Validate signature from string
Hello,
We would need to handle the following use case:
A system replies to our GET with a list of codes and a signature.
Each code has been signed with the SHA512withECDSA algorithm
We would need to:
1 Concatenate all codes in a string
2 Decode the string which is in Base 64
3 Validate the string using the signature which we get in the reply
We have read for step 2:
Base64Decode
https://cedocs.intersystems.com/latest/csp/documatic/%25CSP.Documatic.c…
For step 3 we have found:
This example at "Validating a Signature" which validates the <Signature> element in an XML
https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cl…
➡️ Could you show us some documentation or examples which could help us?
How would you validate that the string which contains all the code has been signed with the algorithm?
Comments
I did not find any mention of ECDSA in InterSystems products, so, not sure if it's supported natively. I would look at some external tools which could help you with it. And you can start from openssl. And If I undestood correctly, you'll also need a public certificate, which used to make such a signature.