priv_key = chilkat::PrivateKey::new();
let _ = priv_key.load_pem(&sb_private_key_pem.get_as_string().unwrap_or_default());

//    All examples use this request:
// 
//    POST /foo?param=value&pet=dog HTTP/1.1
//    Host: example.com
//    Date: Sun, 05 Jan 2014 21:31:40 GMT
//    Content-Type: application/json
//    Digest: SHA-256=X48E9qOokqqrvdts8nOJRJN3OWDUoyWxBf7kbu9DBPE=
//    Content-Length: 18
// 
//    {"hello": "world"}

// C.1.  Default Test
// 
//    If a list of headers is not included, the date is the only header
//    that is signed by default.  The string to sign would be:
// 
//    date: Sun, 05 Jan 2014 21:31:40 GMT
// 
//    The Authorization header would be:
// 
//    Authorization: Signature keyId="Test",algorithm="rsa-sha256",
//    signature="SjWJWbWN7i0wzBvtPl8rbASWz5xQW6mcJmn+ibttBqtifLN7Sazz
//    6m79cNfwwb8DMJ5cou1s7uEGKKCs+FLEEaDV5lp7q25WqS+lavg7T8hc0GppauB
//    6hbgEKTwblDHYGEtbGmtdHgVCk9SuS13F0hZ8FD0k/5OxEPXe5WozsbM="
// 
//    The Signature header would be:
// 
//    Signature: keyId="Test",algorithm="rsa-sha256",
//    signature="SjWJWbWN7i0wzBvtPl8rbASWz5xQW6mcJmn+ibttBqtifLN7Sazz
//    6m79cNfwwb8DMJ5cou1s7uEGKKCs+FLEEaDV5lp7q25WqS+lavg7T8hc0GppauB
//    6hbgEKTwblDHYGEtbGmtdHgVCk9SuS13F0hZ8FD0k/5OxEPXe5WozsbM="
// 

let dt_now = chilkat::DateTime::new();
let _ = dt_now.set_from_current_system_time().is_ok();
let mut date_str = dt_now.get_as_rfc822(false).unwrap_or_default();

// To duplicate the above result, we'll hard-code the date string.
date_str = "Sun, 05 Jan 2014 21:31:40 GMT".to_string();

let rsa = chilkat::Rsa::new();
if rsa.use_private_key(&priv_key).is_err() {
    println!("{}", rsa.last_error_text());
    return;
}

let sb_string_to_sign = chilkat::StringBuilder::new();
let _ = sb_string_to_sign.append("date: ");
let _ = sb_string_to_sign.append(&date_str);

rsa.set_encoding_mode("base64");
let mut b64_signature = rsa.sign_string_enc(&sb_string_to_sign.get_as_string().unwrap_or_default(), "SHA256").unwrap_or_default();
println!("{}", b64_signature);
println!("---------------------------");

// The result should be:
// SjWJWbWN7i0wzBvtPl8rbASW ... FD0k/5OxEPXe5WozsbM=

// ----------------------------------------------------------------------------------------------------

// C.2.  Basic Test
// 
//    The minimum recommended data to sign is the (request-target), host,
//    and date.  In this case, the string to sign would be:
// 
//    (request-target): post /foo?param=value&pet=dog
//    host: example.com
//    date: Sun, 05 Jan 2014 21:31:40 GMT
// 
//    The Authorization header would be:
// 
//    Authorization: Signature keyId="Test",algorithm="rsa-sha256",
//    headers="(request-target) host date", signature="qdx+H7PHHDZgy4
//    y/Ahn9Tny9V3GP6YgBPyUXMmoxWtLbHpUnXS2mg2+SbrQDMCJypxBLSPQR2aAjn
//    7ndmw2iicw3HMbe8VfEdKFYRqzic+efkb3nndiv/x1xSHDJWeSWkx3ButlYSuBs
//    kLu6kd9Fswtemr3lgdDEmn04swr2Os0="

sb_string_to_sign.clear();
let _ = sb_string_to_sign.append("(request-target): ");
let _ = sb_string_to_sign.append_line("post /foo?param=value&pet=dog", false);
let _ = sb_string_to_sign.append("host: ");
let _ = sb_string_to_sign.append_line("example.com", false);
let _ = sb_string_to_sign.append("date: ");
let _ = sb_string_to_sign.append(&date_str);

println!("StringToSign:");
println!("{}", sb_string_to_sign.get_as_string().unwrap_or_default());
b64_signature = rsa.sign_string_enc(&sb_string_to_sign.get_as_string().unwrap_or_default(), "SHA256").unwrap_or_default();
println!("{}", b64_signature);
println!("---------------------------");

// The result should be:
// qdx+H7PHHDZgy4y/Ahn ... mn04swr2Os0=