Get signature and certification path from PFX

manpreet Best Answer 3 years ago

I have a SOAP message like

<soapenv:Envelope
    xmlns:soapenv = "http://schemas.xmlsoap.org/soap/envelope/"
    xmlns:v = "http://www.something.com">
    <soapenv:Header/>
    <soapenv:Body>
        <v:Auth>
            <v:userID>xxxxxxxxxxv:userID>
            <v:password>xxxxxxxxxxv:password>
            <v:certChain>xxxxxxxxxxv:certChain>
            <v:signature>xxxxxxxxxxv:signature>
        v:Auth>
    soapenv:Body>
soapenv:Envelope>

After generating the java source code from WSDL, for Auth, I am setting value like this. (all the below 4 fields are string datatype)

Auth authInfo = new Auth();
authInfo.setUserID(userId);
authInfo.setPassword(password);
authInfo.setCertChain("");
authInfo.setSignature("");

The following is the piece of code using which I get signature, digest value, certificate chain. But when I populate the values and submit the SOAP message I get a Digital Signature Invalid Error. But I verified that the signature is valid.

Code to extract the details:

I face issue with getting certification path and signature from pfx file. Can you share the code which gets them, I have the following piece of code to get them. When I use the signature and certification path obtained through below code , I always get Invalid Digital signature.

public void getCertificateDetails(){
    String aliasName="xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"; // not posted here

    try{ 

         char[] passwd = KEY_STORE_PASSWORD.toCharArray();          

         keyStore = KeyStore.getInstance("PKCS12","SunJSSE");


         FileInputStream fis = new FileInputStream("path to pfx file");
         keyStore.load(fis, passwd);

         fis.close();

         Enumeration aliases;


         Certificate[] cc =  keyStore.getCertificateChain(aliasName);
         X509Certificate certificate1 = (X509Certificate) cc[0];

         System.out.println("signo algo:"+certificate1.getSigAlgName()); // get the value as SHA256withRSA

         PrivateKey pKey = (PrivateKey)keyStore.getKey("xxxxxxxxxxxxxxxxxxxxxxxxx", passwd);
                                                

                                                                                                        
                                                    
                                                
                                                

                                                    

                                                        
                                                            0
                                                            views 

                                                            0
                                                                likes 
                                                            
                                                            

                                                            0
                                                            shares
                                                            


    

         Facebook
        
         Twitter
        
        
         Linked In 
        
          WhatsApp