(Excel) Create XAdES using Smart Card or USB Token

Demonstrates how to create an XAdES signed XML document using a certificate located on a smartcard or USB token.

Note: This example requires Chilkat v9.5.0.75 or greater. Also, at the time of this writing this example is restricted to the Windows operating system.

Download Excel Class Modules Chilkat Excel Class Modules

' ----------------------------------------------------------------------
' IMPORTANT: This generated example requires Chilkat v9.5.0.75 or later.
' Contact support@chilkatsoft.com for a pre-release.
' ----------------------------------------------------------------------

' Load the XML to be signed.
Dim xmlToSign As Chilkat.Xml
Set xmlToSign = Chilkat.NewXml

success = xmlToSign.LoadXmlFile("qa_data/fattura_electronica/docToSign.xml")
If (success <> True) Then
    Debug.Print xmlToSign.LastErrorText
    Exit Sub
End If

Dim gen As Chilkat.XmlDSigGen
Set gen = Chilkat.NewXmlDSigGen

gen.SigLocation = "p:FatturaElettronica"
gen.SigId = "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504"
gen.SigNamespacePrefix = "ds"
gen.SigNamespaceUri = "http://www.w3.org/2000/09/xmldsig#"
gen.SigValueId = "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-sigvalue"
gen.SignedInfoCanonAlg = "C14N"
gen.SignedInfoDigestMethod = "sha256"

' Create an Object to be added to the Signature.
' Note: Chilkat will automatically populate the strings indicated by "TO BE GENERATED BY CHILKAT" with actual/correct values
' when the XML is signed.
Dim object1 As Chilkat.Xml
Set object1 = Chilkat.NewXml
object1.Tag = "xades:QualifyingProperties"
success = object1.AddAttribute("xmlns:xades","http://uri.etsi.org/01903/v1.3.2#")
success = object1.AddAttribute("xmlns:xades141","http://uri.etsi.org/01903/v1.4.1#")
success = object1.AddAttribute("Target","#xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504")
success = object1.UpdateAttrAt("xades:SignedProperties",True,"Id","xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-signedprops")
object1.UpdateChildContent "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningTime","TO BE GENERATED BY CHILKAT"
success = object1.UpdateAttrAt("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:CertDigest|ds:DigestMethod",True,"Algorithm","http://www.w3.org/2001/04/xmlenc#sha256")
object1.UpdateChildContent "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:CertDigest|ds:DigestValue","TO BE GENERATED BY CHILKAT"
object1.UpdateChildContent "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:IssuerSerial|ds:X509IssuerName","TO BE GENERATED BY CHILKAT"
object1.UpdateChildContent "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificate|xades:Cert|xades:IssuerSerial|ds:X509SerialNumber","TO BE GENERATED BY CHILKAT"

success = gen.AddObject("",object1.GetXml(),"","")

' -------- Reference 1 --------
gen.KeyInfoId = "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-keyinfo"
success = gen.AddSameDocRef("xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-keyinfo","sha256","","","")

' -------- Reference 2 --------
success = gen.AddSameDocRef("","sha256","","","")
success = gen.SetRefIdAttr("","xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-ref0")

' -------- Reference 3 --------
success = gen.AddObjectRef("xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-signedprops","sha256","","","http://uri.etsi.org/01903#SignedProperties")

' ----------------------------------------------------------------
'  Load a certificate that has been pre-installed on the Windows system
'  This includes certificates on smartcards and USB tokens
Dim cert As Chilkat.Cert
Set cert = Chilkat.NewCert
' Load the certificate on the smartcard currently in the reader (or on the USB token).
' Pass an empty string to allow Chilkat to automatically choose the CSP (Cryptographi Service Provider).
' See Load Certificate on Smartcard for information about explicitly selecting a particular CSP.
success = cert.LoadFromSmartcard("")
If (success <> True) Then
    Debug.Print cert.LastErrorText
    Exit Sub
End If

'  You may provide the PIN here.  Otherwise Windows will display a PIN dialog.
cert.SmartCardPin = "000000"

success = gen.SetX509Cert(cert,True)
gen.KeyInfoType = "X509Data"
gen.X509Type = "Certificate"

' Load XML to be signed...
Dim sbXml As Chilkat.StringBuilder
Set sbXml = Chilkat.NewStringBuilder
success = xmlToSign.GetXmlSb(sbXml)

gen.Behaviors = "IndentedSignature,ForceAddEnvelopedSignatureTransform"

' Sign the XML...
success = gen.CreateXmlDSigSb(sbXml)
If (success <> True) Then
    Debug.Print gen.LastErrorText
    Exit Sub
End If

' Save the signed XMl to a file.
success = sbXml.WriteFile("qa_output/signedXml.xml","utf-8",False)

Debug.Print sbXml.GetAsString()

' ----------------------------------------
' Verify the signature we just produced...
Dim verifier As Chilkat.XmlDSig
Set verifier = Chilkat.NewXmlDSig
success = verifier.LoadSignatureSb(sbXml)
If (success <> True) Then
    Debug.Print verifier.LastErrorText
    Exit Sub
End If


verified = verifier.VerifySignature(True)
If (verified <> True) Then
    Debug.Print verifier.LastErrorText
    Exit Sub
End If

Debug.Print "This signature was successfully verified."