xmlsec 0.3.0

Wrapper for xmlsec1 library
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

//!
//! Signature Creation and Verification Example
//!
// use xmlsec::template::preamble::*;  // would include all in the block right below this line
use xmlsec::XmlSecTemplateBuilder;
use xmlsec::XmlSecDocumentTemplating;
use xmlsec::XmlSecCanonicalizationMethod;
use xmlsec::XmlSecSignatureMethod;

use xmlsec::XmlSecKey;
use xmlsec::XmlSecKeyFormat;
use xmlsec::XmlSecSignatureContext;

use xmlsec::XmlSecDocumentExt;

use libxml::parser::Parser           as XmlParser;
use libxml::tree::document::Document as XmlDocument;


fn main()
{
    let parser = XmlParser::default();

    let document = parser.parse_file("tests/resources/sign2-doc.xml")
        .expect("Failed to load document create template for and sign/verify");

    create_template(&document);
    create_signature(&document);
    verify_signature(&document);
}


fn create_template(doc: &XmlDocument)
{
    doc.template()
        .canonicalization(XmlSecCanonicalizationMethod::ExclusiveC14N)
        .signature(XmlSecSignatureMethod::RsaSha1)
        .done()
        .expect("Failed to create/attach signature template");
}


fn create_signature(doc: &XmlDocument)
{
    let key = XmlSecKey::from_file("tests/resources/key.pem", XmlSecKeyFormat::Pem, None)
        .expect("Failed to properly load key from file");

    let mut sigctx = XmlSecSignatureContext::new();
    sigctx.insert_key(key);

    sigctx.sign_document(doc)
        .expect("Failed to sign document");
}


fn verify_signature(doc: &XmlDocument)
{
    let key = XmlSecKey::from_file("tests/resources/key.pem", XmlSecKeyFormat::Pem, None)
        .expect("Failed to properly load key from file");

    let mut sigctx = XmlSecSignatureContext::new();
    sigctx.insert_key(key);

    // optionaly specify the attribute ID names in the nodes you are verifying
    doc.specify_idattr("//prefix:DataNodes", "MyIDAttrName", Some(&[("prefix", "namespace")]))
        .expect(
            "Could not specify ID attr name. This error specifies whether no nodes where found \
            or if there was an attr name collision."
        );

    let valid = sigctx.verify_document(doc)
        .expect("Failed to verify document");

    if !valid {
        panic!("Document signature is not valid");
    }
}