(JavaScript) SII XML Digital Signature

Example for SII XML Digital Signature.

Note

This example is intended for running within a Chilkat.Js embedded JavaScript engine. All Chilkat JavaScript examples require Chilkat v11.4.0 or greater.

var success = false;

success = true;

// Load the XML to be signed.
var xmlToSign = new CkXml();
success = xmlToSign.LoadXmlFile("c:/aaworkarea/eduardo/sii_unsigned.xml");
if (success == false) {
    console.log(xmlToSign.LastErrorText);
    return;
}

// The sample XML to be signed looks like this:

// <?xml version="1.0" encoding="ISO-8859-1"?>
// <EnvioDTE xmlns="http://www.sii.cl/SiiDte" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sii.cl/SiiDte EnvioDTE_v10.xsd" version="1.0">
// <SetDTE ID="SetDocF0T33_20240425_170512">
//  <Caratula version="1.0">
//   <RutEmisor>99999999-4</RutEmisor>
//   <RutEnvia>12345678-6</RutEnvia>
//   <RutReceptor>888888000-K</RutReceptor>
//   <FchResol>2014-08-22</FchResol>
//   <NroResol>80</NroResol>
//   <TmstFirmaEnv>2024-04-25T17:05:13</TmstFirmaEnv>
//   <SubTotDTE>
//    <TpoDTE>33</TpoDTE>
//    <NroDTE>1</NroDTE>
//   </SubTotDTE>
//  </Caratula>
// <DTE version="1.0">
// <Documento ID="F555T55">
// ...
// </Documento>
// </EnvioDTE>

var gen = new CkXmlDSigGen();

gen.SigLocation = "EnvioDTE|SetDTE|DTE";
gen.SigLocationMod = 0;
gen.SigNamespacePrefix = "";
gen.SigNamespaceUri = "http://www.w3.org/2000/09/xmldsig#";
gen.SignedInfoCanonAlg = "C14N";
gen.SignedInfoDigestMethod = "sha1";

// -------- Reference 1 --------
var xml1 = new CkXml();
xml1.Tag = "Transforms";
xml1.UpdateAttrAt("Transform",true,"Algorithm","http://www.w3.org/TR/2001/REC-xml-c14n-20010315");

gen.AddSameDocRef2("F511T33","sha1",xml1,"");

// Provide a certificate + private key. (PFX password is test123)
var cert = new CkCert();
success = cert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123");
if (success !== true) {
    console.log(cert.LastErrorText);
    return;
}

gen.SetX509Cert(cert,true);

gen.KeyInfoType = "X509Data+KeyValue";
gen.X509Type = "Certificate";

// Load XML to be signed...
var sbXml = new CkStringBuilder();
xmlToSign.GetXmlSb(sbXml);

gen.Behaviors = "IndentedSignature";

// Sign the XML...
success = gen.CreateXmlDSigSb(sbXml);
if (success !== true) {
    console.log(gen.LastErrorText);
    return;
}

// -----------------------------------------------

// Save the signed XML to a file.
success = sbXml.WriteFile("c:/temp/qa_output/signedXml.xml","utf-8",false);

console.log(sbXml.GetAsString());

// ----------------------------------------
// Verify the signatures we just produced...
var verifier = new CkXmlDSig();
success = verifier.LoadSignatureSb(sbXml);
if (success !== true) {
    console.log(verifier.LastErrorText);
    return;
}

var numSigs = verifier.NumSignatures;
var verifyIdx = 0;
while (verifyIdx < numSigs) {
    verifier.Selector = verifyIdx;
    var verified = verifier.VerifySignature(true);
    if (verified !== true) {
        console.log(verifier.LastErrorText);
        return;
    }

    verifyIdx = verifyIdx+1;
}

console.log("All signatures were successfully verified.");