How to use for SOAP? (Could not sign: undeclared namespace prefix: 'SOAP-ENV') about goxmldsig

[gboor]

@creativesuraj https://docs.python-zeep.org/en/master/

[muhRobai]

i think you can using struct tag like this, for set prefix SOAP-ENV

//swagger:model Envelop
type Envelope struct {
	XMLName      xml.Name   `xml:"SOAP-ENV:Envelope"`
	XSDAttr      string     `xml:"xmlns:xsd,attr"`
	XSIAttr      string     `xml:"xmlns:xsi,attr"`
	EnvelopeAttr string     `xml:"xmlns:SOAP-ENV,attr"`
	SoapEncAttr  string     `xml:"xmlns:SOAP-ENC,attr"`
	Body         ThreeParty `xml:"SOAP-ENV:Body"`
}

[gboor]

Thanks for the idea, but that sadly does not work, since the whole document already exists before I sign it and the namespace is not on the node.

I noticed that implementations of C14N in other languages actually copies the namespace from parent nodes when you try to canonicalize a single node, but this library does not...

Is there some way to fix that?

[creativesuraj]

@gboor Are you able to sign the SOAP xml?
I'm stuck with signing SOAP xml payload in Go. Didn't find a working library yet.

Thanks

[gboor]

@creativesuraj I was never able to make it work with SOAP. I switched the whole code base to Python eventually. Sorry I can't be more helpful.

[creativesuraj]

@gboor which python library are you using?

[creativesuraj]

Thanks

[gboor]

If anyone is still tracking this / interested; I eventually managed to make this work in GO using https://github.com/textnow/gosoap.

Here is an example using both transport certs and WSSE;

package main

import (
	"context"
	"crypto/tls"
	"encoding/xml"
	soap "github.com/Enflick/gosoap"
	"net/http"
	"time"
)

type ListMessageMetadataRequest struct {
	XMLName xml.Name `xml:"http://sys.svc.tennet.nl/MMCHub/v1 listMessageMetadataRequest"`

	Receiver string `xml:"receiver"`
}

type ListMessageMetadataResponse struct {
	XMLName xml.Name `xml:"http://sys.svc.tennet.nl/MMCHub/v1 listMessageMetadataResponse"`

	MessageMetadata []struct {
		TechnicalMessageId string    `xml:"technicalMessageId"`
		ReceivedTimestamp  time.Time `xml:"receivedTimestamp"`
		MessageType        string    `xml:"messageType"`
		ContentType        string    `xml:"contentType"`
		CorrelationId      string    `xml:"correlationId"`
		Sender             string    `xml:"sender"`
		Receiver           string    `xml:"receiver"`
	} `xml:"messageMetadata,omitempty"`
}

func main() {
	wsseInfo, _ := soap.NewWSSEAuthInfo("path-to-cert.pem", "path-to-pk.pem")
	cert, _ := tls.LoadX509KeyPair("path-to-transport-cert.pem", "path-to-transport-key.pem")

	tlsConfig := &tls.Config{
		Certificates: []tls.Certificate{cert},
	}

	transport := &http.Transport{TLSClientConfig: tlsConfig}
	httpClient := &http.Client{Transport: transport}
	soapClient := soap.NewClient(httpClient)

	body := ListMessageMetadataRequest{
		Receiver: "some_id",
	}

	res := ListMessageMetadataResponse{}

	fault := soap.Fault{}
	soapRequest := soap.NewRequest("action", "url", &body, &res, &fault)
	soapRequest.SignWith(wsseInfo)
	
	soapResponse, _ := soapClient.Do(context.Background(), soapRequest)
	if soapResponse.StatusCode == http.StatusOK {
		// Do some stuff with res
	}
}