Xbase++
SII XML Digital Signature

Example for SII XML Digital Signature.
Chilkat Xbase++ Downloads

Xbase++
LOCAL nSuccess
LOCAL oXmlToSign
LOCAL oGen
LOCAL oXml1
LOCAL oCert
LOCAL oSbXml
LOCAL oVerifier
LOCAL nNumSigs
LOCAL nVerifyIdx
LOCAL nVerified

nSuccess := 0

nSuccess := 1

//  Load the XML to be signed.
oXmlToSign := CreateObject("Chilkat.Xml")
nSuccess := oXmlToSign:LoadXmlFile("c:/aaworkarea/eduardo/sii_unsigned.xml")
IF (nSuccess == 0)
    ? oXmlToSign:LastErrorText
    oXmlToSign:destroy()
    RETURN
ENDIF

//  The sample XML to be signed looks like this:

//  <?xml version="1.0" encoding="ISO-8859-1"?>
//  <EnvioDTE xmlns="http://www.sii.cl/SiiDte" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sii.cl/SiiDte EnvioDTE_v10.xsd" version="1.0">
//  <SetDTE ID="SetDocF0T33_20240425_170512">
//   <Caratula version="1.0">
//    <RutEmisor>99999999-4</RutEmisor>
//    <RutEnvia>12345678-6</RutEnvia>
//    <RutReceptor>888888000-K</RutReceptor>
//    <FchResol>2014-08-22</FchResol>
//    <NroResol>80</NroResol>
//    <TmstFirmaEnv>2024-04-25T17:05:13</TmstFirmaEnv>
//    <SubTotDTE>
//     <TpoDTE>33</TpoDTE>
//     <NroDTE>1</NroDTE>
//    </SubTotDTE>
//   </Caratula>
//  <DTE version="1.0">
//  <Documento ID="F555T55">
//  ...
//  </Documento>
//  </EnvioDTE>

oGen := CreateObject("Chilkat.XmlDSigGen")

oGen:SigLocation := "EnvioDTE|SetDTE|DTE"
oGen:SigLocationMod := 0
oGen:SigNamespacePrefix := ""
oGen:SigNamespaceUri := "http://www.w3.org/2000/09/xmldsig#"
oGen:SignedInfoCanonAlg := "C14N"
oGen:SignedInfoDigestMethod := "sha1"

//  -------- Reference 1 --------
oXml1 := CreateObject("Chilkat.Xml")
oXml1:Tag := "Transforms"
oXml1:UpdateAttrAt("Transform", 1, "Algorithm", "http://www.w3.org/TR/2001/REC-xml-c14n-20010315")

oGen:AddSameDocRef2("F511T33", "sha1", oXml1, "")

//  Provide a certificate + private key. (PFX password is test123)
oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadPfxFile("qa_data/pfx/cert_test123.pfx", "test123")
IF (nSuccess != 1)
    ? oCert:LastErrorText
    oXmlToSign:destroy()
    oGen:destroy()
    oXml1:destroy()
    oCert:destroy()
    RETURN
ENDIF

oGen:SetX509Cert(oCert, 1)

oGen:KeyInfoType := "X509Data+KeyValue"
oGen:X509Type := "Certificate"

//  Load XML to be signed...
oSbXml := CreateObject("Chilkat.StringBuilder")
oXmlToSign:GetXmlSb(oSbXml)

oGen:Behaviors := "IndentedSignature"

//  Sign the XML...
nSuccess := oGen:CreateXmlDSigSb(oSbXml)
IF (nSuccess != 1)
    ? oGen:LastErrorText
    oXmlToSign:destroy()
    oGen:destroy()
    oXml1:destroy()
    oCert:destroy()
    oSbXml:destroy()
    RETURN
ENDIF

//  -----------------------------------------------

//  Save the signed XML to a file.
nSuccess := oSbXml:WriteFile("c:/temp/qa_output/signedXml.xml", "utf-8", 0)

? oSbXml:GetAsString()

//  ----------------------------------------
//  Verify the signatures we just produced...
oVerifier := CreateObject("Chilkat.XmlDSig")
nSuccess := oVerifier:LoadSignatureSb(oSbXml)
IF (nSuccess != 1)
    ? oVerifier:LastErrorText
    oXmlToSign:destroy()
    oGen:destroy()
    oXml1:destroy()
    oCert:destroy()
    oSbXml:destroy()
    oVerifier:destroy()
    RETURN
ENDIF

nNumSigs := oVerifier:NumSignatures
nVerifyIdx := 0
DO WHILE nVerifyIdx < nNumSigs
    oVerifier:Selector := nVerifyIdx
    nVerified := oVerifier:VerifySignature(1)
    IF (nVerified != 1)
        ? oVerifier:LastErrorText
        oXmlToSign:destroy()
        oGen:destroy()
        oXml1:destroy()
        oCert:destroy()
        oSbXml:destroy()
        oVerifier:destroy()
        RETURN
    ENDIF

    nVerifyIdx := nVerifyIdx + 1
ENDDO
? "All signatures were successfully verified."

oXmlToSign:destroy()
oGen:destroy()
oXml1:destroy()
oCert:destroy()
oSbXml:destroy()
oVerifier:destroy()