Client Sample App

[alaglobeteamcom]

Hi,
The client Sample app gets a "malformed request" when asking for at https://securetokenservice.devtest4-nemlog-in.dk/SecurityTokenService.svc

<S11:Envelope xmlns:S11="http://schemas.xmlsoap.org/soap/envelope/" xmlns="http://docs.oasis-open.org/ws-sx/ws-trust/200512" xmlns:wsa="http://www.w3.org/2005/08/addressing">
S11:Header
wsa:MessageIDuuid:4d90f58d-d9f1-41e9-afd0-c72483893d58</wsa:MessageID>
wsa:RelatesTouuid:d1840a34-ec9e-4153-9205-1a767270a56e</wsa:RelatesTo>
</S11:Header>
S11:Body
S11:Fault
wst:InvalidRequest
The request was invalid or malformed
</S11:Fault>
</S11:Body>
</S11:Envelope>

Is there anyone that could help me get an access token for the new api/lookup "NemLog-In Opslagstjenste" - https://www.digitaliser.dk/resource/5988041/artefact/OIOIDWSSOAPprofileV1.1.pdf?artefact=true&PID=5988053

[erviem99]

I see the same issue. Did you ever manage to solve this?

[aantimengocom]

Yes @erviem99,

I took the source code from , and changed a single line of code:

\Digst.OioIdws.OioWsTrust\Utils\XmlSignatureUtils.cs - line: 35 - changed it from cert.PrivateKey to cert.GetRSAPrivateKey()

.Net 4.7 and below:

SignedXml signedXml = new SignedXml(doc);
signedXml.SigningKey = cert.PrivateKey;

.Net 4.7.1 and above:

SignedXml signedXml = new SignedXml(doc);
signedXml.SigningKey = cert.GetRSAPrivateKey();
 

[erviem99]

Thanks, unfortunately it did not help in my case (Net Framework 4.7.2).

I'm trying to run Digst.OioIdws.Rest.Examples.Client.

Maby it is because the certificates in the demo has expired?

Did you manage to get a hold of newer certificates for the demo or are you using your own?

[aantimengocom]

Im using my own..

[erviem99]

Sorry for bothering you again but I get same error even with a newly generated systemcertificate.

I also tried with the certificate here: https://www.nemlog-in.dk/vejledningertiltestmiljo/.

The only thing I'm unsure about is the AudienceUri in App.config. I'm not sure what it should look like.

AsEndpoint I have set to https://lookupservice.test-devtest4-nemlog-in.dk/api/accesstoken/issue

I hope you have some more insights as to what could be wrong here.

[aantimengocom]

I have the following setup working for test and production:

           ```

case "Test": {
txtClientCertificate.Text = "4022E6E11BFD585EA751B010BBE70DEA49F7F30A";
txtAudienceUri.Text = "https://saml.wsp.lookupservice.devtest4-nemlog-in.dk";
txtAccessTokenEndpoint.Text = "https://lookupservice.devtest4-nemlog-in.dk/api/accesstoken/issue";
txtStsCertificate.Text = "3e2eda0575350918865c973774475d5d3e28b3da";
txtStsEndpointAddress.Text = "https://securetokenservice.devtest4-nemlog-in.dk/SecurityTokenService.svc";
txtCPRQuery.Text = "https://lookupservice.devtest4-nemlog-in.dk/api/lookup/subjectserialnumbercpr?subjectserialnumber=UI:DK-E:G:";
txtRIDQuery.Text = "https://lookupservice.devtest4-nemlog-in.dk/api/lookup/subjectserialnumberrid?subjectserialnumber=UI:DK-E:G:";
txtUUID.Text = "6dca1db5-64c8-43ad-bace-2c06ecb38b50";
} break;
case "Production": {
txtClientCertificate.Text = "ba0810554f89e96be320746b88f4f1ad54e30897";
txtAudienceUri.Text = "https://saml.wsp.lookupservice.nemlog-in.dk";
txtAccessTokenEndpoint.Text = "https://lookupservice.nemlog-in.dk/api/accesstoken/issue";
txtStsCertificate.Text = "0280ff967aa1441cfb48e1b3782f329acb36c7e6";
txtStsEndpointAddress.Text = "https://securetokenservice.nemlog-in.dk/SecurityTokenService.svc";
txtCPRQuery.Text = "https://lookupservice.nemlog-in.dk/api/lookup/subjectserialnumbercpr?subjectserialnumber=UI:DK-E:G:";
txtRIDQuery.Text = "https://lookupservice.nemlog-in.dk/api/lookup/subjectserialnumberrid?subjectserialnumber=UI:DK-E:G:";
txtUUID.Text = "fadf43d0-20cd-43cd-af61-7fa9146d0868";
} break;

[aantimengocom]

[erviem99]

Thanks, where can I find this tool?

Also, where can I get the STS certificate?

Right now I only have a client certificate.

[aantimengocom]

I wrote the tool :-) so cant be found anywhere but in my toolbox I guess. I wont be able to share it unless I remove the production environment certificates etc. I have attached the code to my tool here.
UUIDToCprRid.WinForm.zip

[erviem99]

Thank you so much! I have your sample working, so I should be able to work my way back from here.

[erviem99]

One last thing @aantimengocom Do you have a valid CVR/Rid that I can use to test the ridcpr endpoint?

I have several but for some reasone none of them will work, ie: CVR: 98504068 / Rid: 36362626.

[alaglobeteamcom]

Test environment UUID 6dca1db5-64c8-43ad-bace-2c06ecb38b50 .. see the screenshot up in the thread.. Sent from Outlook for Android<https://aka.ms/AAb9ysg>

…

________________________________ From: erviem99 ***@***.***> Sent: Friday, April 28, 2023 7:42:47 PM To: digst/OIOIDWS.Net ***@***.***> Cc: Allan Andersen ***@***.***>; Author ***@***.***> Subject: Re: [digst/OIOIDWS.Net] Client Sample App (Issue #34) One last thing @aantimengocom<https://github.com/aantimengocom> Do you have a valid CVR/Rid that I can use to test the ridcpr endpoint? I have several but for some reasone none of them will work, ie: CVR: 98504068 / Rid: 36362626. — Reply to this email directly, view it on GitHub<#34 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/A23XSW43X7ZGHG5RKHOQ7V3XDOULPANCNFSM6AAAAAAQDANYQU>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[alaglobeteamcom]

Ahh.. the CVRRID service.. sorry I don't have one of these in the test environment, however from the top of my head the test system cvr could be 1212121234 or 12121234... Not sure if it will work 8n the lookup service though. Sent from Outlook for Android<https://aka.ms/AAb9ysg>

…

________________________________ From: erviem99 ***@***.***> Sent: Friday, April 28, 2023 7:42:47 PM To: digst/OIOIDWS.Net ***@***.***> Cc: Allan Andersen ***@***.***>; Author ***@***.***> Subject: Re: [digst/OIOIDWS.Net] Client Sample App (Issue #34) One last thing @aantimengocom<https://github.com/aantimengocom> Do you have a valid CVR/Rid that I can use to test the ridcpr endpoint? I have several but for some reasone none of them will work, ie: CVR: 98504068 / Rid: 36362626. — Reply to this email directly, view it on GitHub<#34 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/A23XSW43X7ZGHG5RKHOQ7V3XDOULPANCNFSM6AAAAAAQDANYQU>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[erviem99]

I have now created a test organization with some persons on it but only some of them will return a CPR-number when I call ridcpr-service. Do you have any idea why this might be?

[erviem99]

I'm trying to figure out how to get my own pfx-file for the client certificate needed for OioIdwsClient. I see you have a one (LookupServices.WSC (Test1234).pfx) in your code. Can you help @alaglobeteamcom?