(Lianja) Sign Manifest File to Generate a Passbook .pkpass file

Demonstrates how to create a Passbook .pkpass archive by creating a signature of a manifest file and then zipping to a .pkpass archive.

Chilkat Lianja Extension Download Chilkat Lianja Extension

// Note: Requires Chilkat v9.5.0.75 or greater.

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// ---------------------------------------------------------------------------------------------
// Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
// See this example:  Sign Manifest File to Generate a Passbook .pkpass in Memory
// ---------------------------------------------------------------------------------------------

// First create the manifest.json

loManifest = createobject("CkJsonObject")
loCrypt = createobject("CkCrypt2")

loZip = createobject("CkZip")
loZip.NewZip("qa_data/p7s/pass-wallet/example.pkpass")
// Set the AppendFromDir property to prevent that relative paths from being stored in the .pkpass archive.
loZip.AppendFromDir = "qa_data/p7s/pass-wallet/"

loCrypt.HashAlgorithm = "sha1"
// Return hashes as lowercase hex.
loCrypt.EncodingMode = "hexlower"

lcFilePath = "qa_data/p7s/pass-wallet/icon.png"
lcFileHash = loCrypt.HashFileENC(lcFilePath)
loZip.AppendOneFileOrDir("icon.png",.F.)
loManifest.UpdateString('"icon.png"',lcFileHash)

lcFilePath = "qa_data/p7s/pass-wallet/icon@2x.png"
lcFileHash = loCrypt.HashFileENC(lcFilePath)
loZip.AppendOneFileOrDir("icon@2x.png",.F.)
loManifest.UpdateString('"icon@2x.png"',lcFileHash)

lcFilePath = "qa_data/p7s/pass-wallet/logo.png"
lcFileHash = loCrypt.HashFileENC(lcFilePath)
loZip.AppendOneFileOrDir("logo.png",.F.)
loManifest.UpdateString('"logo.png"',lcFileHash)

lcFilePath = "qa_data/p7s/pass-wallet/logo@2x.png"
lcFileHash = loCrypt.HashFileENC(lcFilePath)
loZip.AppendOneFileOrDir("logo@2x.png",.F.)
loManifest.UpdateString('"logo@2x.png"',lcFileHash)

lcFilePath = "qa_data/p7s/pass-wallet/pass.json"
lcFileHash = loCrypt.HashFileENC(lcFilePath)
loZip.AppendOneFileOrDir("pass.json",.F.)
loManifest.UpdateString('"pass.json"',lcFileHash)

loSbJson = createobject("CkStringBuilder")
loManifest.EmitSb(loSbJson)
lcManifestPath = "qa_data/p7s/pass-wallet/manifest.json"
loSbJson.WriteFile(lcManifestPath,"utf-8",.F.)
loZip.AppendOneFileOrDir("manifest.json",.F.)

// Make sure we have the Apple WWDR intermediate certificate available for 
// the cert chain in the signature.
loCertVault = createobject("CkXmlCertVault")
loAppleWwdrCert = createobject("CkCert")
llSuccess = loAppleWwdrCert.LoadByCommonName("Apple Worldwide Developer Relations Certification Authority")
if (llSuccess <> .T.) then
    ? "The Apple WWDR intermediate certificate is not installed."
    ? "It is available at https://developer.apple.com/certificationauthority/AppleWWDRCA.cer"
    ? "You may alternatively load the .cer like this..."
    llSuccess = loAppleWwdrCert.LoadFromFile("qa_data/certs/AppleWWDRCA.cer")
    if (llSuccess <> .T.) then
        ? loAppleWwdrCert.LastErrorText
        release loManifest
        release loCrypt
        release loZip
        release loSbJson
        release loCertVault
        release loAppleWwdrCert
        return
    endif

endif

loCertVault.AddCert(loAppleWwdrCert)
loCrypt.UseCertVault(loCertVault)

// Use a digital certificate and private key from a PFX file (.pfx or .p12).
lcPfxPath = "qa_data/pfx/cert_test123.pfx"
lcPfxPassword = "test123"

loCert = createobject("CkCert")
llSuccess = loCert.LoadPfxFile(lcPfxPath,lcPfxPassword)
if (llSuccess <> .T.) then
    ? loCert.LastErrorText
    release loManifest
    release loCrypt
    release loZip
    release loSbJson
    release loCertVault
    release loAppleWwdrCert
    release loCert
    return
endif

// Provide the signing cert (with associated private key).
llSuccess = loCrypt.SetSigningCert(loCert)
if (llSuccess <> .T.) then
    ? loCrypt.LastErrorText
    release loManifest
    release loCrypt
    release loZip
    release loSbJson
    release loCertVault
    release loAppleWwdrCert
    release loCert
    return
endif

// Specify the signed attributes to be included.
// (These attributes appear to not be necessary, but we're including
// them just in case they become necessary in the future.)
loJsonSignedAttrs = createobject("CkJsonObject")
loJsonSignedAttrs.UpdateInt("contentType",1)
loJsonSignedAttrs.UpdateInt("signingTime",1)
loCrypt.SigningAttributes = loJsonSignedAttrs.Emit()

// Sign the manifest JSON file to produce a file named "signature".
lcSigPath = "qa_data/p7s/pass-wallet/signature"

// Create the "signature" file.
llSuccess = loCrypt.CreateP7S(lcManifestPath,lcSigPath)
if (llSuccess = .F.) then
    ? loCrypt.LastErrorText
    release loManifest
    release loCrypt
    release loZip
    release loSbJson
    release loCertVault
    release loAppleWwdrCert
    release loCert
    release loJsonSignedAttrs
    return
endif

loZip.AppendOneFileOrDir("signature",.F.)

// ---------------------------------------------------------------------------------------------
// Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
// If this is of interest, please send email to support@chilkatsoft.com
// ---------------------------------------------------------------------------------------------

// Create the .pkipass archive (which is a .zip archive containing the required files).
llSuccess = loZip.WriteZipAndClose()
if (llSuccess <> .T.) then
    ? loZip.LastErrorText
    release loManifest
    release loCrypt
    release loZip
    release loSbJson
    release loCertVault
    release loAppleWwdrCert
    release loCert
    release loJsonSignedAttrs
    return
endif

? "Success."


release loManifest
release loCrypt
release loZip
release loSbJson
release loCertVault
release loAppleWwdrCert
release loCert
release loJsonSignedAttrs