PKCS#7 digital signature of web content from ASP.NET web pages

Attention: Your browser does not support Cassandra Client Framework (available only on Internex Explorer) and so the demo cannot be execute. To try Bonnie.NET Web Edition functionalities use Internet Explorer instead.

This web page shows how to use Bonnie.NET Web Edition's CustomSignerButton to perform digital signatures of a web page's content.

To do so, a custom JavaScript function had to be implemented. Its main purpose is to get the page's content, elaborate it in any desired way and finally create a string that will be signed.

In this demo, a JavaScript function will extract the data that you will insert on the input fields below, and will create with them an xml document starting from a template. The resulting xml string will then be signed by using a certificate that resides on your machine. Multiple digital signatures are supported too. If you have not an X.509 digital certificate, you can generated it with X.509 Builder web application.

The digital signature performed will be encoded using the PKCS#7 standard, and a signed-data message will be created. It will contains:

1. the custom data generated with the JavaScript function.
2. the digital signature(s).
3. the X.509 digital certificate(s) used for the signature.
4. the date and time of the signature(s) in UTC format.
5. optionally, a comment for each signature.

To extract the information stored on the PKCS#7 signed-data message, Bonnie.NET's SignerBrowsers can be used. Note that, being the PKCS#7 a standard, SignerBrowsers can be used to parse and verify every signed-data message that uses this standard, whether it was generated by Bonnie.NET Web Edition or not.

CustomSignerButton uses the Cassandra Client Framework plug-in. If Cassandra Client Framework is not installed on your computer, a built-in functionality of SignerButtons will guide you to the installation process. This relieves developers from having to manually deploy it to end users.

Try Bonnie.NET functionalities by following the next steps:

1. Create the digital signature

Insert your data on the left box below and then click sign. Eventually insert some comment on the right box. The comment will be stored on the signed-data message.

In this demo, the CustomSignerButton is rendered as ImageButton and it uses its built-in Ajax mode to work asyncronously.

Data to Sign

Your name:

Your surname:

Signature's Comment

After the signature, the following boxes will contains the signed-data message generated and data inside it.

Signed-Data Message

Signed-Data Message's Content

2. Verify the digital signature

CustomSignerButton, as the TextSignerButton, the StreamSignerButton and the FileSignerButton, permits to verify all the signatures contained inside a PKCS#7 siged-data message.

To verify the signature computed, click the verify button.

Verification:

For more details about CustomSignerButtons and how to verify a signed-data message, download Bonnie.NET Web Edition and try the examples contained on the setup.