Sample code for 30+ languages & platforms
Xbase++

Signed SOAP for www.sist.puglia.it/Schemas/PDD_SIST/SCATEL/ using BinarySecurityToken

See more XML Digital Signatures Examples

Creates a signed SOAP request for www.sist.puglia.it/Schemas/PDD_SIST/SCATEL/ using a BinarySecurityToken.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++
Xbase++ 
LOCAL nSuccess
LOCAL oXmlToSign
LOCAL oDtNow
LOCAL oGen
LOCAL oCert
LOCAL oXmlCustomKeyInfo
LOCAL oSbXml
LOCAL oBdCert
LOCAL oSbCert64
LOCAL nNReplaced
LOCAL oVerifier
LOCAL nNumSigs
LOCAL nVerifyIdx
LOCAL nVerified

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  Create the following pre-signed SOAP XML:
//  Note: We'll be constructing a placeholder for the wseBinarySecurityToken in the soapenv:Header.
//  Chilkat will automatically replace the "BinarySecurityToken_Base64Binary_Content" with actual data when signing the XML.

//  However: Your application should insert the actual desired timestamp values for wsu:Created and wsuExpires
//  Typically this is the current system date/time and a few minutes from the current system date/time.
//  The example below shows a 5 minute window.  We'll write code below to insert the current date/time and the current date/time + 5 minutes..

//  <?xml version="1.0" encoding="utf-8"?>
//  <soapenv:Envelope 
//    xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
//    xmlns:scat="www.sist.puglia.it/Schemas/PDD_SIST/SCATEL/"
//    xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
//    xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
//    xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
//    xmlns:exc14n="http://www.w3.org/2001/10/xml-exc-c14n#">
//      <soapenv:Header xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
//          <wsse:Security soapenv:mustUnderstand="1">
//              <wsse:BinarySecurityToken 
//                    ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"
//                    EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"
//                    wsu:Id="X509Token">BinarySecurityToken_Base64Binary_Content</wsse:BinarySecurityToken>
//              <wsu:Timestamp wsu:Id="_1">
//                  <wsu:Created>2020-03-20T18:08:19Z</wsu:Created>
//                  <wsu:Expires>2020-03-20T18:13:19Z</wsu:Expires>
//              </wsu:Timestamp>
//          </wsse:Security>
//          <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"/>
//      </soapenv:Header>
//      <soapenv:Body>
//          <scat:getRuoliStruttureOperatore>
//              <scat:codFiscaleOperatore>CLDxxxxxxxxxxxxL</scat:codFiscaleOperatore>
//          </scat:getRuoliStruttureOperatore>
//      </soapenv:Body>
//  </soapenv:Envelope>

nSuccess := 1
//  Create the XML to be signed...
oXmlToSign := CreateObject("Chilkat.Xml")
oXmlToSign:Tag := "soapenv:Envelope"
oXmlToSign:AddAttribute("xmlns:soapenv", "http://schemas.xmlsoap.org/soap/envelope/")
oXmlToSign:AddAttribute("xmlns:scat", "www.sist.puglia.it/Schemas/PDD_SIST/SCATEL/")
oXmlToSign:AddAttribute("xmlns:wsse", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd")
oXmlToSign:AddAttribute("xmlns:wsu", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd")
oXmlToSign:AddAttribute("xmlns:ds", "http://www.w3.org/2000/09/xmldsig#")
oXmlToSign:AddAttribute("xmlns:exc14n", "http://www.w3.org/2001/10/xml-exc-c14n#")
oXmlToSign:UpdateAttrAt("soapenv:Header", 1, "xmlns:wsu", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd")
oXmlToSign:UpdateAttrAt("soapenv:Header|wsse:Security", 1, "soapenv:mustUnderstand", "1")
oXmlToSign:UpdateAttrAt("soapenv:Header|wsse:Security|wsse:BinarySecurityToken", 1, "ValueType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3")
oXmlToSign:UpdateAttrAt("soapenv:Header|wsse:Security|wsse:BinarySecurityToken", 1, "EncodingType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary")
oXmlToSign:UpdateAttrAt("soapenv:Header|wsse:Security|wsse:BinarySecurityToken", 1, "wsu:Id", "X509Token")
oXmlToSign:UpdateChildContent("soapenv:Header|wsse:Security|wsse:BinarySecurityToken", "BinarySecurityToken_Base64Binary_Content")
oXmlToSign:UpdateAttrAt("soapenv:Header|wsse:Security|wsu:Timestamp", 1, "wsu:Id", "_1")

//  Insert a 5-minute timestampe window.
oDtNow := CreateObject("Chilkat.CkDateTime")
oDtNow:SetFromCurrentSystemTime()
oXmlToSign:UpdateChildContent("soapenv:Header|wsse:Security|wsu:Timestamp|wsu:Created", oDtNow:GetAsTimestamp(0))
//  Add 5 minutes to the time.
oDtNow:AddSeconds(300)
oXmlToSign:UpdateChildContent("soapenv:Header|wsse:Security|wsu:Timestamp|wsu:Expires", oDtNow:GetAsTimestamp(0))
oXmlToSign:UpdateAttrAt("soapenv:Header|wsse:Security[1]", 1, "xmlns:wsse", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd")
oXmlToSign:UpdateChildContent("soapenv:Body|scat:getRuoliStruttureOperatore|scat:codFiscaleOperatore", "CLDxxxxxxxxxxxxL")

? "XML to sign:"
? oXmlToSign:GetXml()

oGen := CreateObject("Chilkat.XmlDSigGen")

oGen:SigLocation := "soapenv:Envelope|soapenv:Header|wsse:Security"
oGen:SigLocationMod := 0
oGen:SigNamespacePrefix := "ds"
oGen:SigNamespaceUri := "http://www.w3.org/2000/09/xmldsig#"
oGen:SignedInfoCanonAlg := "EXCL_C14N"
oGen:SignedInfoDigestMethod := "sha1"

//  Set the KeyInfoId before adding references..
oGen:KeyInfoId := "X509KeyId"

//  -------- Reference 1 --------
oGen:AddSameDocRef("_1", "sha1", "EXCL_C14N", "", "")

//  Provide a certificate + private key. (PFX password is test123)
oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadPfxFile("qa_data/pfx/cert_test123.pfx", "test123")
IF (nSuccess != 1)
    ? oCert:LastErrorText
    oXmlToSign:destroy()
    oDtNow:destroy()
    oGen:destroy()
    oCert:destroy()
    RETURN
ENDIF

oGen:SetX509Cert(oCert, 1)

oGen:KeyInfoType := "Custom"

//  Create the custom KeyInfo XML..
oXmlCustomKeyInfo := CreateObject("Chilkat.Xml")
oXmlCustomKeyInfo:Tag := "wsse:SecurityTokenReference"
oXmlCustomKeyInfo:AddAttribute("wsu:Id", "X509TokenReference")
oXmlCustomKeyInfo:UpdateAttrAt("wsse:Reference", 1, "URI", "#X509Token")
oXmlCustomKeyInfo:UpdateAttrAt("wsse:Reference", 1, "ValueType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3")

oXmlCustomKeyInfo:EmitXmlDecl := 0
oGen:CustomKeyInfoXml := oXmlCustomKeyInfo:GetXml()

//  Load XML to be signed...
oSbXml := CreateObject("Chilkat.StringBuilder")
oXmlToSign:GetXmlSb(oSbXml)

//  Update BinarySecurityToken_Base64Binary_Content with the actual X509 of the signing cert.
oBdCert := CreateObject("Chilkat.BinData")
oCert:ExportCertDerBd(oBdCert)
oSbCert64 := CreateObject("Chilkat.StringBuilder")
oBdCert:GetEncodedSb("base64", oSbCert64)

nNReplaced := oSbXml:Replace("BinarySecurityToken_Base64Binary_Content", oSbCert64:GetAsString())

oGen:Behaviors := "IndentedSignature"

//  Sign the XML...
nSuccess := oGen:CreateXmlDSigSb(oSbXml)
IF (nSuccess != 1)
    ? oGen:LastErrorText
    oXmlToSign:destroy()
    oDtNow:destroy()
    oGen:destroy()
    oCert:destroy()
    oXmlCustomKeyInfo:destroy()
    oSbXml:destroy()
    oBdCert:destroy()
    oSbCert64:destroy()
    RETURN
ENDIF

//  -----------------------------------------------

//  Save the signed XML to a file.
nSuccess := oSbXml:WriteFile("qa_output/signedXml.xml", "utf-8", 0)

? oSbXml:GetAsString()

//  Produces the following signed XML:
//  Note: The following has been edited for readability.  Therefore, what you see here will not actually validate because it's been modified.

//  <?xml version="1.0" encoding="utf-8"?>
//  <soapenv:Envelope 
//    xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" 
//    xmlns:scat="www.sist.puglia.it/Schemas/PDD_SIST/SCATEL/" 
//    xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
//    xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
//    xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:exc14n="http://www.w3.org/2001/10/xml-exc-c14n#">
//      <soapenv:Header xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
//          <wsse:Security soapenv:mustUnderstand="1">
//              <wsse:BinarySecurityToken ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" wsu:Id="X509Token">MIIFNTCCBB2gAwIBAgIQHozVnBl1lTsusAh26u6WZTANBgkqhkiG9w0BAQsFADCB
//  lzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
//  A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNV
//  BAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg
//  RW1haWwgQ0EwHhcNMTcxMjE0MDAwMDAwWhcNMTgxMjE0MjM1OTU5WjAmMSQwIgYJ
//  KoZIhvcNAQkBFhVhc2Rhc2Rhc2Rhc2RkQGJ5b20uZGUwggEiMA0GCSqGSIb3DQEB
//  AQUAA4IBDwAwggEKAoIBAQC96oQe50EDoiuJVITeKJzy6GzVq74cEa14eFypjMNb
//  YVyedfCI6cn9pVClLqL7dlwxFGCRA62bbNE9woKLBT3SO1IvgoFDVIrbJm+84GEo
//  qQReZe8HpZnF06d3DWwhUjjcuO1z2yliGdSymSee8/1OaztxEAEOWaZR+4MkfSNc
//  AzzjGtKcKjVMSdiiO0JGAG/IXEwzlulfkF8zVdqDGkQTQesvT4WBys4BYwTDI64d
//  sM7rcC9vwuK6gvpkUi9i1Wzu0W4v9T3iHAbl3rLihPcjQ95c4q7+NjwpRqQW1VXR
//  enR/0iyLEFOek0D4JvOoscUwJ0LYd8f9SxFEWIzc4iAfAgMBAAGjggHrMIIB5zAf
//  BgNVHSMEGDAWgBSCr2yM+MX+lmF86B89K3FIXsSLwDAdBgNVHQ4EFgQUrC0DOyBB
//  AgOWgo2EfVZbppe3xfEwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwIAYD
//  VR0lBBkwFwYIKwYBBQUHAwQGCysGAQQBsjEBAwUCMBEGCWCGSAGG+EIBAQQEAwIF
//  IDBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEBATArMCkGCCsGAQUFBwIBFh1odHRw
//  czovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBaBgNVHR8EUzBRME+gTaBLhklodHRw
//  Oi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDbGllbnRBdXRoZW50aWNhdGlv
//  bmFuZFNlY3VyZUVtYWlsQ0EuY3JsMIGLBggrBgEFBQcBAQR/MH0wVQYIKwYBBQUH
//  MAKGSWh0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQUNsaWVudEF1dGhl
//  bnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6
//  Ly9vY3NwLmNvbW9kb2NhLmNvbTAgBgNVHREEGTAXgRVhc2Rhc2Rhc2Rhc2RkQGJ5
//  b20uZGUwDQYJKoZIhvcNAQELBQADggEBAHEQTr0WFcwHVk0xozn26P3s6i3RWEco
//  kNr8AdOtEvU0UYf1AfyVxUs04rS3Fs0lu2TD0840S3R687xF4HXhLYxSdD0QoZyU
//  S2mgxxyVxCqhwptmLn7ZQjUKEuK6Kv6wZ3/XugsBoNrMYWlYX8g2jWVDBCJ+Z0eT
//  QkaYkeSxzBSMQP3DxJS/bWh5LfwSyWYk4a3SVRJV4QVyBDXKt2uwjj1wWfxfGtiw
//  6uAd2F3YIymZKsRVdrU6+h0gXMnmtpX8T+SDV6M72PP2/ZzF6gVVItyyrIScK1J8
//  mcEaR5GGkLBk1s9qQM9esp3FRlACVeb1Qlytr4vgc5FlCqn0rMtjlF4=
//  </wsse:BinarySecurityToken>
//              <wsu:Timestamp wsu:Id="_1">
//                  <wsu:Created>2020-03-26T17:19:50Z</wsu:Created>
//                  <wsu:Expires>2020-03-26T17:24:50Z</wsu:Expires>
//              </wsu:Timestamp>
//          </wsse:Security>
//          <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
//    <ds:SignedInfo>
//      <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
//      <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
//      <ds:Reference URI="#_1">
//        <ds:Transforms>
//          <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
//        </ds:Transforms>
//        <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
//        <ds:DigestValue>cwrTw7wFZqNc50NxE//UT11qZCY=</ds:DigestValue>
//      </ds:Reference>
//    </ds:SignedInfo>
//    <ds:SignatureValue>s2UmYNVDz9dm3eU ... 619qSZqw==</ds:SignatureValue>
//    <ds:KeyInfo Id="X509KeyId"><wsse:SecurityTokenReference wsu:Id="X509TokenReference">
//      <wsse:Reference URI="#X509Token" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/>
//  </wsse:SecurityTokenReference>
//    </ds:KeyInfo>
//  </ds:Signature></wsse:Security>
//      </soapenv:Header>
//      <soapenv:Body>
//          <scat:getRuoliStruttureOperatore>
//              <scat:codFiscaleOperatore>CLDxxxxxxxxxxxxL</scat:codFiscaleOperatore>
//          </scat:getRuoliStruttureOperatore>
//      </soapenv:Body>
//  </soapenv:Envelope>

//  ----------------------------------------
//  Verify the signatures we just produced...
oVerifier := CreateObject("Chilkat.XmlDSig")
nSuccess := oVerifier:LoadSignatureSb(oSbXml)
IF (nSuccess != 1)
    ? oVerifier:LastErrorText
    oXmlToSign:destroy()
    oDtNow:destroy()
    oGen:destroy()
    oCert:destroy()
    oXmlCustomKeyInfo:destroy()
    oSbXml:destroy()
    oBdCert:destroy()
    oSbCert64:destroy()
    oVerifier:destroy()
    RETURN
ENDIF

nNumSigs := oVerifier:NumSignatures
nVerifyIdx := 0
DO WHILE nVerifyIdx < nNumSigs
    oVerifier:Selector := nVerifyIdx
    nVerified := oVerifier:VerifySignature(1)
    IF (nVerified != 1)
        ? oVerifier:LastErrorText
        oXmlToSign:destroy()
        oDtNow:destroy()
        oGen:destroy()
        oCert:destroy()
        oXmlCustomKeyInfo:destroy()
        oSbXml:destroy()
        oBdCert:destroy()
        oSbCert64:destroy()
        oVerifier:destroy()
        RETURN
    ENDIF

    nVerifyIdx := nVerifyIdx + 1
ENDDO
? "All signatures were successfully verified."

oXmlToSign:destroy()
oDtNow:destroy()
oGen:destroy()
oCert:destroy()
oXmlCustomKeyInfo:destroy()
oSbXml:destroy()
oBdCert:destroy()
oSbCert64:destroy()
oVerifier:destroy()