Class: WSS4R::Security::Xml::Signature

Inherits:
Object
  • Object
show all
Defined in:
lib/wss4r/security/xml/signature.rb

Instance Method Summary collapse

Constructor Details

#initialize(security_token) ⇒ Signature

Returns a new instance of Signature.



6
7
8
 
# File 'lib/wss4r/security/xml/signature.rb', line 6

def initialize(security_token)
  @security_token = security_token
end

Instance Method Details

#process(document) ⇒ Object 



10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
 
# File 'lib/wss4r/security/xml/signature.rb', line 10

def process(document)
  security = Security.new()
  security = security.process(document)
  security_token = @security_token.process(document)
  children = security.children()
  #children.each{|child|

  #  security.delete(child)

  #}   

  security.add_element(security_token)
  signature_element = security.add_element(Names::SIGNATURE)
  #children.each{|child|

  #  security.add_element(child)

  #}

  signature_element.add_namespace("xmlns:ds", Namespaces::DS)
  signed_info = SignedInfo.new()
  signed_info_element = signed_info.process(signature_element)
  signature_value = SignatureValue.new(@security_token, signed_info_element)
  signature_value.process(document)
  key_info = KeyInfo.new(@security_token, KeyInfo::REFERENCE).get_xml(signature_element)
  document
end

#unprocess(signature) ⇒ Object 



32
33
34
35
36
37
38
39
 
# File 'lib/wss4r/security/xml/signature.rb', line 32

def unprocess(signature)
  @signature_value = XPath.first(signature, "ds:SignatureValue", {"ds" => Namespaces::DS}).text().gsub("\n","")
  key_info = XPath.first(signature, "ds:KeyInfo", {"ds" => Namespaces::DS})
  @key_info = KeyInfo.new(key_info)
  @signed_info = SignedInfo.new()
  @signed_info.unprocess(signature.document())
  @signature = signature
end

#verify ⇒ Object 



61
62
63
64
 
# File 'lib/wss4r/security/xml/signature.rb', line 61

def verify()
  @signed_info.verify()
  verify_signature()
end

#verify_signature ⇒ Object

Raises:

  • (FaultError) 


41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
 
# File 'lib/wss4r/security/xml/signature.rb', line 41

def verify_signature()
  signed_info = XPath.first(@signature, "ds:SignedInfo", {"ds" => Namespaces::DS})
  inclusive_namespaces = XPath.first(signed_info, "ds:CanonicalizationMethod/InclusiveNamespaces", {"ds" => Namespaces::DS})
  prefix_list = inclusive_namespaces.attribute("PrefixList") if (inclusive_namespaces)
  if (prefix_list)
    prefix_list = prefix_list.value().split()
  end
  transformer = TransformerFactory::get_instance(@signed_info.canonicalizer_method())
  transformer.prefix_list=(prefix_list)
  result = transformer.canonicalize_element(signed_info)
  signature_value = Base64.decode64(@signature_value)#.strip()

  public_key = @key_info.security_token().certificate().public_key()
  #TODO: check certificate

  certificate = @key_info.security_token().certificate()
  
  verify = public_key.verify(OpenSSL::Digest::SHA1.new(), signature_value, result)
  raise FaultError.new(VerificationFault.new()) if !(verify)
  certitificate = @key_info.security_token().certificate()
end