Sample code for 30+ languages & platforms
Lua

Paraguay E-Invoicing Signed XML (SIFEN)

See more XML Digital Signatures Examples

Demonstrates how to sign XML for e-invoicing -- SISTEMA INTEGRADO DE FACTURACIÓN ELECTRÓNICA NACIONAL (SIFEN). This is for signing XML files that need to be submitted to a government agency (Country Paraguay, SIFEN / EKUATIA, Sistema Nacional de Facturacion Electrónica).

Chilkat Lua Downloads

Download Chilkat for Lua
Lua 
local chilkat = require("chilkat")

local success = true

-- Create the XML to be signed...

-- Use this online tool to generate code from sample XML:
-- Generate Code to Create XML

local xmlToSign = chilkat.Xml.new()
xmlToSign.tag = "rDE"
xmlToSign:add_attribute("xmlns", "http://ekuatia.set.gov.py/sifen/xsd")
xmlToSign:add_attribute("xmlns:xsi", "http://www.w3.org/2001/XMLSchema-instance")
xmlToSign:add_attribute("xsi:schemaLocation", "http://ekuatia.set.gov.py/sifen/xsd siRecepDE_v150.xsd")
xmlToSign:update_child_content("dVerFor", "150")
xmlToSign:update_attr_at("DE", true, "Id", "01800228774059001001501012022091519999999990")
xmlToSign:update_child_content("DE|dDVId", "0")
xmlToSign:update_child_content("DE|dFecFirma", "2022-09-15T10:23:05")
xmlToSign:update_child_content("DE|dSisFact", "1")
xmlToSign:update_child_content("DE|gOpeDE|iTipEmi", "1")
xmlToSign:update_child_content("DE|gOpeDE|dDesTipEmi", "Normal")
xmlToSign:update_child_content("DE|gOpeDE|dCodSeg", "999999999")
xmlToSign:update_child_content("DE|gOpeDE|dInfoEmi", "GENERADA DE PEDIDO 131043202")
xmlToSign:update_child_content("DE|gTimb|iTiDE", "1")
xmlToSign:update_child_content("DE|gTimb|dDesTiDE", "Factura electr�nica")
xmlToSign:update_child_content("DE|gTimb|dNumTim", "18889014")
xmlToSign:update_child_content("DE|gTimb|dEst", "059")
xmlToSign:update_child_content("DE|gTimb|dPunExp", "001")
xmlToSign:update_child_content("DE|gTimb|dNumDoc", "0015010")
xmlToSign:update_child_content("DE|gTimb|dFeIniT", "2022-05-25")
xmlToSign:update_child_content("DE|gDatGralOpe|dFeEmiDE", "2022-09-15T10:22:57")
xmlToSign:update_child_content("DE|gDatGralOpe|gOpeCom|iTipTra", "1")
xmlToSign:update_child_content("DE|gDatGralOpe|gOpeCom|dDesTipTra", "Venta de mercader�a")
xmlToSign:update_child_content("DE|gDatGralOpe|gOpeCom|iTImp", "1")
xmlToSign:update_child_content("DE|gDatGralOpe|gOpeCom|dDesTImp", "IVA")
xmlToSign:update_child_content("DE|gDatGralOpe|gOpeCom|cMoneOpe", "PYG")
xmlToSign:update_child_content("DE|gDatGralOpe|gOpeCom|dDesMoneOpe", "Guarani")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dRucEm", "80022877")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dDVEmi", "4")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|iTipCont", "1")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|cTipReg", "1")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dNomEmi", "ABCDEF SA")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dNomFanEmi", "ABCDEF SA")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dDirEmi", "Jos� Abcde Xyz N� 666 e/Abxyz123")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dNumCas", "0")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dCompDir1", "N/A")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dCompDir2", "N/A")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|cDepEmi", "12")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dDesDepEmi", "CENTRAL")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|cDisEmi", "153")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dDesDisEmi", "CAPIATA")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|cCiuEmi", "1234")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dDesCiuEmi", "CAPIATA")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dTelEmi", "(022) 1111 000")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dEmailE", "somebody@example.com.py")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|dDenSuc", "PUNTO 99")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|gActEco|cActEco", "47721")
xmlToSign:update_child_content("DE|gDatGralOpe|gEmis|gActEco|dDesActEco", "COMERCIO AL POR MENOR DE PRODUCTOS")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|iNatRec", "1")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|iTiOpe", "2")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|cPaisRec", "PRY")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|dDesPaisRe", "Paraguay")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|iTiContRec", "2")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|dRucRec", "80082971")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|dDVRec", "9")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|dNomRec", "XXXXXXX")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|dNomFanRec", "XXXXXXX")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|dNumCasRec", "0")
xmlToSign:update_child_content("DE|gDatGralOpe|gDatRec|dCodCliente", "9999999")
xmlToSign:update_child_content("DE|gDtipDE|gCamFE|iIndPres", "1")
xmlToSign:update_child_content("DE|gDtipDE|gCamFE|dDesIndPres", "Operaci�n presencial")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|iCondOpe", "1")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|dDCondOpe", "Contado")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni|iTiPago", "1")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni|dDesTiPag", "Efectivo")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni|dMonTiPag", "100000.0000")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni|cMoneTiPag", "PYG")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni|dDMoneTiPag", "Guarani")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni[1]|iTiPago", "1")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni[1]|dDesTiPag", "Efectivo")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni[1]|dMonTiPag", "73600.0000")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni[1]|cMoneTiPag", "PYG")
xmlToSign:update_child_content("DE|gDtipDE|gCamCond|gPaConEIni[1]|dDMoneTiPag", "Guarani")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|dCodInt", "818181")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|dDesProSer", "Widget Abc Xyz")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|cUniMed", "77")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|dDesUniMed", "UNI")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|dCantProSer", "2.0000")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gValorItem|dPUniProSer", "16500.0000")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gValorItem|dTotBruOpeItem", "33000.0000")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gValorItem|gValorRestaItem|dDescItem", "3300.0000")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gValorItem|gValorRestaItem|dPorcDesIt", "20.0000")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gValorItem|gValorRestaItem|dTotOpeItem", "26400.0000")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gCamIVA|iAfecIVA", "1")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gCamIVA|dDesAfecIVA", "Gravado IVA")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gCamIVA|dPropIVA", "100")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gCamIVA|dTasaIVA", "5")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gCamIVA|dBasGravIVA", "25142.8571")
xmlToSign:update_child_content("DE|gDtipDE|gCamItem|gCamIVA|dLiqIVAItem", "1257.1429")
xmlToSign:update_child_content("DE|gTotSub|dSubExe", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dSub5", "26400.0000")
xmlToSign:update_child_content("DE|gTotSub|dSub10", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dTotOpe", "26400.0000")
xmlToSign:update_child_content("DE|gTotSub|dTotDesc", "6600.0000")
xmlToSign:update_child_content("DE|gTotSub|dTotDescGlotem", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dTotAntItem", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dTotAnt", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dPorcDescTotal", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dDescTotal", "6600.0000")
xmlToSign:update_child_content("DE|gTotSub|dAnticipo", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dRedon", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dTotGralOpe", "26400.0000")
xmlToSign:update_child_content("DE|gTotSub|dIVA5", "1257.1429")
xmlToSign:update_child_content("DE|gTotSub|dIVA10", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dTotIVA", "1257.1429")
xmlToSign:update_child_content("DE|gTotSub|dBaseGrav5", "25142.8571")
xmlToSign:update_child_content("DE|gTotSub|dBaseGrav10", "0.0000")
xmlToSign:update_child_content("DE|gTotSub|dTBasGraIVA", "25142.8571")

local gen = chilkat.XmlDSigGen.new()

gen.sig_location = "rDE"
gen.sig_location_mod = 0
gen.sig_namespace_prefix = ""
gen.sig_namespace_uri = "http://www.w3.org/2000/09/xmldsig#"
gen.signed_info_canon_alg = "C14N"
gen.signed_info_digest_method = "sha256"

-- -------- Reference 1 --------
local xml1 = chilkat.Xml.new()
xml1.tag = "Transforms"
xml1:update_attr_at("Transform", true, "Algorithm", "http://www.w3.org/2000/09/xmldsig#enveloped-signature")
xml1:update_attr_at("Transform[1]", true, "Algorithm", "http://www.w3.org/2001/10/xml-exc-c14n#")

gen:add_same_doc_ref2("01800228774059001001501012022091516941989060", "sha256", xml1, "")

-- Provide a certificate + private key. (PFX password is test123)
local cert = chilkat.Cert.new()
success = cert:load_pfx_file("qa_data/pfx/cert_test123.pfx", "test123")
if not success then
    print(cert.last_error_text)
    return
end

gen:set_x509_cert(cert, true)

gen.key_info_type = "X509Data"
gen.x509_type = "Certificate"

-- Load XML to be signed...
local sbXml = chilkat.StringBuilder.new()
xmlToSign:get_xml_sb(sbXml)

gen.behaviors = "IndentedSignature"

-- Sign the XML...
success = gen:create_xml_dsig_sb(sbXml)
if not success then
    print(gen.last_error_text)
    return
end

-- -----------------------------------------------

-- Save the signed XML to a file.
success = sbXml:write_file("c:/temp/qa_output/signedXml.xml", "utf-8", false)

print(sbXml:get_as_string())

-- ----------------------------------------
-- Verify the signatures we just produced...
local verifier = chilkat.XmlDSig.new()
success = verifier:load_signature_sb(sbXml)
if not success then
    print(verifier.last_error_text)
    return
end

local numSigs = verifier.num_signatures
local verifyIdx = 0
while verifyIdx < numSigs do
    verifier.selector = verifyIdx
    local verified = verifier:verify_signature(true)
    if not verified then
        print(verifier.last_error_text)
        return
    end

    verifyIdx = verifyIdx + 1
end

print("All signatures were successfully verified.")