(C#) Sign Manifest File to Generate a Passbook .pkpass file

Demonstrates how to create a Passbook .pkpass archive by creating a signature of a manifest file and then zipping to a .pkpass archive.

Chilkat .NET Downloads Chilkat .NET Framework Chilkat for .NET Core

// Note: Requires Chilkat v9.5.0.75 or greater.

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// ---------------------------------------------------------------------------------------------
// Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
// See this example:  Sign Manifest File to Generate a Passbook .pkpass in Memory
// ---------------------------------------------------------------------------------------------

// First create the manifest.json
bool success;
Chilkat.JsonObject manifest = new Chilkat.JsonObject();
Chilkat.Crypt2 crypt = new Chilkat.Crypt2();

Chilkat.Zip zip = new Chilkat.Zip();
zip.NewZip("qa_data/p7s/pass-wallet/example.pkpass");
// Set the AppendFromDir property to prevent that relative paths from being stored in the .pkpass archive.
zip.AppendFromDir = "qa_data/p7s/pass-wallet/";

crypt.HashAlgorithm = "sha1";
// Return hashes as lowercase hex.
crypt.EncodingMode = "hexlower";

string fileHash;
string filePath;
filePath = "qa_data/p7s/pass-wallet/icon.png";
fileHash = crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir("icon.png",false);
manifest.UpdateString("\"icon.png\"",fileHash);

filePath = "qa_data/p7s/pass-wallet/icon@2x.png";
fileHash = crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir("icon@2x.png",false);
manifest.UpdateString("\"icon@2x.png\"",fileHash);

filePath = "qa_data/p7s/pass-wallet/logo.png";
fileHash = crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir("logo.png",false);
manifest.UpdateString("\"logo.png\"",fileHash);

filePath = "qa_data/p7s/pass-wallet/logo@2x.png";
fileHash = crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir("logo@2x.png",false);
manifest.UpdateString("\"logo@2x.png\"",fileHash);

filePath = "qa_data/p7s/pass-wallet/pass.json";
fileHash = crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir("pass.json",false);
manifest.UpdateString("\"pass.json\"",fileHash);

Chilkat.StringBuilder sbJson = new Chilkat.StringBuilder();
manifest.EmitSb(sbJson);
string manifestPath = "qa_data/p7s/pass-wallet/manifest.json";
sbJson.WriteFile(manifestPath,"utf-8",false);
zip.AppendOneFileOrDir("manifest.json",false);

// Make sure we have the Apple WWDR intermediate certificate available for 
// the cert chain in the signature.
Chilkat.XmlCertVault certVault = new Chilkat.XmlCertVault();
Chilkat.Cert appleWwdrCert = new Chilkat.Cert();
success = appleWwdrCert.LoadByCommonName("Apple Worldwide Developer Relations Certification Authority");
if (success != true) {
    Debug.WriteLine("The Apple WWDR intermediate certificate is not installed.");
    Debug.WriteLine("It is available at https://developer.apple.com/certificationauthority/AppleWWDRCA.cer");
    Debug.WriteLine("You may alternatively load the .cer like this...");
    success = appleWwdrCert.LoadFromFile("qa_data/certs/AppleWWDRCA.cer");
    if (success != true) {
        Debug.WriteLine(appleWwdrCert.LastErrorText);
        return;
    }

}

certVault.AddCert(appleWwdrCert);
crypt.UseCertVault(certVault);

// Use a digital certificate and private key from a PFX file (.pfx or .p12).
string pfxPath = "qa_data/pfx/cert_test123.pfx";
string pfxPassword = "test123";

Chilkat.Cert cert = new Chilkat.Cert();
success = cert.LoadPfxFile(pfxPath,pfxPassword);
if (success != true) {
    Debug.WriteLine(cert.LastErrorText);
    return;
}

// Provide the signing cert (with associated private key).
success = crypt.SetSigningCert(cert);
if (success != true) {
    Debug.WriteLine(crypt.LastErrorText);
    return;
}

// Specify the signed attributes to be included.
// (These attributes appear to not be necessary, but we're including
// them just in case they become necessary in the future.)
Chilkat.JsonObject jsonSignedAttrs = new Chilkat.JsonObject();
jsonSignedAttrs.UpdateInt("contentType",1);
jsonSignedAttrs.UpdateInt("signingTime",1);
crypt.SigningAttributes = jsonSignedAttrs.Emit();

// Sign the manifest JSON file to produce a file named "signature".
string sigPath = "qa_data/p7s/pass-wallet/signature";

// Create the "signature" file.
success = crypt.CreateP7S(manifestPath,sigPath);
if (success == false) {
    Debug.WriteLine(crypt.LastErrorText);
    return;
}

zip.AppendOneFileOrDir("signature",false);

// ---------------------------------------------------------------------------------------------
// Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
// If this is of interest, please send email to support@chilkatsoft.com
// ---------------------------------------------------------------------------------------------

// Create the .pkipass archive (which is a .zip archive containing the required files).
success = zip.WriteZipAndClose();
if (success != true) {
    Debug.WriteLine(zip.LastErrorText);
    return;
}

Debug.WriteLine("Success.");