(Delphi ActiveX) Sign Manifest File to Generate a Passbook .pkpass file

Demonstrates how to create a Passbook .pkpass archive by creating a signature of a manifest file and then zipping to a .pkpass archive.

Note: Chilkat also has the capability to do everything in-memory (no files would be involved). If this is of interest, please send email to support@chilkatsoft.com

Note: This example requires Chilkat v9.5.0.75.

Chilkat for Delphi Downloads Chilkat ActiveX DLL for Delphi Chilkat non-ActiveX DLL for Delphi * The examples here use the ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Integer;
manifest: TChilkatJsonObject;
crypt: TChilkatCrypt2;
zip: TChilkatZip;
fileHash: WideString;
filePath: WideString;
sbJson: TChilkatStringBuilder;
manifestPath: WideString;
certVault: TChilkatXmlCertVault;
appleWwdrCert: TChilkatCert;
pfxPath: WideString;
pfxPassword: WideString;
cert: TChilkatCert;
jsonSignedAttrs: TChilkatJsonObject;
sigPath: WideString;

begin
// Note: Requires Chilkat v9.5.0.75 or greater.

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// ---------------------------------------------------------------------------------------------
// Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
// See this example:  Sign Manifest File to Generate a Passbook .pkpass in Memory
// ---------------------------------------------------------------------------------------------

// First create the manifest.json

manifest := TChilkatJsonObject.Create(Self);
crypt := TChilkatCrypt2.Create(Self);

zip := TChilkatZip.Create(Self);
zip.NewZip('qa_data/p7s/pass-wallet/example.pkpass');
// Set the AppendFromDir property to prevent that relative paths from being stored in the .pkpass archive.
zip.AppendFromDir := 'qa_data/p7s/pass-wallet/';

crypt.HashAlgorithm := 'sha1';
// Return hashes as lowercase hex.
crypt.EncodingMode := 'hexlower';

filePath := 'qa_data/p7s/pass-wallet/icon.png';
fileHash := crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir('icon.png',0);
manifest.UpdateString('"icon.png"',fileHash);

filePath := 'qa_data/p7s/pass-wallet/icon@2x.png';
fileHash := crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir('icon@2x.png',0);
manifest.UpdateString('"icon@2x.png"',fileHash);

filePath := 'qa_data/p7s/pass-wallet/logo.png';
fileHash := crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir('logo.png',0);
manifest.UpdateString('"logo.png"',fileHash);

filePath := 'qa_data/p7s/pass-wallet/logo@2x.png';
fileHash := crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir('logo@2x.png',0);
manifest.UpdateString('"logo@2x.png"',fileHash);

filePath := 'qa_data/p7s/pass-wallet/pass.json';
fileHash := crypt.HashFileENC(filePath);
zip.AppendOneFileOrDir('pass.json',0);
manifest.UpdateString('"pass.json"',fileHash);

sbJson := TChilkatStringBuilder.Create(Self);
manifest.EmitSb(sbJson.ControlInterface);
manifestPath := 'qa_data/p7s/pass-wallet/manifest.json';
sbJson.WriteFile(manifestPath,'utf-8',0);
zip.AppendOneFileOrDir('manifest.json',0);

// Make sure we have the Apple WWDR intermediate certificate available for 
// the cert chain in the signature.
certVault := TChilkatXmlCertVault.Create(Self);
appleWwdrCert := TChilkatCert.Create(Self);
success := appleWwdrCert.LoadByCommonName('Apple Worldwide Developer Relations Certification Authority');
if (success <> 1) then
  begin
    Memo1.Lines.Add('The Apple WWDR intermediate certificate is not installed.');
    Memo1.Lines.Add('It is available at https://developer.apple.com/certificationauthority/AppleWWDRCA.cer');
    Memo1.Lines.Add('You may alternatively load the .cer like this...');
    success := appleWwdrCert.LoadFromFile('qa_data/certs/AppleWWDRCA.cer');
    if (success <> 1) then
      begin
        Memo1.Lines.Add(appleWwdrCert.LastErrorText);
        Exit;
      end;
  end;
certVault.AddCert(appleWwdrCert.ControlInterface);
crypt.UseCertVault(certVault.ControlInterface);

// Use a digital certificate and private key from a PFX file (.pfx or .p12).
pfxPath := 'qa_data/pfx/cert_test123.pfx';
pfxPassword := 'test123';

cert := TChilkatCert.Create(Self);
success := cert.LoadPfxFile(pfxPath,pfxPassword);
if (success <> 1) then
  begin
    Memo1.Lines.Add(cert.LastErrorText);
    Exit;
  end;

// Provide the signing cert (with associated private key).
success := crypt.SetSigningCert(cert.ControlInterface);
if (success <> 1) then
  begin
    Memo1.Lines.Add(crypt.LastErrorText);
    Exit;
  end;

// Specify the signed attributes to be included.
// (These attributes appear to not be necessary, but we're including
// them just in case they become necessary in the future.)
jsonSignedAttrs := TChilkatJsonObject.Create(Self);
jsonSignedAttrs.UpdateInt('contentType',1);
jsonSignedAttrs.UpdateInt('signingTime',1);
crypt.SigningAttributes := jsonSignedAttrs.Emit();

// Sign the manifest JSON file to produce a file named "signature".
sigPath := 'qa_data/p7s/pass-wallet/signature';

// Create the "signature" file.
success := crypt.CreateP7S(manifestPath,sigPath);
if (success = 0) then
  begin
    Memo1.Lines.Add(crypt.LastErrorText);
    Exit;
  end;

zip.AppendOneFileOrDir('signature',0);

// ---------------------------------------------------------------------------------------------
// Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
// If this is of interest, please send email to support@chilkatsoft.com
// ---------------------------------------------------------------------------------------------

// Create the .pkipass archive (which is a .zip archive containing the required files).
success := zip.WriteZipAndClose();
if (success <> 1) then
  begin
    Memo1.Lines.Add(zip.LastErrorText);
    Exit;
  end;

Memo1.Lines.Add('Success.');
end;