Delphi ActiveX Requires Chilkat v11.0.0+

Sign Manifest File to Generate a Passbook .pkpass file

See more Digital Signatures Examples

Demonstrates how to create a Passbook .pkpass archive by creating a signature of a manifest file and then zipping to a .pkpass archive.

Note: Chilkat also has the capability to do everything in-memory (no files would be involved). If this is of interest, please send email to support@chilkatsoft.com

Delphi ActiveX

var
success: Integer;
manifest: TChilkatJsonObject;
crypt: TChilkatCrypt2;
zip: TChilkatZip;
fileHash: WideString;
filePath: WideString;
sbJson: TChilkatStringBuilder;
manifestPath: WideString;
certVault: TChilkatXmlCertVault;
appleWwdrCert: TChilkatCert;
pfxPath: WideString;
pfxPassword: WideString;
cert: TChilkatCert;
jsonSignedAttrs: TChilkatJsonObject;
sigPath: WideString;

begin
success := 0;

//  This requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  ---------------------------------------------------------------------------------------------
//  Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
//  See this example:  Sign Manifest File to Generate a Passbook .pkpass in Memory
//  ---------------------------------------------------------------------------------------------

//  First create the manifest.json

manifest := TChilkatJsonObject.Create(Self);
crypt := TChilkatCrypt2.Create(Self);

zip := TChilkatZip.Create(Self);
zip.NewZip('qa_data/p7s/pass-wallet/example.pkpass');
//  Set the AppendFromDir property to prevent that relative paths from being stored in the .pkpass archive.
zip.AppendFromDir := 'qa_data/p7s/pass-wallet/';

crypt.HashAlgorithm := 'sha1';
//  Return hashes as lowercase hex.
crypt.EncodingMode := 'hexlower';

filePath := 'qa_data/p7s/pass-wallet/icon.png';
fileHash := crypt.HashFileENC(filePath);
zip.AddFile('icon.png',0);
manifest.UpdateString('"icon.png"',fileHash);

filePath := 'qa_data/p7s/pass-wallet/icon@2x.png';
fileHash := crypt.HashFileENC(filePath);
zip.AddFile('icon@2x.png',0);
manifest.UpdateString('"icon@2x.png"',fileHash);

filePath := 'qa_data/p7s/pass-wallet/logo.png';
fileHash := crypt.HashFileENC(filePath);
zip.AddFile('logo.png',0);
manifest.UpdateString('"logo.png"',fileHash);

filePath := 'qa_data/p7s/pass-wallet/logo@2x.png';
fileHash := crypt.HashFileENC(filePath);
zip.AddFile('logo@2x.png',0);
manifest.UpdateString('"logo@2x.png"',fileHash);

filePath := 'qa_data/p7s/pass-wallet/pass.json';
fileHash := crypt.HashFileENC(filePath);
zip.AddFile('pass.json',0);
manifest.UpdateString('"pass.json"',fileHash);

sbJson := TChilkatStringBuilder.Create(Self);
manifest.EmitSb(sbJson.ControlInterface);
manifestPath := 'qa_data/p7s/pass-wallet/manifest.json';
sbJson.WriteFile(manifestPath,'utf-8',0);
zip.AddFile('manifest.json',0);

//  Make sure we have the Apple WWDR intermediate certificate available for 
//  the cert chain in the signature.
certVault := TChilkatXmlCertVault.Create(Self);
appleWwdrCert := TChilkatCert.Create(Self);
success := appleWwdrCert.LoadByCommonName('Apple Worldwide Developer Relations Certification Authority');
if (success <> 1) then
  begin
    Memo1.Lines.Add('The Apple WWDR intermediate certificate is not installed.');
    Memo1.Lines.Add('It is available at https://developer.apple.com/certificationauthority/AppleWWDRCA.cer');
    Memo1.Lines.Add('You may alternatively load the .cer like this...');
    success := appleWwdrCert.LoadFromFile('qa_data/certs/AppleWWDRCA.cer');
    if (success = 0) then
      begin
        Memo1.Lines.Add(appleWwdrCert.LastErrorText);
        Exit;
      end;

  end;
certVault.AddCert(appleWwdrCert.ControlInterface);
crypt.UseCertVault(certVault.ControlInterface);

//  Use a digital certificate and private key from a PFX file (.pfx or .p12).
pfxPath := 'qa_data/pfx/cert_test123.pfx';
pfxPassword := 'test123';

cert := TChilkatCert.Create(Self);
success := cert.LoadPfxFile(pfxPath,pfxPassword);
if (success = 0) then
  begin
    Memo1.Lines.Add(cert.LastErrorText);
    Exit;
  end;

//  Provide the signing cert (with associated private key).
success := crypt.SetSigningCert(cert.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(crypt.LastErrorText);
    Exit;
  end;

//  Specify the signed attributes to be included.
//  (These attributes appear to not be necessary, but we're including
//  them just in case they become necessary in the future.)
jsonSignedAttrs := TChilkatJsonObject.Create(Self);
jsonSignedAttrs.UpdateInt('contentType',1);
jsonSignedAttrs.UpdateInt('signingTime',1);
crypt.SigningAttributes := jsonSignedAttrs.Emit();

//  Sign the manifest JSON file to produce a file named "signature".
sigPath := 'qa_data/p7s/pass-wallet/signature';

//  Create the "signature" file.
success := crypt.CreateP7S(manifestPath,sigPath);
if (success = 0) then
  begin
    Memo1.Lines.Add(crypt.LastErrorText);
    Exit;
  end;

zip.AddFile('signature',0);

//  ---------------------------------------------------------------------------------------------
//  Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
//  If this is of interest, please send email to support@chilkatsoft.com
//  ---------------------------------------------------------------------------------------------

//  Create the .pkipass archive (which is a .zip archive containing the required files).
success := zip.WriteZipAndClose();
if (success = 0) then
  begin
    Memo1.Lines.Add(zip.LastErrorText);
    Exit;
  end;

Memo1.Lines.Add('Success.');