添加带有消息签名的 wsse:Security 令牌

问题描述

我正在尝试通过网络服务 (SoapHttpClientProtocol) 方法发送请求。对我来说不幸的是，这个请求需要在soap标头中有wsse:Security Token，带有请求xml的签名，以及公钥的原始数据（据我所知）。 肥皂示例应该如何：

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
    <soap:Header>
        <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
        xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
        soap:mustUnderstand="1">
            <wsse:BinarySecurityToken
            EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"
            ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"
            wsu:Id="X509-D517D5F699516D846F15717371831011">
                MIIE_certificate_raw_data_==
            </wsse:BinarySecurityToken>
            <wsu:Timestamp wsu:Id="TS-1">
                <wsu:Created>2021-03-15T09:39:43.086Z</wsu:Created>
                <wsu:Expires>2021-03-15T09:44:43.086Z</wsu:Expires>
            </wsu:Timestamp>
            <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="SIG-3">
                <ds:SignedInfo>
                    <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                        <ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap"/>
                    </ds:CanonicalizationMethod>
                    <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
                    <ds:Reference URI="#TS-1">
                        <ds:Transforms>
                            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                                <ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="wsse soap"/>
                            </ds:Transform>
                        </ds:Transforms>
                        <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                        <ds:DigestValue>Digest_Value</ds:DigestValue>
                    </ds:Reference>
                    <ds:Reference URI="#id-2">
                        <ds:Transforms>
                            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                                <ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList=""/>
                            </ds:Transform>
                        </ds:Transforms>
                        <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                        <ds:DigestValue>Digest_Value</ds:DigestValue>
                    </ds:Reference>
                </ds:SignedInfo>
                <ds:SignatureValue>Signature_Value</ds:SignatureValue>
                <ds:KeyInfo Id="KI-D517D5F699516">
                    <wsse:SecurityTokenReference wsu:Id="STR-D517D5F6">
                        <wsse:Reference URI="#X509-D517D5F699516D846F" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/>
                    </wsse:SecurityTokenReference>
                </ds:KeyInfo>
            </ds:Signature>
        </wsse:Security>
    </soap:Header>
    <soap:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="id-2">
        <Tag1>
            <T>12345678</T>
            <B>2342</B>
            <C>3456345435</C>
        </Tag1>
    </soap:Body>
</soap:Envelope>

我做了什么：

1. 创建类

   公共类 SecurityHeader : SoapHeader,IXmlSerializable { 公共 XmlElement Xml { 获取；放; }

        public XmlSchema GetSchema()
        {
            return null;
        }
   
        public void readxml(XmlReader reader) { }
   
        public void WriteXml(XmlWriter writer)
        {
            writer.Writeraw(Xml.InnerXml);
        }
   

   }

2. 添加了添加 SecurityHeader 的类 SecurityHeaderExtension : SoapExtension

3. 进入 web.config：

最后我得到了soap:Header 而不是soap:Header

有人可以帮帮我吗？我已经阅读了很多链接，目前没有结果......

更新： 通过以下方式部分解决了这个问题：

var requestContext = myWebService.RequestSoapContext;
var token = new Microsoft.Web.Services2.Security.Tokens.X509SecurityToken(certX);
requestContext.Security.Tokens.Add(token);
requestContext.Security.Timestamp.TtlInSeconds = 5;

// Sign the message using the X509 certificate.
var messageSign = new Microsoft.Web.Services2.Security.MessageSignature(token);
messageSign.SignatureOptions = Microsoft.Web.Services2.Security.SignatureOptions.IncludeSoapBody | Microsoft.Web.Services2.Security.SignatureOptions.IncludeTimestamp;
requestContext.Security.Elements.Add(messageSign);
var resp = myWebService.ExecuteCall(req);

现在我在阅读响应时遇到问题，出现错误：“签名或解密无效”。 据我了解，问题在我这边，但不确定...

解决方法

暂无找到可以解决该程序问题的有效方法，小编努力寻找整理中！

如果你已经找到好的解决方法，欢迎将解决方案带上本链接一起发送给小编。

小编邮箱:dio#foxmail.com (将#修改为@）