signer 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. data/LICENSE +22 -0
  2. data/README.md +201 -0
  3. data/lib/signer.rb +138 -0
  4. data/lib/signer/version.rb +3 -0
  5. data/spec/fixtures/cert.pem +17 -0
  6. data/spec/fixtures/input.xml +24 -0
  7. data/spec/fixtures/key.pem +18 -0
  8. data/spec/fixtures/output.xml +51 -0
  9. data/spec/signer_spec.rb +30 -0
  10. data/spec/spec_helper.rb +5 -0
  11. metadata +110 -0
data/LICENSE ADDED
@@ -0,0 +1,22 @@
1
+ Copyright (c) 2012 Edgars Beigarts
2
+
3
+ MIT License
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining
6
+ a copy of this software and associated documentation files (the
7
+ "Software"), to deal in the Software without restriction, including
8
+ without limitation the rights to use, copy, modify, merge, publish,
9
+ distribute, sublicense, and/or sell copies of the Software, and to
10
+ permit persons to whom the Software is furnished to do so, subject to
11
+ the following conditions:
12
+
13
+ The above copyright notice and this permission notice shall be
14
+ included in all copies or substantial portions of the Software.
15
+
16
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
17
+ EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
18
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
19
+ NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
20
+ LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
21
+ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
22
+ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
data/README.md ADDED
@@ -0,0 +1,201 @@
1
+ # Signer
2
+
3
+ [![Continuous Integration status](https://secure.travis-ci.org/ebeigarts/signer.png)](http://travis-ci.org/ebeigarts/signer)
4
+
5
+ WS Security XML Certificate signing for Ruby
6
+
7
+ ## Installation
8
+
9
+ ```bash
10
+ gem install signer
11
+ ```
12
+
13
+ ## Usage
14
+
15
+ ```ruby
16
+ require "signer"
17
+
18
+ signer = Signer.new(File.read("example.xml"))
19
+ signer.cert = OpenSSL::X509::Certificate.new(File.read("cert.pem"))
20
+ signer.private_key = OpenSSL::PKey::RSA.new(File.read("key.pem"), "password")
21
+
22
+ signer.document.xpath("//u:Timestamp", { "u" => "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" }).each do |node|
23
+ signer.digest!(node)
24
+ end
25
+
26
+ signer.document.xpath("//a:To", { "a" => "http://www.w3.org/2005/08/addressing" }).each do |node|
27
+ signer.digest!(node)
28
+ end
29
+
30
+ signer.sign!
31
+
32
+ signer.to_xml
33
+ ```
34
+
35
+ ## Usage with Savon
36
+
37
+ ```ruby
38
+ client = Savon::Client.new do |wsdl, http|
39
+ wsdl.document = "..."
40
+ wsdl.endpoint = "..."
41
+ end
42
+
43
+ response = client.request(:search_documents) do
44
+ soap.version = 2
45
+ soap.xml do
46
+ builder = Nokogiri::XML::Builder.new do |xml|
47
+ xml.send("s:Envelope",
48
+ "xmlns:s" => "http://www.w3.org/2003/05/soap-envelope",
49
+ "xmlns:a" => "http://www.w3.org/2005/08/addressing",
50
+ "xmlns:u" => "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
51
+ ) do
52
+ xml.send("s:Header") do
53
+ xml.send("a:Action", "s:mustUnderstand" => "1") do
54
+ xml.text "http://tempuri.org/IDocumentService/SearchDocuments"
55
+ end
56
+ xml.send("a:MessageID") do
57
+ xml.text "urn:uuid:30db5d4f-ab84-46be-907c-be690a92979b"
58
+ end
59
+ xml.send("a:ReplyTo") do
60
+ xml.send("a:Address") do
61
+ xml.text "http://www.w3.org/2005/08/addressing/anonymous"
62
+ end
63
+ end
64
+ xml.send("a:To", "a:mustUnderstand" => "1") do
65
+ xml.text "..."
66
+ end
67
+ xml.send("o:Security",
68
+ "xmlns:o" => "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd",
69
+ "s:mustUnderstand" => "1"
70
+ ) do
71
+ xml.send("u:Timestamp") do
72
+ time = Time.now.utc
73
+ xml.send("u:Created") do
74
+ xml.text(time.xmlschema)
75
+ end
76
+ xml.send("u:Expires") do
77
+ xml.text((time + 5.minutes).xmlschema)
78
+ end
79
+ end
80
+ end
81
+ end
82
+ xml.send("s:Body") do
83
+ xml.send("SearchDocuments", "xmlns" => "http://tempuri.org/") do
84
+ xml.send("searchCriteria",
85
+ "xmlns:b" => "http://schemas.datacontract.org/2004/07/ZMDVS.BusinessLogic.Data.Documents.Integration",
86
+ "xmlns:i" => "http://www.w3.org/2001/XMLSchema-instance"
87
+ ) do
88
+ xml.send("b:RegistrationNo") do
89
+ xml.text "1"
90
+ end
91
+ end
92
+ end
93
+ end
94
+ end
95
+ end
96
+
97
+ signer = Signer.new(builder.to_xml)
98
+ signer.cert = OpenSSL::X509::Certificate.new(File.read("cert.pem"))
99
+ signer.private_key = OpenSSL::PKey::RSA.new(File.read("key.pem"), "test")
100
+
101
+ signer.document.xpath("//u:Timestamp", { "u" => "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" }).each do |node|
102
+ signer.digest!(node)
103
+ end
104
+
105
+ signer.document.xpath("//a:To", { "a" => "http://www.w3.org/2005/08/addressing" }).each do |node|
106
+ signer.digest!(node)
107
+ end
108
+
109
+ signer.sign!
110
+
111
+ signer.to_xml
112
+ end
113
+ end
114
+ ```
115
+
116
+ ## Example
117
+
118
+ Input:
119
+
120
+ ```xml
121
+ <?xml version="1.0"?>
122
+ <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
123
+ <s:Header>
124
+ <a:Action s:mustUnderstand="1">http://tempuri.org/IDocumentService/SearchDocuments</a:Action>
125
+ <a:MessageID>urn:uuid:30db5d4f-ab84-46be-907c-be690a92979b</a:MessageID>
126
+ <a:ReplyTo>
127
+ <a:Address>http://www.w3.org/2005/08/addressing/anonymous</a:Address>
128
+ </a:ReplyTo>
129
+ <To xmlns="http://www.w3.org/2005/08/addressing" xmlns:a="http://www.w3.org/2003/05/soap-envelope" a:mustUnderstand="1">http://tempuri.org/PublicServices/Test/1.0.12/PublicServices/DocumentService.svc</To>
130
+ <o:Security xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" s:mustUnderstand="1">
131
+ <u:Timestamp>
132
+ <u:Created>2012-05-02T18:17:14.467Z</u:Created>
133
+ <u:Expires>2012-05-02T18:22:14.467Z</u:Expires>
134
+ </u:Timestamp>
135
+ </o:Security>
136
+ </s:Header>
137
+ <s:Body>
138
+ <SearchDocuments xmlns="http://tempuri.org/">
139
+ <searchCriteria xmlns:b="http://schemas.datacontract.org/2004/07/BusinessLogic.Data.Documents.Integration" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
140
+ <b:RegistrationNo>1</b:RegistrationNo>
141
+ </searchCriteria>
142
+ </SearchDocuments>
143
+ </s:Body>
144
+ </s:Envelope>
145
+ ```
146
+
147
+ Output:
148
+
149
+ ```xml
150
+ <?xml version="1.0"?>
151
+ <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
152
+ <s:Header>
153
+ <a:Action s:mustUnderstand="1">http://tempuri.org/IDocumentService/SearchDocuments</a:Action>
154
+ <a:MessageID>urn:uuid:30db5d4f-ab84-46be-907c-be690a92979b</a:MessageID>
155
+ <a:ReplyTo>
156
+ <a:Address>http://www.w3.org/2005/08/addressing/anonymous</a:Address>
157
+ </a:ReplyTo>
158
+ <To xmlns="http://www.w3.org/2005/08/addressing" xmlns:a="http://www.w3.org/2003/05/soap-envelope" a:mustUnderstand="1" u:Id="_7e75a8ded22253b163ca76a40b6cc0c670ed0c33">http://tempuri.org/PublicServices/Test/1.0.12/PublicServices/DocumentService.svc</To>
159
+ <o:Security xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" s:mustUnderstand="1">
160
+ <u:Timestamp u:Id="_23dd13bb673d95ac7c29f0bebcca8268d39675b1">
161
+ <u:Created>2012-05-02T18:17:14.467Z</u:Created>
162
+ <u:Expires>2012-05-02T18:22:14.467Z</u:Expires>
163
+ </u:Timestamp>
164
+ <o:BinarySecurityToken u:Id="uuid-639b8970-7644-4f9e-9bc4-9c2e367808fc-1" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">MIICsDCCAhmgAwIBAgIJAOUHvh4oho0tMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNVBAYTAkFVMRMwEQYDVQQIEwpTb21lLVN0YXRlMSEwHwYDVQQKExhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwHhcNMTIwNTAzMTMxODIyWhcNMTMwNTAzMTMxODIyWjBFMQswCQYDVQQGEwJBVTETMBEGA1UECBMKU29tZS1TdGF0ZTEhMB8GA1UEChMYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvK5hMPv/R5IFmwWyJOyEaFUrF/ZsmN+Gip8hvR6rLP3YPNx9iFYvPcZllFmuVwyaz7YT2N5BsqTwLdyi5v4HY4fUtuz0p8jIPoSd6dfDvcnSpf4QLTOgOaL3ciPEbgDHH2tnIksukoWzqCYva+qFZ74NFl19swXotW9fA4Jzs4QIDAQABo4GnMIGkMB0GA1UdDgQWBBRU1WEHDnP8Hr7ZulxrSzEwOcYpMzB1BgNVHSMEbjBsgBRU1WEHDnP8Hr7ZulxrSzEwOcYpM6FJpEcwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgTClNvbWUtU3RhdGUxITAfBgNVBAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZIIJAOUHvh4oho0tMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEASY/9SAOK57q9mGnNJJeyDbmyGrAHSJTod646xTHYkMvhUqwHyk9PTr5bdfmswpmyVn+AQ43U2tU5vnpTBmKpHWD2+HSHgGa92mMLrfBOd8EBZ329NL3N2HDPIaHr4NPGyhNrSK3QVOnAq2D0jlyrGYJlLli1NxHiBz7FCEJaVI8=</o:BinarySecurityToken>
165
+ <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
166
+ <SignedInfo>
167
+ <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
168
+ <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
169
+ <Reference URI="#_23dd13bb673d95ac7c29f0bebcca8268d39675b1">
170
+ <Transforms>
171
+ <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
172
+ </Transforms>
173
+ <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
174
+ <DigestValue>Oz29YgZk14+nchoqv9zGzhJcDUo=</DigestValue>
175
+ </Reference>
176
+ <Reference URI="#_7e75a8ded22253b163ca76a40b6cc0c670ed0c33">
177
+ <Transforms>
178
+ <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
179
+ </Transforms>
180
+ <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
181
+ <DigestValue>leV/RNYhwuCuD7/DBzn3IgQzUxI=</DigestValue>
182
+ </Reference>
183
+ </SignedInfo>
184
+ <SignatureValue>en7YYAIn90ofH08aF917jNngMuse+vK6bihF0v6UsXFnGGMOflWfRTZ6mFmC2HwLmb2lSrhZ3eth3cs2fCBlEr/K2ZDMQfJo6CPxmbzfX/fxR/isCTDz+HIJd13J0HK4n+CzkndwplkCmT8SQlduUruUFUUmlQiiZQ7nryR+XyM=</SignatureValue>
185
+ <KeyInfo>
186
+ <o:SecurityTokenReference>
187
+ <o:Reference ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" URI="#uuid-639b8970-7644-4f9e-9bc4-9c2e367808fc-1"/>
188
+ </o:SecurityTokenReference>
189
+ </KeyInfo>
190
+ </Signature>
191
+ </o:Security>
192
+ </s:Header>
193
+ <s:Body>
194
+ <SearchDocuments xmlns="http://tempuri.org/">
195
+ <searchCriteria xmlns:b="http://schemas.datacontract.org/2004/07/BusinessLogic.Data.Documents.Integration" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
196
+ <b:RegistrationNo>1</b:RegistrationNo>
197
+ </searchCriteria>
198
+ </SearchDocuments>
199
+ </s:Body>
200
+ </s:Envelope>
201
+ ```
data/lib/signer.rb ADDED
@@ -0,0 +1,138 @@
1
+ require "nokogiri"
2
+ require "base64"
3
+ require "digest/sha1"
4
+ require "openssl"
5
+
6
+ require "signer/version"
7
+
8
+ class Signer
9
+ attr_accessor :document, :cert, :private_key
10
+
11
+ def initialize(document)
12
+ self.document = Nokogiri::XML(document.to_s, &:noblanks)
13
+ end
14
+
15
+ def to_xml
16
+ document.to_xml(:save_with => 0)
17
+ end
18
+
19
+ def security_token_id
20
+ "uuid-639b8970-7644-4f9e-9bc4-9c2e367808fc-1"
21
+ end
22
+
23
+ def security_node
24
+ document.xpath("//o:Security", "o" => "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd").first
25
+ end
26
+
27
+ # <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
28
+ def signature_node
29
+ node = document.xpath("//ds:Signature", "ds" => "http://www.w3.org/2000/09/xmldsig#").first
30
+ unless node
31
+ node = Nokogiri::XML::Node.new('Signature', document)
32
+ node.default_namespace = 'http://www.w3.org/2000/09/xmldsig#'
33
+ security_node.add_child(node)
34
+ end
35
+ node
36
+ end
37
+
38
+ # <SignedInfo>
39
+ # <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
40
+ # <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
41
+ # ...
42
+ # </SignedInfo>
43
+ def signed_info_node
44
+ node = signature_node.xpath("//ds:SignedInfo", "ds" => 'http://www.w3.org/2000/09/xmldsig#').first
45
+ unless node
46
+ node = Nokogiri::XML::Node.new('SignedInfo', document)
47
+ signature_node.add_child(node)
48
+ canonicalization_method_node = Nokogiri::XML::Node.new('CanonicalizationMethod', document)
49
+ canonicalization_method_node['Algorithm'] = 'http://www.w3.org/2001/10/xml-exc-c14n#'
50
+ node.add_child(canonicalization_method_node)
51
+ signature_method_node = Nokogiri::XML::Node.new('SignatureMethod', document)
52
+ signature_method_node['Algorithm'] = 'http://www.w3.org/2000/09/xmldsig#rsa-sha1'
53
+ node.add_child(signature_method_node)
54
+ end
55
+ node
56
+ end
57
+
58
+ # <o:BinarySecurityToken u:Id="" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">
59
+ # ...
60
+ # </o:BinarySecurityToken>
61
+ # <SignedInfo>
62
+ # ...
63
+ # </SignedInfo>
64
+ # <KeyInfo>
65
+ # <o:SecurityTokenReference>
66
+ # <o:Reference ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" URI="#uuid-639b8970-7644-4f9e-9bc4-9c2e367808fc-1"/>
67
+ # </o:SecurityTokenReference>
68
+ # </KeyInfo>
69
+ def binary_security_token_node
70
+ node = document.xpath("//o:BinarySecurityToken", "o" => "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd").first
71
+ unless node
72
+ node = Nokogiri::XML::Node.new('BinarySecurityToken', document)
73
+ node['u:Id'] = security_token_id
74
+ node['ValueType'] = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3'
75
+ node['EncodingType'] = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary'
76
+ node.content = Base64.encode64(cert.to_der).gsub("\n", '')
77
+ security_node.add_child(node)
78
+ key_info_node = Nokogiri::XML::Node.new('KeyInfo', document)
79
+ security_token_reference_node = Nokogiri::XML::Node.new('o:SecurityTokenReference', document)
80
+ key_info_node.add_child(security_token_reference_node)
81
+ reference_node = Nokogiri::XML::Node.new('o:Reference', document)
82
+ reference_node['ValueType'] = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3'
83
+ reference_node['URI'] = "##{security_token_id}"
84
+ security_token_reference_node.add_child(reference_node)
85
+ signed_info_node.add_next_sibling(key_info_node)
86
+ end
87
+ node
88
+ end
89
+
90
+ # <Reference URI="#_0">
91
+ # <Transforms>
92
+ # <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
93
+ # </Transforms>
94
+ # <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
95
+ # <DigestValue>aeqXriJuUCk4tPNPAGDXGqHj6ao=</DigestValue>
96
+ # </Reference>
97
+ def digest!(target_node)
98
+ binary_security_token_node
99
+
100
+ id = "_#{Digest::SHA1.hexdigest(target_node.to_s)}"
101
+ target_node['u:Id'] = id
102
+
103
+ reference_node = Nokogiri::XML::Node.new('Reference', document)
104
+ reference_node['URI'] = "##{id}"
105
+ signed_info_node.add_child(reference_node)
106
+
107
+ transforms_node = Nokogiri::XML::Node.new('Transforms', document)
108
+ reference_node.add_child(transforms_node)
109
+
110
+ transform_node = Nokogiri::XML::Node.new('Transform', document)
111
+ transform_node['Algorithm'] = 'http://www.w3.org/2001/10/xml-exc-c14n#'
112
+ transforms_node.add_child(transform_node)
113
+
114
+ digest_method_node = Nokogiri::XML::Node.new('DigestMethod', document)
115
+ digest_method_node['Algorithm'] = 'http://www.w3.org/2000/09/xmldsig#sha1'
116
+ reference_node.add_child(digest_method_node)
117
+
118
+ digest_value_node = Nokogiri::XML::Node.new('DigestValue', document)
119
+ target_canon = target_node.canonicalize(Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0)
120
+ target_digest = Base64.encode64(OpenSSL::Digest::SHA1.digest(target_canon)).strip
121
+ digest_value_node.content = target_digest
122
+ reference_node.add_child(digest_value_node)
123
+ self
124
+ end
125
+
126
+ # <SignatureValue>...</SignatureValue>
127
+ def sign!
128
+ signed_info_canon = signed_info_node.canonicalize(Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0)
129
+
130
+ signature = private_key.sign(OpenSSL::Digest::SHA1.new, signed_info_canon)
131
+ signature_value_digest = Base64.encode64(signature).gsub("\n", '')
132
+
133
+ signature_value_node = Nokogiri::XML::Node.new('SignatureValue', document)
134
+ signature_value_node.content = signature_value_digest
135
+ signed_info_node.add_next_sibling(signature_value_node)
136
+ self
137
+ end
138
+ end
data/lib/signer/version.rb ADDED
@@ -0,0 +1,3 @@
1
+ class Signer
2
+ VERSION = "1.0.0"
3
+ end
data/spec/fixtures/cert.pem ADDED
@@ -0,0 +1,17 @@
1
+ -----BEGIN CERTIFICATE-----
2
+ MIICsDCCAhmgAwIBAgIJAOUHvh4oho0tMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
3
+ BAYTAkFVMRMwEQYDVQQIEwpTb21lLVN0YXRlMSEwHwYDVQQKExhJbnRlcm5ldCBX
4
+ aWRnaXRzIFB0eSBMdGQwHhcNMTIwNTAzMTMxODIyWhcNMTMwNTAzMTMxODIyWjBF
5
+ MQswCQYDVQQGEwJBVTETMBEGA1UECBMKU29tZS1TdGF0ZTEhMB8GA1UEChMYSW50
6
+ ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
7
+ gQCvK5hMPv/R5IFmwWyJOyEaFUrF/ZsmN+Gip8hvR6rLP3YPNx9iFYvPcZllFmuV
8
+ wyaz7YT2N5BsqTwLdyi5v4HY4fUtuz0p8jIPoSd6dfDvcnSpf4QLTOgOaL3ciPEb
9
+ gDHH2tnIksukoWzqCYva+qFZ74NFl19swXotW9fA4Jzs4QIDAQABo4GnMIGkMB0G
10
+ A1UdDgQWBBRU1WEHDnP8Hr7ZulxrSzEwOcYpMzB1BgNVHSMEbjBsgBRU1WEHDnP8
11
+ Hr7ZulxrSzEwOcYpM6FJpEcwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgTClNvbWUt
12
+ U3RhdGUxITAfBgNVBAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZIIJAOUHvh4o
13
+ ho0tMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEASY/9SAOK57q9mGnN
14
+ JJeyDbmyGrAHSJTod646xTHYkMvhUqwHyk9PTr5bdfmswpmyVn+AQ43U2tU5vnpT
15
+ BmKpHWD2+HSHgGa92mMLrfBOd8EBZ329NL3N2HDPIaHr4NPGyhNrSK3QVOnAq2D0
16
+ jlyrGYJlLli1NxHiBz7FCEJaVI8=
17
+ -----END CERTIFICATE-----
data/spec/fixtures/input.xml ADDED
@@ -0,0 +1,24 @@
1
+ <?xml version="1.0"?>
2
+ <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
3
+ <s:Header>
4
+ <a:Action s:mustUnderstand="1">http://tempuri.org/IDocumentService/SearchDocuments</a:Action>
5
+ <a:MessageID>urn:uuid:30db5d4f-ab84-46be-907c-be690a92979b</a:MessageID>
6
+ <a:ReplyTo>
7
+ <a:Address>http://www.w3.org/2005/08/addressing/anonymous</a:Address>
8
+ </a:ReplyTo>
9
+ <To xmlns="http://www.w3.org/2005/08/addressing" xmlns:a="http://www.w3.org/2003/05/soap-envelope" a:mustUnderstand="1">http://tempuri.org/PublicServices/Test/1.0.12/PublicServices/DocumentService.svc</To>
10
+ <o:Security xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" s:mustUnderstand="1">
11
+ <u:Timestamp>
12
+ <u:Created>2012-05-02T18:17:14.467Z</u:Created>
13
+ <u:Expires>2012-05-02T18:22:14.467Z</u:Expires>
14
+ </u:Timestamp>
15
+ </o:Security>
16
+ </s:Header>
17
+ <s:Body>
18
+ <SearchDocuments xmlns="http://tempuri.org/">
19
+ <searchCriteria xmlns:b="http://schemas.datacontract.org/2004/07/BusinessLogic.Data.Documents.Integration" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
20
+ <b:RegistrationNo>1</b:RegistrationNo>
21
+ </searchCriteria>
22
+ </SearchDocuments>
23
+ </s:Body>
24
+ </s:Envelope>
data/spec/fixtures/key.pem ADDED
@@ -0,0 +1,18 @@
1
+ -----BEGIN RSA PRIVATE KEY-----
2
+ Proc-Type: 4,ENCRYPTED
3
+ DEK-Info: DES-EDE3-CBC,D53BEDA3FEA82258
4
+
5
+ a9x4N5JZ6qwza28OAEBWyS4s4GysgbiJf11wX2e1Ol/rHt9/PGvZCK9PSyW/haRn
6
+ l5iT95n8Ohyr16Ngx/p02Jq3TEbs/Jsxz7+z55R5E3LvGKGZIB8Yh8dvI4ArzPsK
7
+ QiwoegJnSWdTQnfybbbpv+11RrKtb1/H0/i9fIHDJUhch9HwNn/yZGs9uYRxVBGe
8
+ OFLAdnCB+JG5Q5p24aWeYEWQLbYB69uc9kiV60qgfp4ZxRgdeU55eLZe48d9clG7
9
+ 8vFAjM3+Q5WcgAgthKgD2HbjgcQ11WIZyHsshRvdWukk7iir7ogbOR/20sIWc+mY
10
+ hVdWfctYfWuheq7qwAfbvc8gSpgBRMziSI+5dFF4Ge80ahy7sxdlWJ4zNrqzTEIf
11
+ 5CyN2cC6h8fbJ95bifJFUIKDi+rpkmFtnW4eh11BOL6vYlSFaL35Kw2teRmFCk6M
12
+ iBmIStavcfVj61ZClla3Xso5gl8Ei8EGBSuSSLT1Uq3WJ6eLh5JWkpV3+mir1HWO
13
+ vNIl6L4zm2kngwL73NFeG7ZFMTv2yAuif3Hpr3akZudp/+qDcIcnqnmY47HsOtOb
14
+ ArLwBalIu4zsKF5IzqGiZ6tbMgRHDbLw/HAuuYHlJF5TeMDqnQFGi09LpO6IHPBh
15
+ ZqVKuZ1LVLgCRpvkW12z0sxfByFHKK6RvgPgR9tPdVmCBJLwCbLa7AqNDVrJNe6q
16
+ OEwp95+7OTx1b7jVXiZ3wO0XpPWKAMXWAEGDd9YeNVdfXPgypSe4p/wJgtoCiPtz
17
+ Mm0NNYkrl2J/brj2jd5WRk6D2BWxf6pQKULzovTCX04pNxfLBBXBlQ==
18
+ -----END RSA PRIVATE KEY-----
data/spec/fixtures/output.xml ADDED
@@ -0,0 +1,51 @@
1
+ <?xml version="1.0"?>
2
+ <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
3
+ <s:Header>
4
+ <a:Action s:mustUnderstand="1">http://tempuri.org/IDocumentService/SearchDocuments</a:Action>
5
+ <a:MessageID>urn:uuid:30db5d4f-ab84-46be-907c-be690a92979b</a:MessageID>
6
+ <a:ReplyTo>
7
+ <a:Address>http://www.w3.org/2005/08/addressing/anonymous</a:Address>
8
+ </a:ReplyTo>
9
+ <To xmlns="http://www.w3.org/2005/08/addressing" xmlns:a="http://www.w3.org/2003/05/soap-envelope" a:mustUnderstand="1" u:Id="_7e75a8ded22253b163ca76a40b6cc0c670ed0c33">http://tempuri.org/PublicServices/Test/1.0.12/PublicServices/DocumentService.svc</To>
10
+ <o:Security xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" s:mustUnderstand="1">
11
+ <u:Timestamp u:Id="_23dd13bb673d95ac7c29f0bebcca8268d39675b1">
12
+ <u:Created>2012-05-02T18:17:14.467Z</u:Created>
13
+ <u:Expires>2012-05-02T18:22:14.467Z</u:Expires>
14
+ </u:Timestamp>
15
+ <o:BinarySecurityToken u:Id="uuid-639b8970-7644-4f9e-9bc4-9c2e367808fc-1" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">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</o:BinarySecurityToken>
16
+ <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
17
+ <SignedInfo>
18
+ <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
19
+ <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
20
+ <Reference URI="#_23dd13bb673d95ac7c29f0bebcca8268d39675b1">
21
+ <Transforms>
22
+ <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
23
+ </Transforms>
24
+ <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
25
+ <DigestValue>Oz29YgZk14+nchoqv9zGzhJcDUo=</DigestValue>
26
+ </Reference>
27
+ <Reference URI="#_7e75a8ded22253b163ca76a40b6cc0c670ed0c33">
28
+ <Transforms>
29
+ <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
30
+ </Transforms>
31
+ <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
32
+ <DigestValue>leV/RNYhwuCuD7/DBzn3IgQzUxI=</DigestValue>
33
+ </Reference>
34
+ </SignedInfo>
35
+ <SignatureValue>en7YYAIn90ofH08aF917jNngMuse+vK6bihF0v6UsXFnGGMOflWfRTZ6mFmC2HwLmb2lSrhZ3eth3cs2fCBlEr/K2ZDMQfJo6CPxmbzfX/fxR/isCTDz+HIJd13J0HK4n+CzkndwplkCmT8SQlduUruUFUUmlQiiZQ7nryR+XyM=</SignatureValue>
36
+ <KeyInfo>
37
+ <o:SecurityTokenReference>
38
+ <o:Reference ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" URI="#uuid-639b8970-7644-4f9e-9bc4-9c2e367808fc-1"/>
39
+ </o:SecurityTokenReference>
40
+ </KeyInfo>
41
+ </Signature>
42
+ </o:Security>
43
+ </s:Header>
44
+ <s:Body>
45
+ <SearchDocuments xmlns="http://tempuri.org/">
46
+ <searchCriteria xmlns:b="http://schemas.datacontract.org/2004/07/BusinessLogic.Data.Documents.Integration" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
47
+ <b:RegistrationNo>1</b:RegistrationNo>
48
+ </searchCriteria>
49
+ </SearchDocuments>
50
+ </s:Body>
51
+ </s:Envelope>
data/spec/signer_spec.rb ADDED
@@ -0,0 +1,30 @@
1
+ require "spec_helper"
2
+
3
+ describe Signer do
4
+ it "should digest and sign the XML" do
5
+ input_xml_file = File.join(File.dirname(__FILE__), 'fixtures', 'input.xml')
6
+ cert_file = File.join(File.dirname(__FILE__), 'fixtures', 'cert.pem')
7
+ private_key_file = File.join(File.dirname(__FILE__), 'fixtures', 'key.pem')
8
+
9
+ signer = Signer.new(File.read(input_xml_file))
10
+ signer.cert = OpenSSL::X509::Certificate.new(File.read(cert_file))
11
+ signer.private_key = OpenSSL::PKey::RSA.new(File.read(private_key_file), "test")
12
+
13
+ signer.document.xpath("//u:Timestamp", { "u" => "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" }).each do |node|
14
+ signer.digest!(node)
15
+ end
16
+
17
+ signer.document.xpath("//a:To", { "a" => "http://www.w3.org/2005/08/addressing" }).each do |node|
18
+ signer.digest!(node)
19
+ end
20
+
21
+ signer.sign!
22
+
23
+ # File.open(File.join(File.dirname(__FILE__), 'fixtures', 'output.xml'), "w") do |f|
24
+ # f.write signer.document.to_s
25
+ # end
26
+ output_xml_file = File.join(File.dirname(__FILE__), 'fixtures', 'output.xml')
27
+
28
+ signer.to_xml.should == Nokogiri::XML(File.read(output_xml_file), &:noblanks).to_xml(:save_with => 0)
29
+ end
30
+ end
data/spec/spec_helper.rb ADDED
@@ -0,0 +1,5 @@
1
+ $:.unshift File.dirname(__FILE__) + '/../lib'
2
+
3
+ require "rubygems"
4
+ require "bundler/setup"
5
+ require "signer"
metadata ADDED
@@ -0,0 +1,110 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: signer
3
+ version: !ruby/object:Gem::Version
4
+ version: 1.0.0
5
+ prerelease:
6
+ platform: ruby
7
+ authors:
8
+ - Edgars Beigarts
9
+ autorequire:
10
+ bindir: bin
11
+ cert_chain: []
12
+ date: 2012-05-03 00:00:00.000000000 Z
13
+ dependencies:
14
+ - !ruby/object:Gem::Dependency
15
+ name: rake
16
+ requirement: !ruby/object:Gem::Requirement
17
+ none: false
18
+ requirements:
19
+ - - ! '>='
20
+ - !ruby/object:Gem::Version
21
+ version: '0'
22
+ type: :development
23
+ prerelease: false
24
+ version_requirements: !ruby/object:Gem::Requirement
25
+ none: false
26
+ requirements:
27
+ - - ! '>='
28
+ - !ruby/object:Gem::Version
29
+ version: '0'
30
+ - !ruby/object:Gem::Dependency
31
+ name: rspec
32
+ requirement: !ruby/object:Gem::Requirement
33
+ none: false
34
+ requirements:
35
+ - - ! '>='
36
+ - !ruby/object:Gem::Version
37
+ version: '0'
38
+ type: :development
39
+ prerelease: false
40
+ version_requirements: !ruby/object:Gem::Requirement
41
+ none: false
42
+ requirements:
43
+ - - ! '>='
44
+ - !ruby/object:Gem::Version
45
+ version: '0'
46
+ - !ruby/object:Gem::Dependency
47
+ name: nokogiri
48
+ requirement: !ruby/object:Gem::Requirement
49
+ none: false
50
+ requirements:
51
+ - - ! '>='
52
+ - !ruby/object:Gem::Version
53
+ version: 1.5.1
54
+ type: :runtime
55
+ prerelease: false
56
+ version_requirements: !ruby/object:Gem::Requirement
57
+ none: false
58
+ requirements:
59
+ - - ! '>='
60
+ - !ruby/object:Gem::Version
61
+ version: 1.5.1
62
+ description: WS Security XML signer
63
+ email:
64
+ - edgars.beigarts@gmail.com
65
+ executables: []
66
+ extensions: []
67
+ extra_rdoc_files: []
68
+ files:
69
+ - lib/signer/version.rb
70
+ - lib/signer.rb
71
+ - README.md
72
+ - LICENSE
73
+ - spec/fixtures/cert.pem
74
+ - spec/fixtures/input.xml
75
+ - spec/fixtures/key.pem
76
+ - spec/fixtures/output.xml
77
+ - spec/signer_spec.rb
78
+ - spec/spec_helper.rb
79
+ homepage: ''
80
+ licenses: []
81
+ post_install_message:
82
+ rdoc_options: []
83
+ require_paths:
84
+ - lib
85
+ required_ruby_version: !ruby/object:Gem::Requirement
86
+ none: false
87
+ requirements:
88
+ - - ! '>='
89
+ - !ruby/object:Gem::Version
90
+ version: '0'
91
+ required_rubygems_version: !ruby/object:Gem::Requirement
92
+ none: false
93
+ requirements:
94
+ - - ! '>='
95
+ - !ruby/object:Gem::Version
96
+ version: '0'
97
+ requirements: []
98
+ rubyforge_project:
99
+ rubygems_version: 1.8.21
100
+ signing_key:
101
+ specification_version: 3
102
+ summary: WS Security XML signer
103
+ test_files:
104
+ - spec/fixtures/cert.pem
105
+ - spec/fixtures/input.xml
106
+ - spec/fixtures/key.pem
107
+ - spec/fixtures/output.xml
108
+ - spec/signer_spec.rb
109
+ - spec/spec_helper.rb
110
+ has_rdoc: