Sample code for 30+ languages & platforms
DataFlex

Create XAdES for Malaysia E-Invoice

See more Malaysia MyInvois Examples

This example signs XML to create the required XAdES for Malaysia E-Invoice as described at the following web pages:

https://sdk.myinvois.hasil.gov.my/signature/
https://sdk.myinvois.hasil.gov.my/signature-creation/

Note: This example requires Chilkat 10.0.0 or later.

Chilkat DataFlex Downloads

DataFlex
Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoXmlToSign
    Handle hoGen
    Handle hoObject1
    Variant vXml1
    Handle hoXml1
    Variant vCert
    Handle hoCert
    Variant vSbXml
    Handle hoSbXml
    Handle hoVerifier
    Integer iNumSigs
    Integer iVerifyIdx
    Boolean iVerified
    String sTemp1

    Move False To iSuccess

    Move True To iSuccess

    // Load XML such as the following to be signed:

    // <?xml version="1.0" encoding="utf-8"?>
    // <Invoice xmlns="urn:oasis:names:specification:ubl:schema:xsd:Invoice-2" xmlns:cac="urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2" xmlns:cbc="urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2" xmlns:ext="urn:oasis:names:specification:ubl:schema:xsd:CommonExtensionComponents-2">
    //     <ext:UBLExtensions>
    //         <ext:UBLExtension>
    //             <ext:ExtensionURI>urn:oasis:names:specification:ubl:dsig:enveloped:xades</ext:ExtensionURI>
    //             <ext:ExtensionContent>
    //                 <sig:UBLDocumentSignatures xmlns:sac="urn:oasis:names:specification:ubl:schema:xsd:SignatureAggregateComponents-2" xmlns:sbc="urn:oasis:names:specification:ubl:schema:xsd:SignatureBasicComponents-2" xmlns:sig="urn:oasis:names:specification:ubl:schema:xsd:CommonSignatureComponents-2">
    //                     <sac:SignatureInformation>
    //                         <cbc:ID>urn:oasis:names:specification:ubl:signature:1</cbc:ID>
    //                         <sbc:ReferencedSignatureID>urn:oasis:names:specification:ubl:signature:Invoice</sbc:ReferencedSignatureID>
    //                     </sac:SignatureInformation>
    //                 </sig:UBLDocumentSignatures>
    //             </ext:ExtensionContent>
    //         </ext:UBLExtension>
    //     </ext:UBLExtensions>
    //     <cbc:ID>IV00000105</cbc:ID>
    //     <cbc:IssueDate>2024-07-06</cbc:IssueDate>
    //     <cbc:IssueTime>15:06:00Z</cbc:IssueTime>
    //     <cbc:InvoiceTypeCode listVersionID="1.1">1</cbc:InvoiceTypeCode>
    //     <cbc:DocumentCurrencyCode>MYR</cbc:DocumentCurrencyCode>
    //     <cac:BillingReference>
    //         <cac:AdditionalDocumentReference>
    //             <cbc:ID>IV00000105</cbc:ID>
    //         </cac:AdditionalDocumentReference>
    //     </cac:BillingReference>
    //     <cac:Signature>
    //         <cbc:ID>urn:oasis:names:specification:ubl:signature:Invoice</cbc:ID>
    //         <cbc:SignatureMethod>urn:oasis:names:specification:ubl:dsig:enveloped:xades</cbc:SignatureMethod>
    //     </cac:Signature>
    //     <cac:AccountingSupplierParty>
    //         <cac:Party>
    //             <cbc:IndustryClassificationCode name="Other information technology service activities n.e.c.">62099</cbc:IndustryClassificationCode>
    //             <cac:PartyIdentification>
    //                 <cbc:ID schemeID="TIN">C99999999999</cbc:ID>
    //             </cac:PartyIdentification>
    //             <cac:PartyIdentification>
    //                 <cbc:ID schemeID="BRN">200801099999</cbc:ID>
    //             </cac:PartyIdentification>
    //             <cac:PostalAddress>
    //                 <cbc:CityName>Cheras</cbc:CityName>
    //                 <cbc:PostalZone>56000</cbc:PostalZone>
    //                 <cbc:CountrySubentityCode>14</cbc:CountrySubentityCode>
    //                 <cac:AddressLine>
    //                     <cbc:Line>A-3, 11, Jalan 2/199a,</cbc:Line>
    //                 </cac:AddressLine>
    //                 <cac:AddressLine>
    //                     <cbc:Line>Cheras, 56000 Cheras</cbc:Line>
    //                 </cac:AddressLine>
    //                 <cac:AddressLine>
    //                     <cbc:Line>Wilayah Persekutuan Kuala Lumpur</cbc:Line>
    //                 </cac:AddressLine>
    //                 <cac:Country>
    //                     <cbc:IdentificationCode listAgencyID="6" listID="ISO3166-1">MYS</cbc:IdentificationCode>
    //                 </cac:Country>
    //             </cac:PostalAddress>
    //             <cac:PartyLegalEntity>
    //                 <cbc:RegistrationName>ABC SYSTEMS SERVICES</cbc:RegistrationName>
    //             </cac:PartyLegalEntity>
    //             <cac:Contact>
    //                 <cbc:Telephone>019-626 9999</cbc:Telephone>
    //                 <cbc:ElectronicMail>Info@abc.com.my</cbc:ElectronicMail>
    //             </cac:Contact>
    //         </cac:Party>
    //     </cac:AccountingSupplierParty>
    //     <cac:AccountingCustomerParty>
    //         <cac:Party>
    //             <cac:PartyIdentification>
    //                 <cbc:ID schemeID="TIN">C99999999999</cbc:ID>
    //             </cac:PartyIdentification>
    //             <cac:PartyIdentification>
    //                 <cbc:ID schemeID="BRN">200801099999</cbc:ID>
    //             </cac:PartyIdentification>
    //             <cac:PostalAddress>
    //                 <cbc:CityName>Cheras</cbc:CityName>
    //                 <cbc:PostalZone>56000</cbc:PostalZone>
    //                 <cbc:CountrySubentityCode>14</cbc:CountrySubentityCode>
    //                 <cac:AddressLine>
    //                     <cbc:Line>A-3, 11, Jalan 2/199a,</cbc:Line>
    //                 </cac:AddressLine>
    //                 <cac:AddressLine>
    //                     <cbc:Line>Cheras, 56000 Cheras</cbc:Line>
    //                 </cac:AddressLine>
    //                 <cac:AddressLine>
    //                     <cbc:Line>Cheras, 56000 Cheras</cbc:Line>
    //                 </cac:AddressLine>
    //                 <cac:Country>
    //                     <cbc:IdentificationCode listAgencyID="6" listID="ISO3166-1">MYS</cbc:IdentificationCode>
    //                 </cac:Country>
    //             </cac:PostalAddress>
    //             <cac:PartyLegalEntity>
    //                 <cbc:RegistrationName>ABC SYSTEMS SERVICES</cbc:RegistrationName>
    //             </cac:PartyLegalEntity>
    //             <cac:Contact>
    //                 <cbc:Telephone>019-626 9999</cbc:Telephone>
    //                 <cbc:ElectronicMail>Info@abc.com.my</cbc:ElectronicMail>
    //             </cac:Contact>
    //         </cac:Party>
    //     </cac:AccountingCustomerParty>
    //     <cac:TaxTotal>
    //         <cbc:TaxAmount currencyID="MYR">0</cbc:TaxAmount>
    //         <cac:TaxSubtotal>
    //             <cbc:TaxableAmount currencyID="MYR">40</cbc:TaxableAmount>
    //             <cbc:TaxAmount currencyID="MYR">0</cbc:TaxAmount>
    //             <cac:TaxCategory>
    //                 <cbc:ID>6</cbc:ID>
    //                 <cbc:Percent>0</cbc:Percent>
    //                 <cac:TaxScheme>
    //                     <cbc:ID schemeAgencyID="6" schemeID="UN/ECE 5153">OTH</cbc:ID>
    //                 </cac:TaxScheme>
    //             </cac:TaxCategory>
    //         </cac:TaxSubtotal>
    //     </cac:TaxTotal>
    //     <cac:LegalMonetaryTotal>
    //         <cbc:LineExtensionAmount currencyID="MYR">40</cbc:LineExtensionAmount>
    //         <cbc:TaxExclusiveAmount currencyID="MYR">40</cbc:TaxExclusiveAmount>
    //         <cbc:TaxInclusiveAmount currencyID="MYR">49</cbc:TaxInclusiveAmount>
    //         <cbc:AllowanceTotalAmount currencyID="MYR">0</cbc:AllowanceTotalAmount>
    //         <cbc:PayableAmount currencyID="MYR">49</cbc:PayableAmount>
    //     </cac:LegalMonetaryTotal>
    //     <cac:InvoiceLine>
    //         <cbc:ID>1</cbc:ID>
    //         <cbc:InvoicedQuantity unitCode="H87">2</cbc:InvoicedQuantity>
    //         <cbc:LineExtensionAmount currencyID="MYR">40</cbc:LineExtensionAmount>
    //         <cac:TaxTotal>
    //             <cbc:TaxAmount currencyID="MYR">0</cbc:TaxAmount>
    //             <cac:TaxSubtotal>
    //                 <cbc:TaxableAmount currencyID="MYR">40</cbc:TaxableAmount>
    //                 <cbc:TaxAmount currencyID="MYR">0</cbc:TaxAmount>
    //                 <cac:TaxCategory>
    //                     <cbc:ID>6</cbc:ID>
    //                     <cbc:Percent>0</cbc:Percent>
    //                     <cac:TaxScheme>
    //                         <cbc:ID schemeAgencyID="6" schemeID="UN/ECE 5153">OTH</cbc:ID>
    //                     </cac:TaxScheme>
    //                 </cac:TaxCategory>
    //             </cac:TaxSubtotal>
    //         </cac:TaxTotal>
    //         <cac:Item>
    //             <cbc:Description>Computer Monitor 24 inch</cbc:Description>
    //             <cac:CommodityClassification>
    //                 <cbc:ItemClassificationCode listID="CLASS">3</cbc:ItemClassificationCode>
    //             </cac:CommodityClassification>
    //         </cac:Item>
    //         <cac:Price>
    //             <cbc:PriceAmount currencyID="MYR">20</cbc:PriceAmount>
    //         </cac:Price>
    //         <cac:ItemPriceExtension>
    //             <cbc:Amount currencyID="MYR">40</cbc:Amount>
    //         </cac:ItemPriceExtension>
    //     </cac:InvoiceLine>
    // </Invoice>

    Get Create (RefClass(cComChilkatXml)) To hoXmlToSign
    If (Not(IsComObjectCreated(hoXmlToSign))) Begin
        Send CreateComObject of hoXmlToSign
    End
    Get ComLoadXmlFile Of hoXmlToSign "qa_data/xml/myinvois_notYetSigned.xml" To iSuccess
    If (iSuccess = False) Begin
        Showln "Failed to load the XML to be signed."
        Procedure_Return
    End

    Get Create (RefClass(cComChilkatXmlDSigGen)) To hoGen
    If (Not(IsComObjectCreated(hoGen))) Begin
        Send CreateComObject of hoGen
    End
    // ------------------------------------------------------------------------------------------------
    // This behavior is required for the peculiarities of the MyInvois implementation.
    // It requires Chilkat 10.0.0 or later.
    Set ComBehaviors Of hoGen To "MyInvois"
    // ------------------------------------------------------------------------------------------------

    Set ComSigLocation Of hoGen To "Invoice|ext:UBLExtensions|ext:UBLExtension|ext:ExtensionContent|sig:UBLDocumentSignatures|sac:SignatureInformation"
    Set ComSigLocationMod Of hoGen To 0
    Set ComSigId Of hoGen To "signature"
    Set ComSigNamespacePrefix Of hoGen To "ds"
    Set ComSigNamespaceUri Of hoGen To "http://www.w3.org/2000/09/xmldsig#"
    Set ComSignedInfoCanonAlg Of hoGen To "C14N_11"
    Set ComSignedInfoDigestMethod Of hoGen To "sha256"

    // Create an Object to be added to the Signature.
    Get Create (RefClass(cComChilkatXml)) To hoObject1
    If (Not(IsComObjectCreated(hoObject1))) Begin
        Send CreateComObject of hoObject1
    End
    Set ComTag Of hoObject1 To "xades:QualifyingProperties"
    Get ComAddAttribute Of hoObject1 "xmlns:xades" "http://uri.etsi.org/01903/v1.3.2#" To iSuccess
    Get ComAddAttribute Of hoObject1 "Target" "signature" To iSuccess
    Get ComUpdateAttrAt Of hoObject1 "xades:SignedProperties" True "Id" "id-xades-signed-props" To iSuccess
    Send ComUpdateChildContent To hoObject1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningTime" "TO BE GENERATED BY CHILKAT"
    Get ComUpdateAttrAt Of hoObject1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:CertDigest|ds:DigestMethod" True "Algorithm" "http://www.w3.org/2001/04/xmlenc#sha256" To iSuccess
    Send ComUpdateChildContent To hoObject1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:CertDigest|ds:DigestValue" "TO BE GENERATED BY CHILKAT"
    Send ComUpdateChildContent To hoObject1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:IssuerSerial|ds:X509IssuerName" "TO BE GENERATED BY CHILKAT"
    Send ComUpdateChildContent To hoObject1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:IssuerSerial|ds:X509SerialNumber" "TO BE GENERATED BY CHILKAT"

    Get ComGetXml Of hoObject1 To sTemp1
    Get ComAddObject Of hoGen "" sTemp1 "" "" To iSuccess

    // -------- Reference 1 --------
    Get Create (RefClass(cComChilkatXml)) To hoXml1
    If (Not(IsComObjectCreated(hoXml1))) Begin
        Send CreateComObject of hoXml1
    End
    Set ComTag Of hoXml1 To "ds:Transforms"
    Get ComUpdateAttrAt Of hoXml1 "ds:Transform" True "Algorithm" "http://www.w3.org/TR/1999/REC-xpath-19991116" To iSuccess
    Send ComUpdateChildContent To hoXml1 "ds:Transform|ds:XPath" "not(//ancestor-or-self::ext:UBLExtensions)"
    Get ComUpdateAttrAt Of hoXml1 "ds:Transform[1]" True "Algorithm" "http://www.w3.org/TR/1999/REC-xpath-19991116" To iSuccess
    Send ComUpdateChildContent To hoXml1 "ds:Transform[1]|ds:XPath" "not(//ancestor-or-self::cac:Signature)"
    Get ComUpdateAttrAt Of hoXml1 "ds:Transform[2]" True "Algorithm" "http://www.w3.org/2006/12/xml-c14n11" To iSuccess

    Get pvComObject of hoXml1 to vXml1
    Get ComAddSameDocRef2 Of hoGen "" "sha256" vXml1 "" To iSuccess
    Get ComSetRefIdAttr Of hoGen "" "id-doc-signed-data" To iSuccess

    // -------- Reference 2 --------
    Get ComAddObjectRef Of hoGen "id-xades-signed-props" "sha256" "" "" "http://www.w3.org/2000/09/xmldsig#SignatureProperties" To iSuccess

    // Provide a certificate + private key. (PFX password is test123)
    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End
    Get ComLoadPfxFile Of hoCert "qa_data/pfx/cert_test123.pfx" "test123" To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCert To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get pvComObject of hoCert to vCert
    Get ComSetX509Cert Of hoGen vCert True To iSuccess

    Set ComKeyInfoType Of hoGen To "X509Data"
    Set ComX509Type Of hoGen To "Certificate"

    // Load XML to be signed...
    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbXml
    If (Not(IsComObjectCreated(hoSbXml))) Begin
        Send CreateComObject of hoSbXml
    End
    Set ComEmitCompact Of hoXmlToSign To True
    Get pvComObject of hoSbXml to vSbXml
    Get ComGetXmlSb Of hoXmlToSign vSbXml To iSuccess

    // Sign the XML...
    Get pvComObject of hoSbXml to vSbXml
    Get ComCreateXmlDSigSb Of hoGen vSbXml To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoGen To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // -----------------------------------------------

    // Save the signed XML to a file.
    Get ComWriteFile Of hoSbXml "c:/temp/qa_output/signedXml.xml" "utf-8" False To iSuccess

    Get ComGetAsString Of hoSbXml To sTemp1
    Showln sTemp1

    // ----------------------------------------
    // Verify the signatures we just produced...
    Get Create (RefClass(cComChilkatXmlDSig)) To hoVerifier
    If (Not(IsComObjectCreated(hoVerifier))) Begin
        Send CreateComObject of hoVerifier
    End
    Get pvComObject of hoSbXml to vSbXml
    Get ComLoadSignatureSb Of hoVerifier vSbXml To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoVerifier To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // ----------------------------------------
    // Make sure to indicate that we are verifying a MyInvois signature
    // This is because MyInvois does things in a non-standard way..
    Set ComUncommonOptions Of hoVerifier To "MyInvois"
    // ----------------------------------------

    Get ComNumSignatures Of hoVerifier To iNumSigs
    Move 0 To iVerifyIdx
    While (iVerifyIdx < iNumSigs)
        Set ComSelector Of hoVerifier To iVerifyIdx
        Get ComVerifySignature Of hoVerifier True To iVerified
        If (iVerified <> True) Begin
            Get ComLastErrorText Of hoVerifier To sTemp1
            Showln sTemp1
            Procedure_Return
        End

        Move (iVerifyIdx + 1) To iVerifyIdx
    Loop

    Showln "All signatures were successfully verified."


End_Procedure