(Chilkat2-Python) Sign Manifest File to Generate a Passbook .pkpass in Memory

Demonstrates how to create a Passbook .pkpass archive by creating a signature of a manifest file and then zipping to a .pkpass archive in memory

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# ---------------------------------------------------------------------------------------------
# This example is the same as Sign Manifest File to Generate a Passbook .pkpass file
# except everything happens in memory (no input files, no output files)
# ---------------------------------------------------------------------------------------------

# First create the manifest.json

manifest = chilkat2.JsonObject()
crypt = chilkat2.Crypt2()

zip = chilkat2.Zip()
zip.NewZip("notUsedAndNeverCreated.zip")

crypt.HashAlgorithm = "sha1"
# Return hashes as lowercase hex.
crypt.EncodingMode = "hexlower"

pngData = chilkat2.BinData()
# Assume we load the pngData with bytes for "icon.png" from somewhere, such as a byte array in memory.
# entry is a CkZipEntry
entry = zip.AppendBd("icon.png",pngData)

digestStr = crypt.HashBdENC(pngData)
manifest.UpdateString("\"icon.png\"",digestStr)

pngData.Clear()
# Assume we load the pngData with bytes for "icon@2x.png" from somewhere...
# entry is a CkZipEntry
entry = zip.AppendBd("icon@2x.png",pngData)

digestStr = crypt.HashBdENC(pngData)
manifest.UpdateString("\"icon@2x.png\"",digestStr)

pngData.Clear()
# Assume we load the pngData with bytes for "logo.png" from somewhere...
# entry is a CkZipEntry
entry = zip.AppendBd("logo.png",pngData)

digestStr = crypt.HashBdENC(pngData)
manifest.UpdateString("\"logo.png\"",digestStr)

pngData.Clear()
# Assume we load the pngData with bytes for "logo@2x.png" from somewhere...
# entry is a CkZipEntry
entry = zip.AppendBd("logo@2x.png",pngData)

digestStr = crypt.HashBdENC(pngData)
manifest.UpdateString("\"logo@2x.png\"",digestStr)

passJson = "{ .... }"# Contains the contents of pass.json
# entry is a CkZipEntry
entry = zip.AppendString("pass.json",passJson)

digestStr = crypt.HashStringENC(passJson)
manifest.UpdateString("\"pass.json\"",digestStr)

# entry is a CkZipEntry
entry = zip.AppendString("manifest.json",manifest.Emit())

# Make sure we have the Apple WWDR intermediate certificate available for 
# the cert chain in the signature.
certVault = chilkat2.XmlCertVault()
appleWwdrCert = chilkat2.Cert()
success = appleWwdrCert.LoadByCommonName("Apple Worldwide Developer Relations Certification Authority")
if (success != True):
    print("The Apple WWDR intermediate certificate is not installed.")
    print("It is available at https://developer.apple.com/certificationauthority/AppleWWDRCA.cer")
    print("You may alternatively load the .cer like this...")
    success = appleWwdrCert.LoadFromFile("qa_data/certs/AppleWWDRCA.cer")
    if (success != True):
        print(appleWwdrCert.LastErrorText)
        sys.exit()

certVault.AddCert(appleWwdrCert)
crypt.UseCertVault(certVault)

# Use a digital certificate and private key from a PFX
bdPfx = chilkat2.BinData()
# Assume we loaded a PFX into bdPfx....
pfxPassword = "test123"

cert = chilkat2.Cert()
success = cert.LoadPfxBd(bdPfx,pfxPassword)
if (success != True):
    print(cert.LastErrorText)
    sys.exit()

# Provide the signing cert (with associated private key).
success = crypt.SetSigningCert(cert)
if (success != True):
    print(crypt.LastErrorText)
    sys.exit()

# Specify the signed attributes to be included.
# (These attributes appear to not be necessary, but we're including
# them just in case they become necessary in the future.)
jsonSignedAttrs = chilkat2.JsonObject()
jsonSignedAttrs.UpdateInt("contentType",1)
jsonSignedAttrs.UpdateInt("signingTime",1)
crypt.SigningAttributes = jsonSignedAttrs.Emit()

# Sign the manifest JSON to produce a signature
crypt.EncodingMode = "base64"
sig = crypt.SignStringENC(manifest.Emit())
bdSig = chilkat2.BinData()
bdSig.AppendEncoded(sig,"base64")
# entry is a CkZipEntry
entry = zip.AppendBd("signature",bdSig)

# ---------------------------------------------------------------------------------------------
# Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
# If this is of interest, please send email to support@chilkatsoft.com
# ---------------------------------------------------------------------------------------------

# Create the .pkipass archive (which is a .zip archive containing the required files).
# the .zip is written to bdZip
bdZip = chilkat2.BinData()
success = zip.WriteBd(bdZip)
if (success != True):
    print(zip.LastErrorText)
    sys.exit()

print("Success.")