|
1
55
56 package samples.security;
57
58 import org.apache.axis.Constants;
59 import org.apache.axis.Message;
60 import org.apache.axis.MessageContext;
61 import org.apache.axis.client.AxisClient;
62 import org.apache.axis.configuration.NullProvider;
63 import org.apache.axis.encoding.SerializationContext;
64 import org.apache.axis.encoding.SerializationContext;
65 import org.apache.axis.encoding.DeserializationContext;
66 import org.apache.axis.message.SOAPEnvelope;
67 import org.apache.axis.message.SOAPHeaderElement;
68 import org.apache.axis.utils.Mapping;
69 import org.apache.axis.utils.Messages;
70 import org.apache.axis.utils.XMLUtils;
71 import org.apache.xml.security.c14n.Canonicalizer;
72 import org.apache.xml.security.signature.XMLSignature;
73 import org.w3c.dom.Document  ;
74 import org.w3c.dom.Element ;
75 import org.xml.sax.InputSource ;
76
77 import java.io.FileInputStream ;
78 import java.io.Reader ;
79 import java.io.StringReader ;
80 import java.io.StringWriter ;
81 import java.security.KeyStore ;
82 import java.security.PrivateKey ;
83 import java.security.cert.X509Certificate ;
84
85
86 public class SignedSOAPEnvelope extends SOAPEnvelope {
87 static String SOAPSECNS = "http://schemas.xmlsoap.org/soap/security/2000-12";
88 static String SOAPSECprefix = "SOAP-SEC";
89
90 static String keystoreType = "JKS";
91 static String keystoreFile = "keystore.jks";
92 static String keystorePass = "xmlsecurity";
93 static String privateKeyAlias = "test";
94 static String privateKeyPass = "xmlsecurity";
95 static String certificateAlias = "test";
96 private MessageContext msgContext;
97
98 static {
99 org.apache.xml.security.Init.init();
100 }
101
102 public SignedSOAPEnvelope(MessageContext msgContext, SOAPEnvelope env, String baseURI, String keystoreFile) {
103 this.msgContext = msgContext;
104 init(env, baseURI, keystoreFile);
105 }
106
107 public SignedSOAPEnvelope(SOAPEnvelope env, String baseURI) {
108 init(env, baseURI, keystoreFile);
109 }
110
111 private void init(SOAPEnvelope env, String baseURI, String keystoreFile) {
112 try {
113 System.out.println("Beginning Client signing...");
114 env.addMapping(new Mapping(SOAPSECNS, SOAPSECprefix));
115 env.addAttribute(Constants.URI_SOAP11_ENV, "actor", "some-uri");
116 env.addAttribute(Constants.URI_SOAP11_ENV, "mustUnderstand", "1");
117
118 SOAPHeaderElement header =
119 new SOAPHeaderElement(XMLUtils.StringToElement(SOAPSECNS,
120 "Signature",
121 ""));
122 env.addHeader(header);
123
124 Document doc = getSOAPEnvelopeAsDocument(env, msgContext);
125
126 KeyStore ks = KeyStore.getInstance(keystoreType);
127 FileInputStream fis = new FileInputStream (keystoreFile);
128
129 ks.load(fis, keystorePass.toCharArray());
130
131 PrivateKey privateKey = (PrivateKey ) ks.getKey(privateKeyAlias,
132 privateKeyPass.toCharArray());
133
134 Element soapHeaderElement = (Element) ((Element) doc.getFirstChild()).getElementsByTagNameNS("*", "Header").item(0);
135 Element soapSignatureElement = (Element) soapHeaderElement.getElementsByTagNameNS("*", "Signature").item(0);
136
137 Element body = (Element)doc.getElementsByTagNameNS("http://schemas.xmlsoap.org/soap/envelope/", "Body").item(0);
139 body.setAttribute("Id", "Body");
140
141 XMLSignature sig = new XMLSignature(doc, baseURI,
142 XMLSignature.ALGO_ID_SIGNATURE_DSA);
143
144 soapSignatureElement.appendChild(sig.getElement());
145 sig.addDocument("#Body");
146
147
148 X509Certificate cert =
149 (X509Certificate ) ks.getCertificate(certificateAlias);
150
151
152 sig.addKeyInfo(cert);
153 sig.addKeyInfo(cert.getPublicKey());
154 sig.sign(privateKey);
155
156 Canonicalizer c14n = Canonicalizer.getInstance(Canonicalizer.ALGO_ID_C14N_WITH_COMMENTS);
157 byte[] canonicalMessage = c14n.canonicalizeSubtree(doc);
158
159 InputSource is = new InputSource (new java.io.ByteArrayInputStream (canonicalMessage));
160 DeserializationContext dser = null;
161 if (msgContext == null) {
162 AxisClient tmpEngine = new AxisClient(new NullProvider());
163 msgContext = new MessageContext(tmpEngine);
164 }
165 dser = new DeserializationContext(is, msgContext,
166 Message.REQUEST, this);
167
168 dser.parse();
169 System.out.println("Client signing complete.");
170 } catch (Exception e) {
171 e.printStackTrace();
172 throw new RuntimeException (e.toString());
173 }
174 }
175
176 private Document getSOAPEnvelopeAsDocument(SOAPEnvelope env, MessageContext msgContext)
177 throws Exception {
178 StringWriter writer = new StringWriter ();
179 SerializationContext serializeContext = new SerializationContext(writer, msgContext);
180 env.output(serializeContext);
181 writer.close();
182
183 Reader reader = new StringReader (writer.getBuffer().toString());
184 Document doc = XMLUtils.newDocument(new InputSource (reader));
185 if (doc == null)
186 throw new Exception (
187 Messages.getMessage("noDoc00", writer.getBuffer().toString()));
188 return doc;
189 }
190 }
191 |
Popular Tags |
Java API By Example, From Geeks To Geeks.