PHP

Create XAdES using Smart Card or USB Token

See more XAdES Examples

Demonstrates how to create an XAdES signed XML document using a certificate located on a smartcard or USB token. Chilkat2 PHP

<?php

use Chilkat2\Cert;
use Chilkat2\StringBuilder;
use Chilkat2\Xml;
use Chilkat2\XmlDSig;
use Chilkat2\XmlDSigGen;

// Load the XML to be signed.
$xmlToSign = new Xml();
try {
    $xmlToSign->LoadXmlFile('qa_data/fattura_electronica/docToSign.xml');

    $gen = new XmlDSigGen();

    $gen->SigLocation = 'p:FatturaElettronica';
    $gen->SigId = 'xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504';
    $gen->SigNamespacePrefix = 'ds';
    $gen->SigNamespaceUri = 'http://www.w3.org/2000/09/xmldsig#';
    $gen->SigValueId = 'xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-sigvalue';
    $gen->SignedInfoCanonAlg = 'C14N';
    $gen->SignedInfoDigestMethod = 'sha256';

    // Create an Object to be added to the Signature.
    // Note: Chilkat will automatically populate the strings indicated by "TO BE GENERATED BY CHILKAT" with actual/correct values
    // when the XML is signed.
    $object1 = new Xml();
    $object1->Tag = 'xades:QualifyingProperties';
    $object1->AddAttribute('xmlns:xades', 'http://uri.etsi.org/01903/v1.3.2#');
    $object1->AddAttribute('xmlns:xades141', 'http://uri.etsi.org/01903/v1.4.1#');
    $object1->AddAttribute('Target', '#xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504');
    $object1->UpdateAttrAt('xades:SignedProperties', true, 'Id', 'xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-signedprops');
    $object1->UpdateChildContent('xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningTime', 'TO BE GENERATED BY CHILKAT');
    $object1->UpdateAttrAt('xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificateV2|xades:Cert|xades:CertDigest|ds:DigestMethod', true, 'Algorithm', 'http://www.w3.org/2001/04/xmlenc#sha256');
    $object1->UpdateChildContent('xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificateV2|xades:Cert|xades:CertDigest|ds:DigestValue', 'TO BE GENERATED BY CHILKAT');
    $object1->UpdateChildContent('xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificateV2|xades:Cert|xades:IssuerSerialV2', 'TO BE GENERATED BY CHILKAT');

    $gen->AddObject('', $object1->GetXml(), '', '');

    // -------- Reference 1 --------
    $gen->KeyInfoId = 'xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-keyinfo';
    $gen->AddSameDocRef('xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-keyinfo', 'sha256', '', '', '');

    // -------- Reference 2 --------
    $gen->AddSameDocRef('', 'sha256', '', '', '');
    $gen->SetRefIdAttr('', 'xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-ref0');

    // -------- Reference 3 --------
    $gen->AddObjectRef('xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-signedprops', 'sha256', '', '', 'http://uri.etsi.org/01903#SignedProperties');

    // ----------------------------------------------------------------
    //  Load a certificate that has been pre-installed on the Windows system
    //  This includes certificates on smartcards and USB tokens
    $cert = new Cert();

    //  You may provide the PIN here..
    $cert->SmartCardPin = '000000';

    // Load the certificate on the smartcard currently in the reader (or on the USB token).
    // Pass an empty string to allow Chilkat to automatically choose the CSP (Cryptographi Service Provider).
    // See Load Certificate on Smartcard for information about explicitly selecting a particular CSP.
    $cert->LoadFromSmartcard('');

    $gen->SetX509Cert($cert, true);
    $gen->KeyInfoType = 'X509Data';
    $gen->X509Type = 'Certificate';

    // Load XML to be signed...
    $sbXml = new StringBuilder();
    $xmlToSign->GetXmlSb($sbXml);

    $gen->Behaviors = 'IndentedSignature,ForceAddEnvelopedSignatureTransform';

    // Sign the XML...
    $gen->CreateXmlDSigSb($sbXml);
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

// Save the signed XMl to a file.
$sbXml->WriteFile('qa_output/signedXml.xml', 'utf-8', false);

echo $sbXml->GetAsString(), "\n";

// ----------------------------------------
// Verify the signature we just produced...
$verifier = new XmlDSig();
try {
    $verifier->LoadSignatureSb($sbXml);

    $verifier->VerifySignature(true);
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

echo "This signature was successfully verified.\n";