Sample code for 30+ languages & platforms
Visual FoxPro

Create XAdES for Malaysia E-Invoice

See more Malaysia MyInvois Examples

This example signs XML to create the required XAdES for Malaysia E-Invoice as described at the following web pages:

https://sdk.myinvois.hasil.gov.my/signature/
https://sdk.myinvois.hasil.gov.my/signature-creation/

Note: This example requires Chilkat 10.0.0 or later.

Chilkat Visual FoxPro Downloads

Visual FoxPro
LOCAL lnSuccess
LOCAL loXmlToSign
LOCAL loGen
LOCAL loObject1
LOCAL loXml1
LOCAL loCert
LOCAL loSbXml
LOCAL loVerifier
LOCAL lnNumSigs
LOCAL lnVerifyIdx
LOCAL lnVerified

lnSuccess = 0

lnSuccess = 1

* Load XML such as the following to be signed:

* <?xml version="1.0" encoding="utf-8"?>
* <Invoice xmlns="urn:oasis:names:specification:ubl:schema:xsd:Invoice-2" xmlns:cac="urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2" xmlns:cbc="urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2" xmlns:ext="urn:oasis:names:specification:ubl:schema:xsd:CommonExtensionComponents-2">
*     <ext:UBLExtensions>
*         <ext:UBLExtension>
*             <ext:ExtensionURI>urn:oasis:names:specification:ubl:dsig:enveloped:xades</ext:ExtensionURI>
*             <ext:ExtensionContent>
*                 <sig:UBLDocumentSignatures xmlns:sac="urn:oasis:names:specification:ubl:schema:xsd:SignatureAggregateComponents-2" xmlns:sbc="urn:oasis:names:specification:ubl:schema:xsd:SignatureBasicComponents-2" xmlns:sig="urn:oasis:names:specification:ubl:schema:xsd:CommonSignatureComponents-2">
*                     <sac:SignatureInformation>
*                         <cbc:ID>urn:oasis:names:specification:ubl:signature:1</cbc:ID>
*                         <sbc:ReferencedSignatureID>urn:oasis:names:specification:ubl:signature:Invoice</sbc:ReferencedSignatureID>
*                     </sac:SignatureInformation>
*                 </sig:UBLDocumentSignatures>
*             </ext:ExtensionContent>
*         </ext:UBLExtension>
*     </ext:UBLExtensions>
*     <cbc:ID>IV00000105</cbc:ID>
*     <cbc:IssueDate>2024-07-06</cbc:IssueDate>
*     <cbc:IssueTime>15:06:00Z</cbc:IssueTime>
*     <cbc:InvoiceTypeCode listVersionID="1.1">1</cbc:InvoiceTypeCode>
*     <cbc:DocumentCurrencyCode>MYR</cbc:DocumentCurrencyCode>
*     <cac:BillingReference>
*         <cac:AdditionalDocumentReference>
*             <cbc:ID>IV00000105</cbc:ID>
*         </cac:AdditionalDocumentReference>
*     </cac:BillingReference>
*     <cac:Signature>
*         <cbc:ID>urn:oasis:names:specification:ubl:signature:Invoice</cbc:ID>
*         <cbc:SignatureMethod>urn:oasis:names:specification:ubl:dsig:enveloped:xades</cbc:SignatureMethod>
*     </cac:Signature>
*     <cac:AccountingSupplierParty>
*         <cac:Party>
*             <cbc:IndustryClassificationCode name="Other information technology service activities n.e.c.">62099</cbc:IndustryClassificationCode>
*             <cac:PartyIdentification>
*                 <cbc:ID schemeID="TIN">C99999999999</cbc:ID>
*             </cac:PartyIdentification>
*             <cac:PartyIdentification>
*                 <cbc:ID schemeID="BRN">200801099999</cbc:ID>
*             </cac:PartyIdentification>
*             <cac:PostalAddress>
*                 <cbc:CityName>Cheras</cbc:CityName>
*                 <cbc:PostalZone>56000</cbc:PostalZone>
*                 <cbc:CountrySubentityCode>14</cbc:CountrySubentityCode>
*                 <cac:AddressLine>
*                     <cbc:Line>A-3, 11, Jalan 2/199a,</cbc:Line>
*                 </cac:AddressLine>
*                 <cac:AddressLine>
*                     <cbc:Line>Cheras, 56000 Cheras</cbc:Line>
*                 </cac:AddressLine>
*                 <cac:AddressLine>
*                     <cbc:Line>Wilayah Persekutuan Kuala Lumpur</cbc:Line>
*                 </cac:AddressLine>
*                 <cac:Country>
*                     <cbc:IdentificationCode listAgencyID="6" listID="ISO3166-1">MYS</cbc:IdentificationCode>
*                 </cac:Country>
*             </cac:PostalAddress>
*             <cac:PartyLegalEntity>
*                 <cbc:RegistrationName>ABC SYSTEMS SERVICES</cbc:RegistrationName>
*             </cac:PartyLegalEntity>
*             <cac:Contact>
*                 <cbc:Telephone>019-626 9999</cbc:Telephone>
*                 <cbc:ElectronicMail>Info@abc.com.my</cbc:ElectronicMail>
*             </cac:Contact>
*         </cac:Party>
*     </cac:AccountingSupplierParty>
*     <cac:AccountingCustomerParty>
*         <cac:Party>
*             <cac:PartyIdentification>
*                 <cbc:ID schemeID="TIN">C99999999999</cbc:ID>
*             </cac:PartyIdentification>
*             <cac:PartyIdentification>
*                 <cbc:ID schemeID="BRN">200801099999</cbc:ID>
*             </cac:PartyIdentification>
*             <cac:PostalAddress>
*                 <cbc:CityName>Cheras</cbc:CityName>
*                 <cbc:PostalZone>56000</cbc:PostalZone>
*                 <cbc:CountrySubentityCode>14</cbc:CountrySubentityCode>
*                 <cac:AddressLine>
*                     <cbc:Line>A-3, 11, Jalan 2/199a,</cbc:Line>
*                 </cac:AddressLine>
*                 <cac:AddressLine>
*                     <cbc:Line>Cheras, 56000 Cheras</cbc:Line>
*                 </cac:AddressLine>
*                 <cac:AddressLine>
*                     <cbc:Line>Cheras, 56000 Cheras</cbc:Line>
*                 </cac:AddressLine>
*                 <cac:Country>
*                     <cbc:IdentificationCode listAgencyID="6" listID="ISO3166-1">MYS</cbc:IdentificationCode>
*                 </cac:Country>
*             </cac:PostalAddress>
*             <cac:PartyLegalEntity>
*                 <cbc:RegistrationName>ABC SYSTEMS SERVICES</cbc:RegistrationName>
*             </cac:PartyLegalEntity>
*             <cac:Contact>
*                 <cbc:Telephone>019-626 9999</cbc:Telephone>
*                 <cbc:ElectronicMail>Info@abc.com.my</cbc:ElectronicMail>
*             </cac:Contact>
*         </cac:Party>
*     </cac:AccountingCustomerParty>
*     <cac:TaxTotal>
*         <cbc:TaxAmount currencyID="MYR">0</cbc:TaxAmount>
*         <cac:TaxSubtotal>
*             <cbc:TaxableAmount currencyID="MYR">40</cbc:TaxableAmount>
*             <cbc:TaxAmount currencyID="MYR">0</cbc:TaxAmount>
*             <cac:TaxCategory>
*                 <cbc:ID>6</cbc:ID>
*                 <cbc:Percent>0</cbc:Percent>
*                 <cac:TaxScheme>
*                     <cbc:ID schemeAgencyID="6" schemeID="UN/ECE 5153">OTH</cbc:ID>
*                 </cac:TaxScheme>
*             </cac:TaxCategory>
*         </cac:TaxSubtotal>
*     </cac:TaxTotal>
*     <cac:LegalMonetaryTotal>
*         <cbc:LineExtensionAmount currencyID="MYR">40</cbc:LineExtensionAmount>
*         <cbc:TaxExclusiveAmount currencyID="MYR">40</cbc:TaxExclusiveAmount>
*         <cbc:TaxInclusiveAmount currencyID="MYR">49</cbc:TaxInclusiveAmount>
*         <cbc:AllowanceTotalAmount currencyID="MYR">0</cbc:AllowanceTotalAmount>
*         <cbc:PayableAmount currencyID="MYR">49</cbc:PayableAmount>
*     </cac:LegalMonetaryTotal>
*     <cac:InvoiceLine>
*         <cbc:ID>1</cbc:ID>
*         <cbc:InvoicedQuantity unitCode="H87">2</cbc:InvoicedQuantity>
*         <cbc:LineExtensionAmount currencyID="MYR">40</cbc:LineExtensionAmount>
*         <cac:TaxTotal>
*             <cbc:TaxAmount currencyID="MYR">0</cbc:TaxAmount>
*             <cac:TaxSubtotal>
*                 <cbc:TaxableAmount currencyID="MYR">40</cbc:TaxableAmount>
*                 <cbc:TaxAmount currencyID="MYR">0</cbc:TaxAmount>
*                 <cac:TaxCategory>
*                     <cbc:ID>6</cbc:ID>
*                     <cbc:Percent>0</cbc:Percent>
*                     <cac:TaxScheme>
*                         <cbc:ID schemeAgencyID="6" schemeID="UN/ECE 5153">OTH</cbc:ID>
*                     </cac:TaxScheme>
*                 </cac:TaxCategory>
*             </cac:TaxSubtotal>
*         </cac:TaxTotal>
*         <cac:Item>
*             <cbc:Description>Computer Monitor 24 inch</cbc:Description>
*             <cac:CommodityClassification>
*                 <cbc:ItemClassificationCode listID="CLASS">3</cbc:ItemClassificationCode>
*             </cac:CommodityClassification>
*         </cac:Item>
*         <cac:Price>
*             <cbc:PriceAmount currencyID="MYR">20</cbc:PriceAmount>
*         </cac:Price>
*         <cac:ItemPriceExtension>
*             <cbc:Amount currencyID="MYR">40</cbc:Amount>
*         </cac:ItemPriceExtension>
*     </cac:InvoiceLine>
* </Invoice>

loXmlToSign = CreateObject('Chilkat.Xml')
lnSuccess = loXmlToSign.LoadXmlFile("qa_data/xml/myinvois_notYetSigned.xml")
IF (lnSuccess = 0) THEN
    ? "Failed to load the XML to be signed."
    RELEASE loXmlToSign
    CANCEL
ENDIF

loGen = CreateObject('Chilkat.XmlDSigGen')
* ------------------------------------------------------------------------------------------------
* This behavior is required for the peculiarities of the MyInvois implementation.
* It requires Chilkat 10.0.0 or later.
loGen.Behaviors = "MyInvois"
* ------------------------------------------------------------------------------------------------

loGen.SigLocation = "Invoice|ext:UBLExtensions|ext:UBLExtension|ext:ExtensionContent|sig:UBLDocumentSignatures|sac:SignatureInformation"
loGen.SigLocationMod = 0
loGen.SigId = "signature"
loGen.SigNamespacePrefix = "ds"
loGen.SigNamespaceUri = "http://www.w3.org/2000/09/xmldsig#"
loGen.SignedInfoCanonAlg = "C14N_11"
loGen.SignedInfoDigestMethod = "sha256"

* Create an Object to be added to the Signature.
loObject1 = CreateObject('Chilkat.Xml')
loObject1.Tag = "xades:QualifyingProperties"
loObject1.AddAttribute("xmlns:xades","http://uri.etsi.org/01903/v1.3.2#")
loObject1.AddAttribute("Target","signature")
loObject1.UpdateAttrAt("xades:SignedProperties",1,"Id","id-xades-signed-props")
loObject1.UpdateChildContent("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningTime","TO BE GENERATED BY CHILKAT")
loObject1.UpdateAttrAt("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:CertDigest|ds:DigestMethod",1,"Algorithm","http://www.w3.org/2001/04/xmlenc#sha256")
loObject1.UpdateChildContent("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:CertDigest|ds:DigestValue","TO BE GENERATED BY CHILKAT")
loObject1.UpdateChildContent("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:IssuerSerial|ds:X509IssuerName","TO BE GENERATED BY CHILKAT")
loObject1.UpdateChildContent("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:IssuerSerial|ds:X509SerialNumber","TO BE GENERATED BY CHILKAT")

loGen.AddObject("",loObject1.GetXml(),"","")

* -------- Reference 1 --------
loXml1 = CreateObject('Chilkat.Xml')
loXml1.Tag = "ds:Transforms"
loXml1.UpdateAttrAt("ds:Transform",1,"Algorithm","http://www.w3.org/TR/1999/REC-xpath-19991116")
loXml1.UpdateChildContent("ds:Transform|ds:XPath","not(//ancestor-or-self::ext:UBLExtensions)")
loXml1.UpdateAttrAt("ds:Transform[1]",1,"Algorithm","http://www.w3.org/TR/1999/REC-xpath-19991116")
loXml1.UpdateChildContent("ds:Transform[1]|ds:XPath","not(//ancestor-or-self::cac:Signature)")
loXml1.UpdateAttrAt("ds:Transform[2]",1,"Algorithm","http://www.w3.org/2006/12/xml-c14n11")

loGen.AddSameDocRef2("","sha256",loXml1,"")
loGen.SetRefIdAttr("","id-doc-signed-data")

* -------- Reference 2 --------
loGen.AddObjectRef("id-xades-signed-props","sha256","","","http://www.w3.org/2000/09/xmldsig#SignatureProperties")

* Provide a certificate + private key. (PFX password is test123)
loCert = CreateObject('Chilkat.Cert')
lnSuccess = loCert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123")
IF (lnSuccess <> 1) THEN
    ? loCert.LastErrorText
    RELEASE loXmlToSign
    RELEASE loGen
    RELEASE loObject1
    RELEASE loXml1
    RELEASE loCert
    CANCEL
ENDIF

loGen.SetX509Cert(loCert,1)

loGen.KeyInfoType = "X509Data"
loGen.X509Type = "Certificate"

* Load XML to be signed...
loSbXml = CreateObject('Chilkat.StringBuilder')
loXmlToSign.EmitCompact = 1
loXmlToSign.GetXmlSb(loSbXml)

* Sign the XML...
lnSuccess = loGen.CreateXmlDSigSb(loSbXml)
IF (lnSuccess <> 1) THEN
    ? loGen.LastErrorText
    RELEASE loXmlToSign
    RELEASE loGen
    RELEASE loObject1
    RELEASE loXml1
    RELEASE loCert
    RELEASE loSbXml
    CANCEL
ENDIF

* -----------------------------------------------

* Save the signed XML to a file.
lnSuccess = loSbXml.WriteFile("c:/temp/qa_output/signedXml.xml","utf-8",0)

? loSbXml.GetAsString()

* ----------------------------------------
* Verify the signatures we just produced...
loVerifier = CreateObject('Chilkat.XmlDSig')
lnSuccess = loVerifier.LoadSignatureSb(loSbXml)
IF (lnSuccess <> 1) THEN
    ? loVerifier.LastErrorText
    RELEASE loXmlToSign
    RELEASE loGen
    RELEASE loObject1
    RELEASE loXml1
    RELEASE loCert
    RELEASE loSbXml
    RELEASE loVerifier
    CANCEL
ENDIF

* ----------------------------------------
* Make sure to indicate that we are verifying a MyInvois signature
* This is because MyInvois does things in a non-standard way..
loVerifier.UncommonOptions = "MyInvois"
* ----------------------------------------

lnNumSigs = loVerifier.NumSignatures
lnVerifyIdx = 0
DO WHILE lnVerifyIdx < lnNumSigs
    loVerifier.Selector = lnVerifyIdx
    lnVerified = loVerifier.VerifySignature(1)
    IF (lnVerified <> 1) THEN
        ? loVerifier.LastErrorText
        RELEASE loXmlToSign
        RELEASE loGen
        RELEASE loObject1
        RELEASE loXml1
        RELEASE loCert
        RELEASE loSbXml
        RELEASE loVerifier
        CANCEL
    ENDIF

    lnVerifyIdx = lnVerifyIdx + 1
ENDDO
? "All signatures were successfully verified."

RELEASE loXmlToSign
RELEASE loGen
RELEASE loObject1
RELEASE loXml1
RELEASE loCert
RELEASE loSbXml
RELEASE loVerifier