Lua Requires Chilkat v11.0.0+

Sign Mexico Pedimento

See more Misc Examples

Add a signature to a Mexico pedimento file. Lua

local chilkat = require("chilkat")

-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

-- This is the contents before signing:

-- 500|1|3621|4199800|400||
-- 601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||
-- 507|4199800|IM|2006-7888">
-- 507|4199800|MS|2">
-- 800|4199800|1">
-- 801|M3621037.222|1|5|011|

-- This is the contents after signing

-- 500|1|3621|4199800|400||
-- 601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||
-- 507|4199800|IM|2006-7888">
-- 507|4199800|MS|2">
-- 800|4199800|1|fhP2Ker54D2+3+UZch23F0E72 .... 9qNSPIuAqpj524qLZbbA==|30001000000500003416|
-- 801|M3621037.222|1|5|011|

-- First create the text to be signed.
local bCRLF = true
local sb = chilkat.StringBuilder.new()
-- Use CRLF line endings.
sb:append_line("500|1|3621|4199800|400||", bCRLF)
sb:append_line("601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||", bCRLF)
sb:append_line("507|4199800|IM|2006-7888">", bCRLF)
sb:append_line("507|4199800|MS|2">", bCRLF)

-- Generate the MD5 hash of what we have so far..
local md5_base64 = sb:get_hash("md5", "base64", "utf-8")
print("MD5 hash = " .. md5_base64)

-- Complete the original file.
-- After signing, we'll update the BASE64_SIGNATURE and CERT_SERIAL
sb:append_line("800|4199800|1|BASE64_SIGNATURE|CERT_SERIAL|", bCRLF)
sb:append_line("801|M3621037.222|1|5|011|", bCRLF)

-- We're going to sign the MD5 hash using the private key.
local privKey = chilkat.PrivateKey.new()
local success = privKey:load_any_format_file("qa_data/certs/mexico_test/Certificados_de_Prueba/Certificados_Pruebas/Personas Morales/EKU9003173C9_20230517223532/CSD_EKU9003173C9_20230517223903/CSD_Sucursal_1_EKU9003173C9_20230517_223850.key", "12345678a")
if not success then
    print(privKey.last_error_text)
    return
end

-- Generate the ASN.1 to be signed.

-- <sequence>
--     <sequence>
--         <oid>1.2.840.113549.2.5</oid>
--         <null/>
--     </sequence>
--     <octets>SwxHfaJhG+N3pPqay6UzVA==</octets>
-- </sequence>

local xml = chilkat.Xml.new()
xml.tag = "sequence"
xml:update_child_content("sequence|oid", "1.2.840.113549.2.5")
xml:update_child_content("sequence|null", "")
xml:update_child_content("octets", md5_base64)

local asn = chilkat.Asn.new()
asn:load_asn_xml(xml:get_xml())
print("ASN.1 = " .. asn:get_encoded_der("base64"))

-- Sign with the private key.
local rsa = chilkat.Rsa.new()
success = rsa:use_private_key(privKey)
if not success then
    print(rsa.last_error_text)
    return
end

-- Create the opaque signature.
local bdSig = chilkat.BinData.new()
bdSig:append_encoded(asn:get_encoded_der("base64"), "base64")
success = rsa:sign_raw_bd(bdSig)
if not success then
    print(rsa.last_error_text)
    return
end

-- bd now contains the opaque signature, which embeds the ASN.1, which contains the MD5 hash.
-- We're going to add this line:
-- 800|4199800|1|BASE64_SIGNATURE|CERT_SERIAL_NUM|

local cert = chilkat.Cert.new()
success = cert:load_from_file("qa_data/certs/mexico_test/Certificados_de_Prueba/Certificados_Pruebas/Personas Morales/EKU9003173C9_20230517223532/CSD_EKU9003173C9_20230517223903/CSD_Sucursal_1_EKU9003173C9_20230517_223850.cer")
if not success then
    print(cert.last_error_text)
    return
end

local serialHex = cert.serial_number
-- The serial in hex form looks like this:   3330303031303030303030353030303033343136
-- Decode to us-ascii.
local sbSerial = chilkat.StringBuilder.new()
sbSerial:decode_and_append(serialHex, "hex", "us-ascii")
print("serial number in us-ascii: " .. sbSerial:get_as_string())

local numReplaced = sb:replace("CERT_SERIAL", sbSerial:get_as_string())
numReplaced = sb:replace("BASE64_SIGNATURE", bdSig:get_encoded("base64"))

print("------------------------------------")
print("Result:")
print(sb:get_as_string())