(Visual FoxPro) Sign Mexico Pedimento

Add a signature to a Mexico pedimento file.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL lnSuccess
LOCAL lnBCRLF
LOCAL loSb
LOCAL lcMd5_base64
LOCAL loPrivKey
LOCAL loXml
LOCAL loAsn
LOCAL loRsa
LOCAL loBdSig
LOCAL loCert
LOCAL lcSerialHex
LOCAL loSbSerial
LOCAL lnNumReplaced

* This example requires the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

* This is the contents before signing:

* 500|1|3621|4199800|400||
* 601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||
* 507|4199800|IM|2006-7888">
* 507|4199800|MS|2">
* 800|4199800|1">
* 801|M3621037.222|1|5|011|

* This is the contents after signing

* 500|1|3621|4199800|400||
* 601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||
* 507|4199800|IM|2006-7888">
* 507|4199800|MS|2">
* 800|4199800|1|fhP2Ker54D2+3+UZch23F0E72 .... 9qNSPIuAqpj524qLZbbA==|30001000000500003416|
* 801|M3621037.222|1|5|011|

* First create the text to be signed.
lnBCRLF = 1
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.StringBuilder')
loSb = CreateObject('Chilkat.StringBuilder')
* Use CRLF line endings.
loSb.AppendLine("500|1|3621|4199800|400||",lnBCRLF)
loSb.AppendLine("601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||",lnBCRLF)
loSb.AppendLine("507|4199800|IM|2006-7888">",lnBCRLF)
loSb.AppendLine("507|4199800|MS|2">",lnBCRLF)

* Generate the MD5 hash of what we have so far..
lcMd5_base64 = loSb.GetHash("md5","base64","utf-8")
? "MD5 hash = " + lcMd5_base64

* Complete the original file.
* After signing, we'll update the BASE64_SIGNATURE and CERT_SERIAL
loSb.AppendLine("800|4199800|1|BASE64_SIGNATURE|CERT_SERIAL|",lnBCRLF)
loSb.AppendLine("801|M3621037.222|1|5|011|",lnBCRLF)

* We're going to sign the MD5 hash using the private key.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.PrivateKey')
loPrivKey = CreateObject('Chilkat.PrivateKey')
lnSuccess = loPrivKey.LoadAnyFormatFile("qa_data/certs/mexico_test/Certificados_de_Prueba/Certificados_Pruebas/Personas Morales/EKU9003173C9_20230517223532/CSD_EKU9003173C9_20230517223903/CSD_Sucursal_1_EKU9003173C9_20230517_223850.key","12345678a")
IF (lnSuccess = 0) THEN
    ? loPrivKey.LastErrorText
    RELEASE loSb
    RELEASE loPrivKey
    CANCEL
ENDIF

* Generate the ASN.1 to be signed.

* <sequence>
*     <sequence>
*         <oid>1.2.840.113549.2.5</oid>
*         <null/>
*     </sequence>
*     <octets>SwxHfaJhG+N3pPqay6UzVA==</octets>
* </sequence>

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Xml')
loXml = CreateObject('Chilkat.Xml')
loXml.Tag = "sequence"
loXml.UpdateChildContent("sequence|oid","1.2.840.113549.2.5")
loXml.UpdateChildContent("sequence|null","")
loXml.UpdateChildContent("octets",lcMd5_base64)

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Asn')
loAsn = CreateObject('Chilkat.Asn')
loAsn.LoadAsnXml(loXml.GetXml())
? "ASN.1 = " + loAsn.GetEncodedDer("base64")

* Sign with the private key.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Rsa')
loRsa = CreateObject('Chilkat.Rsa')
lnSuccess = loRsa.ImportPrivateKeyObj(loPrivKey)
IF (lnSuccess = 0) THEN
    ? loRsa.LastErrorText
    RELEASE loSb
    RELEASE loPrivKey
    RELEASE loXml
    RELEASE loAsn
    RELEASE loRsa
    CANCEL
ENDIF

* Create the opaque signature.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.BinData')
loBdSig = CreateObject('Chilkat.BinData')
loBdSig.AppendEncoded(loAsn.GetEncodedDer("base64"),"base64")
lnSuccess = loRsa.OpenSslSignBd(loBdSig)
IF (lnSuccess = 0) THEN
    ? loRsa.LastErrorText
    RELEASE loSb
    RELEASE loPrivKey
    RELEASE loXml
    RELEASE loAsn
    RELEASE loRsa
    RELEASE loBdSig
    CANCEL
ENDIF

* bd now contains the opaque signature, which embeds the ASN.1, which contains the MD5 hash.
* We're going to add this line:
* 800|4199800|1|BASE64_SIGNATURE|CERT_SERIAL_NUM|

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Cert')
loCert = CreateObject('Chilkat.Cert')
lnSuccess = loCert.LoadFromFile("qa_data/certs/mexico_test/Certificados_de_Prueba/Certificados_Pruebas/Personas Morales/EKU9003173C9_20230517223532/CSD_EKU9003173C9_20230517223903/CSD_Sucursal_1_EKU9003173C9_20230517_223850.cer")
IF (lnSuccess = 0) THEN
    ? loCert.LastErrorText
    RELEASE loSb
    RELEASE loPrivKey
    RELEASE loXml
    RELEASE loAsn
    RELEASE loRsa
    RELEASE loBdSig
    RELEASE loCert
    CANCEL
ENDIF

lcSerialHex = loCert.SerialNumber
* The serial in hex form looks like this:   3330303031303030303030353030303033343136
* Decode to us-ascii.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.StringBuilder')
loSbSerial = CreateObject('Chilkat.StringBuilder')
loSbSerial.DecodeAndAppend(lcSerialHex,"hex","us-ascii")
? "serial number in us-ascii: " + loSbSerial.GetAsString()

lnNumReplaced = loSb.Replace("CERT_SERIAL",loSbSerial.GetAsString())
lnNumReplaced = loSb.Replace("BASE64_SIGNATURE",loBdSig.GetEncoded("base64"))

? "------------------------------------"
? "Result:"
? loSb.GetAsString()

RELEASE loSb
RELEASE loPrivKey
RELEASE loXml
RELEASE loAsn
RELEASE loRsa
RELEASE loBdSig
RELEASE loCert
RELEASE loSbSerial