(AutoIt) Create XAdES using Smart Card or USB Token

Demonstrates how to create an XAdES signed XML document using a certificate located on a smartcard or USB token.

Note: This example requires Chilkat v9.5.0.75 or greater. Also, at the time of this writing this example is restricted to the Windows operating system.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

; ----------------------------------------------------------------------
; IMPORTANT: This generated example requires Chilkat v9.5.0.75 or later.
; Contact support@chilkatsoft.com for a pre-release.
; ----------------------------------------------------------------------

; Load the XML to be signed.
$oXmlToSign = ObjCreate("Chilkat.Xml")
Local $bSuccess = $oXmlToSign.LoadXmlFile("qa_data/fattura_electronica/docToSign.xml")
If ($bSuccess <> True) Then
    ConsoleWrite($oXmlToSign.LastErrorText & @CRLF)
    Exit
EndIf

$oGen = ObjCreate("Chilkat.XmlDSigGen")

$oGen.SigLocation = "p:FatturaElettronica"
$oGen.SigId = "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504"
$oGen.SigNamespacePrefix = "ds"
$oGen.SigNamespaceUri = "http://www.w3.org/2000/09/xmldsig#"
$oGen.SigValueId = "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-sigvalue"
$oGen.SignedInfoCanonAlg = "C14N"
$oGen.SignedInfoDigestMethod = "sha256"

; Create an Object to be added to the Signature.
; Note: Chilkat will automatically populate the strings indicated by "TO BE GENERATED BY CHILKAT" with actual/correct values
; when the XML is signed.
$oObject1 = ObjCreate("Chilkat.Xml")
$oObject1.Tag = "xades:QualifyingProperties"
$oObject1.AddAttribute("xmlns:xades","http://uri.etsi.org/01903/v1.3.2#")
$oObject1.AddAttribute("xmlns:xades141","http://uri.etsi.org/01903/v1.4.1#")
$oObject1.AddAttribute("Target","#xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504")
$oObject1.UpdateAttrAt("xades:SignedProperties",True,"Id","xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-signedprops")
$oObject1.UpdateChildContent "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningTime","TO BE GENERATED BY CHILKAT"
$oObject1.UpdateAttrAt("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:CertDigest|ds:DigestMethod",True,"Algorithm","http://www.w3.org/2001/04/xmlenc#sha256")
$oObject1.UpdateChildContent "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:CertDigest|ds:DigestValue","TO BE GENERATED BY CHILKAT"
$oObject1.UpdateChildContent "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:IssuerSerial|ds:X509IssuerName","TO BE GENERATED BY CHILKAT"
$oObject1.UpdateChildContent "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:IssuerSerial|ds:X509SerialNumber","TO BE GENERATED BY CHILKAT"

$oGen.AddObject("",$oObject1.GetXml(),"","")

; -------- Reference 1 --------
$oGen.KeyInfoId = "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-keyinfo"
$oGen.AddSameDocRef("xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-keyinfo","sha256","","","")

; -------- Reference 2 --------
$oGen.AddSameDocRef("","sha256","","","")
$oGen.SetRefIdAttr("","xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-ref0")

; -------- Reference 3 --------
$oGen.AddObjectRef("xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-signedprops","sha256","","","http://uri.etsi.org/01903#SignedProperties")

; ----------------------------------------------------------------
;  Load a certificate that has been pre-installed on the Windows system
;  This includes certificates on smartcards and USB tokens
$oCert = ObjCreate("Chilkat.Cert")

;  You may provide the PIN here..
$oCert.SmartCardPin = "000000"

; Load the certificate on the smartcard currently in the reader (or on the USB token).
; Pass an empty string to allow Chilkat to automatically choose the CSP (Cryptographi Service Provider).
; See Load Certificate on Smartcard for information about explicitly selecting a particular CSP.
$bSuccess = $oCert.LoadFromSmartcard("")
If ($bSuccess <> True) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    Exit
EndIf

$oGen.SetX509Cert($oCert,True)
$oGen.KeyInfoType = "X509Data"
$oGen.X509Type = "Certificate"

; Load XML to be signed...
$oSbXml = ObjCreate("Chilkat.StringBuilder")
$oXmlToSign.GetXmlSb($oSbXml)

$oGen.Behaviors = "IndentedSignature,ForceAddEnvelopedSignatureTransform"

; Sign the XML...
$bSuccess = $oGen.CreateXmlDSigSb($oSbXml)
If ($bSuccess <> True) Then
    ConsoleWrite($oGen.LastErrorText & @CRLF)
    Exit
EndIf

; Save the signed XMl to a file.
$bSuccess = $oSbXml.WriteFile("qa_output/signedXml.xml","utf-8",False)

ConsoleWrite($oSbXml.GetAsString() & @CRLF)

; ----------------------------------------
; Verify the signature we just produced...
$oVerifier = ObjCreate("Chilkat.XmlDSig")
$bSuccess = $oVerifier.LoadSignatureSb($oSbXml)
If ($bSuccess <> True) Then
    ConsoleWrite($oVerifier.LastErrorText & @CRLF)
    Exit
EndIf

Local $bVerified = $oVerifier.VerifySignature(True)
If ($bVerified <> True) Then
    ConsoleWrite($oVerifier.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite("This signature was successfully verified." & @CRLF)