![]() |
Chilkat HOME Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi DLL Go Java Node.js Objective-C PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Unicode C++) XAdES XML Signature using ARSS (Aruba Remote Signing Service)See more Signing in the Cloud ExamplesDemonstrates how to sign XML using ARSS (Aruba Remote Signing Service).Note: This example requires Chilkat v9.5.0.96 or greater.
#include <CkStringBuilderW.h> #include <CkCertW.h> #include <CkJsonObjectW.h> #include <CkXmlDSigGenW.h> void ChilkatSample(void) { // This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // -------------------------------------------------------------------------------- // Also see Chilkat's Online WSDL Code Generator // to generate code and SOAP Request and Response XML for each operation in a WSDL. // -------------------------------------------------------------------------------- // Create the XML to be signed. CkStringBuilderW sbXml; bool bCrlf = true; sbXml.AppendLine(L"<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\" ?>",bCrlf); sbXml.AppendLine(L"<SOAP-ENV:Envelope xmlns:SOAP-ENV=\"http://schemas.xmlsoap.org/soap/envelope/\">",bCrlf); sbXml.AppendLine(L" <SOAP-ENV:Header>",bCrlf); sbXml.AppendLine(L" <wsse:Security xmlns:wsse=\"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd\" SOAP-ENV:mustUnderstand=\"1\"></wsse:Security>",bCrlf); sbXml.AppendLine(L" </SOAP-ENV:Header>",bCrlf); sbXml.AppendLine(L" <SOAP-ENV:Body xmlns:SOAP-SEC=\"http://schemas.xmlsoap.org/soap/security/2000-12\" SOAP-SEC:id=\"Body\">",bCrlf); sbXml.AppendLine(L" <z:FooBar xmlns:z=\"http://example.com\" />",bCrlf); sbXml.AppendLine(L" </SOAP-ENV:Body>",bCrlf); sbXml.AppendLine(L"</SOAP-ENV:Envelope>",bCrlf); // Specify the signing certificate and the ARSS credentials // Load the certificate used for signing. The certificate's private key is stored on // the Aruba.it server and the signing will happen remotely using the // ARSS (Aruba Remote Signing Service). // However, we still need the certificate locally (without private key). CkCertW cert; bool success = cert.LoadFromFile(L"qa_data/certs/myCert.cer"); if (success == false) { wprintf(L"%s\n",cert.lastErrorText()); return; } // To sign using the Aruba Remote Signing Service, // add the following lines of code to specify your authentication credentials, // and the ID of the certificate w/ private key on the server to be used. CkJsonObjectW jsonArss; // Set the "service" equal to "ARSS" to tell Chilkat to use ARSS for signing. jsonArss.UpdateString(L"service",L"ARSS"); // Specify the certificate ID, such as "AS0" // This certificate should match the certificate loaded in the above code. jsonArss.UpdateString(L"certID",L"YOUR_ARSS_CERT_ID"); jsonArss.UpdateString(L"otpPwd",L"YOUR_OTP_PWD"); jsonArss.UpdateString(L"typeOtpAuth",L"demoprod"); jsonArss.UpdateString(L"user",L"YOUR_ARSS_USERNAME"); jsonArss.UpdateString(L"userPWD",L"YOUR_ARSS_PASSWORD"); success = cert.SetCloudSigner(jsonArss); // Prepare for signing... CkXmlDSigGenW gen; // Indicate where the Signature will be inserted. gen.put_SigLocation(L"SOAP-ENV:Envelope|SOAP-ENV:Header|wsse:Security"); // Add a reference to the fragment of the XML to be signed. // Note: "Body" refers to the XML element having an "id" equal to "Body", where "id" is case insensitive // and where any namespace might qualify the attribute. In this case, the SOAP-ENV:Body fragment is signed // NOT because the tag = "Body", but because it has SOAP-SEC:id="Body" gen.AddSameDocRef(L"Body",L"sha1",L"EXCL_C14N",L"",L""); // (You can read about the SignedInfoPrefixList in the online reference documentation. It's optional..) gen.put_SignedInfoPrefixList(L"wsse SOAP-ENV"); gen.put_KeyInfoType(L"X509Data"); gen.put_X509Type(L"IssuerSerial"); bool bUsePrivateKey = true; success = gen.SetX509Cert(cert,bUsePrivateKey); if (success != true) { wprintf(L"%s\n",gen.lastErrorText()); delete cert; return; } // Everything's specified. Now create and insert the Signature // (The actual signing of the hash will happen on the Aruba server.) success = gen.CreateXmlDSigSb(sbXml); if (success != true) { wprintf(L"%s\n",gen.lastErrorText()); return; } // Examine the XML with the digital signature inserted wprintf(L"%s\n",sbXml.getAsString()); } |
© 2000-2025 Chilkat Software, Inc. All Rights Reserved.