(Chilkat2-Python) SII XML Digital Signature

Example for SII XML Digital Signature.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

success = True

# Load the XML to be signed.
xmlToSign = chilkat2.Xml()
success = xmlToSign.LoadXmlFile("c:/aaworkarea/eduardo/sii_unsigned.xml")
if (success == False):
    print(xmlToSign.LastErrorText)
    sys.exit()

# The sample XML to be signed looks like this:

# <?xml version="1.0" encoding="ISO-8859-1"?>
# <EnvioDTE xmlns="http://www.sii.cl/SiiDte" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sii.cl/SiiDte EnvioDTE_v10.xsd" version="1.0">
# <SetDTE ID="SetDocF0T33_20240425_170512">
#  <Caratula version="1.0">
#   <RutEmisor>99999999-4</RutEmisor>
#   <RutEnvia>12345678-6</RutEnvia>
#   <RutReceptor>888888000-K</RutReceptor>
#   <FchResol>2014-08-22</FchResol>
#   <NroResol>80</NroResol>
#   <TmstFirmaEnv>2024-04-25T17:05:13</TmstFirmaEnv>
#   <SubTotDTE>
#    <TpoDTE>33</TpoDTE>
#    <NroDTE>1</NroDTE>
#   </SubTotDTE>
#  </Caratula>
# <DTE version="1.0">
# <Documento ID="F555T55">
# ...
# </Documento>
# </EnvioDTE>

gen = chilkat2.XmlDSigGen()

gen.SigLocation = "EnvioDTE|SetDTE|DTE"
gen.SigLocationMod = 0
gen.SigNamespacePrefix = ""
gen.SigNamespaceUri = "http://www.w3.org/2000/09/xmldsig#"
gen.SignedInfoCanonAlg = "C14N"
gen.SignedInfoDigestMethod = "sha1"

# -------- Reference 1 --------
xml1 = chilkat2.Xml()
xml1.Tag = "Transforms"
xml1.UpdateAttrAt("Transform",True,"Algorithm","http://www.w3.org/TR/2001/REC-xml-c14n-20010315")

gen.AddSameDocRef2("F511T33","sha1",xml1,"")

# Provide a certificate + private key. (PFX password is test123)
cert = chilkat2.Cert()
success = cert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123")
if (success != True):
    print(cert.LastErrorText)
    sys.exit()

gen.SetX509Cert(cert,True)

gen.KeyInfoType = "X509Data+KeyValue"
gen.X509Type = "Certificate"

# Load XML to be signed...
sbXml = chilkat2.StringBuilder()
xmlToSign.GetXmlSb(sbXml)

gen.Behaviors = "IndentedSignature"

# Sign the XML...
success = gen.CreateXmlDSigSb(sbXml)
if (success != True):
    print(gen.LastErrorText)
    sys.exit()

# -----------------------------------------------

# Save the signed XML to a file.
success = sbXml.WriteFile("c:/temp/qa_output/signedXml.xml","utf-8",False)

print(sbXml.GetAsString())

# ----------------------------------------
# Verify the signatures we just produced...
verifier = chilkat2.XmlDSig()
success = verifier.LoadSignatureSb(sbXml)
if (success != True):
    print(verifier.LastErrorText)
    sys.exit()

numSigs = verifier.NumSignatures
verifyIdx = 0
while verifyIdx < numSigs :
    verifier.Selector = verifyIdx
    verified = verifier.VerifySignature(True)
    if (verified != True):
        print(verifier.LastErrorText)
        sys.exit()

    verifyIdx = verifyIdx + 1

print("All signatures were successfully verified.")