SQL Server
SQL Server
Create XML Digital Signature using HMAC Key
See more XML Digital Signatures Examples
Demonstrates how to create an XML digital signature using an HMAC key.Chilkat SQL Server Downloads
-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
DECLARE @hr int
-- Important: Do not use nvarchar(max). See the warning about using nvarchar(max).
DECLARE @sTmp0 nvarchar(4000)
DECLARE @success int
SELECT @success = 0
-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.
-- Signs the following XML using an HMAC key.
-- <?xml version="1.0" encoding="UTF-8" standalone="no"?>
-- <collection Id="root">
-- <album>
-- <title>Questions, unanswered</title>
-- <artist>Steve and the flubberblubs</artist>
-- <year>1989</year>
-- <t:tracks xmlns:t="http://test.xades4j/tracks">
-- <t:song length="4:05" tracknumber="1">
-- <t:title>What do you know?</t:title>
-- <t:artist>Steve and the flubberblubs</t:artist>
-- <t:lastplayed>2006-10-17-08:31</t:lastplayed>
-- </t:song>
-- <t:song length="3:45" tracknumber="2">
-- <t:title>Who do you know?</t:title>
-- <t:artist>Steve and the flubberblubs</t:artist>
-- <t:lastplayed>2006-10-17-08:35</t:lastplayed>
-- </t:song>
-- <t:song length="5:14" tracknumber="3">
-- <t:title>When do you know?</t:title>
-- <t:artist>Steve and the flubberblubs</t:artist>
-- <t:lastplayed>2006-10-17-08:39</t:lastplayed>
-- </t:song>
-- <t:song length="4:19" tracknumber="4">
-- <t:title>Do you know?</t:title>
-- <t:artist>Steve and the flubberblubs</t:artist>
-- <t:lastplayed>2006-10-17-08:44</t:lastplayed>
-- </t:song>
-- </t:tracks>
-- </album>
-- </collection>
--
-- The above XML is available at https://www.chilkatsoft.com/exampleData/flubberblub.xml
-- Fetch the XML and then sign it..
DECLARE @url nvarchar(4000)
SELECT @url = 'https://www.chilkatsoft.com/exampleData/flubberblub.xml'
DECLARE @http int
EXEC @hr = sp_OACreate 'Chilkat.Http', @http OUT
IF @hr <> 0
BEGIN
PRINT 'Failed to create ActiveX component'
RETURN
END
DECLARE @sbXml int
EXEC @hr = sp_OACreate 'Chilkat.StringBuilder', @sbXml OUT
EXEC sp_OAMethod @http, 'QuickGetSb', @success OUT, @url, @sbXml
IF @success <> 1
BEGIN
EXEC sp_OAGetProperty @http, 'LastErrorText', @sTmp0 OUT
PRINT @sTmp0
EXEC @hr = sp_OADestroy @http
EXEC @hr = sp_OADestroy @sbXml
RETURN
END
DECLARE @xmlSigGen int
EXEC @hr = sp_OACreate 'Chilkat.XmlDSigGen', @xmlSigGen OUT
-- The Signature will be inserted under the "collection" element.
EXEC sp_OASetProperty @xmlSigGen, 'SigLocation', 'collection'
-- Sign everything in <collection Id="root"> ... </collection>
EXEC sp_OAMethod @xmlSigGen, 'AddSameDocRef', @success OUT, 'root', 'sha256', 'C14N', '', ''
-- Specify the HMAC key.
-- For example, if the HMAC key is to be the us-ascii bytes of the string "secret",
-- the HMAC key can be set in any of the following ways (and also more ways not shown here..)
EXEC sp_OAMethod @xmlSigGen, 'SetHmacKey', @success OUT, 'secret', 'ascii'
-- or
EXEC sp_OAMethod @xmlSigGen, 'SetHmacKey', @success OUT, 'c2VjcmV0', 'base64'
-- or
EXEC sp_OAMethod @xmlSigGen, 'SetHmacKey', @success OUT, '736563726574', 'hex'
-- Sign the XML..
EXEC sp_OAMethod @xmlSigGen, 'CreateXmlDSigSb', @success OUT, @sbXml
IF @success <> 1
BEGIN
EXEC sp_OAGetProperty @xmlSigGen, 'LastErrorText', @sTmp0 OUT
PRINT @sTmp0
EXEC @hr = sp_OADestroy @http
EXEC @hr = sp_OADestroy @sbXml
EXEC @hr = sp_OADestroy @xmlSigGen
RETURN
END
-- Examine the signed XML:
EXEC sp_OAMethod @sbXml, 'GetAsString', @sTmp0 OUT
PRINT @sTmp0
-- The output is:
--
-- <?xml version="1.0" encoding="UTF-8" standalone="no"?>
-- <collection Id="root">
-- <album>
-- <title>Questions, unanswered</title>
-- <artist>Steve and the flubberblubs</artist>
-- <year>1989</year>
-- <t:tracks xmlns:t="http://test.xades4j/tracks">
-- <t:song length="4:05" tracknumber="1">
-- <t:title>What do you know?</t:title>
-- <t:artist>Steve and the flubberblubs</t:artist>
-- <t:lastplayed>2006-10-17-08:31</t:lastplayed>
-- </t:song>
-- <t:song length="3:45" tracknumber="2">
-- <t:title>Who do you know?</t:title>
-- <t:artist>Steve and the flubberblubs</t:artist>
-- <t:lastplayed>2006-10-17-08:35</t:lastplayed>
-- </t:song>
-- <t:song length="5:14" tracknumber="3">
-- <t:title>When do you know?</t:title>
-- <t:artist>Steve and the flubberblubs</t:artist>
-- <t:lastplayed>2006-10-17-08:39</t:lastplayed>
-- </t:song>
-- <t:song length="4:19" tracknumber="4">
-- <t:title>Do you know?</t:title>
-- <t:artist>Steve and the flubberblubs</t:artist>
-- <t:lastplayed>2006-10-17-08:44</t:lastplayed>
-- </t:song>
-- </t:tracks>
-- </album>
-- <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"/><ds:Reference URI="#root"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>rD/g8soqKz8EiPUBhEWfcQacS0ta4ULHX3dKMEH6ZoQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>R8dXP95VRYJBfL6d0Peogybdk27+R+JIfX8jnVu0NOI=</ds:SignatureValue></ds:Signature></collection>
--
EXEC @hr = sp_OADestroy @http
EXEC @hr = sp_OADestroy @sbXml
EXEC @hr = sp_OADestroy @xmlSigGen
END
GO