(Node.js) Sign Manifest File to Generate a Passbook .pkpass file

Demonstrates how to create a Passbook .pkpass archive by creating a signature of a manifest file and then zipping to a .pkpass archive.

Note: Chilkat also has the capability to do everything in-memory (no files would be involved). If this is of interest, please send email to support@chilkatsoft.com

Note: This example requires Chilkat v9.5.0.75.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // Note: Requires Chilkat v9.5.0.75 or greater.

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // ---------------------------------------------------------------------------------------------
    // Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
    // See this example:  Sign Manifest File to Generate a Passbook .pkpass in Memory
    // ---------------------------------------------------------------------------------------------

    // First create the manifest.json
    var success;
    var manifest = new chilkat.JsonObject();
    var crypt = new chilkat.Crypt2();

    var zip = new chilkat.Zip();
    zip.NewZip("qa_data/p7s/pass-wallet/example.pkpass");
    // Set the AppendFromDir property to prevent that relative paths from being stored in the .pkpass archive.
    zip.AppendFromDir = "qa_data/p7s/pass-wallet/";

    crypt.HashAlgorithm = "sha1";
    // Return hashes as lowercase hex.
    crypt.EncodingMode = "hexlower";

    var fileHash;
    var filePath;
    filePath = "qa_data/p7s/pass-wallet/icon.png";
    fileHash = crypt.HashFileENC(filePath);
    zip.AppendOneFileOrDir("icon.png",false);
    manifest.UpdateString("\"icon.png\"",fileHash);

    filePath = "qa_data/p7s/pass-wallet/icon@2x.png";
    fileHash = crypt.HashFileENC(filePath);
    zip.AppendOneFileOrDir("icon@2x.png",false);
    manifest.UpdateString("\"icon@2x.png\"",fileHash);

    filePath = "qa_data/p7s/pass-wallet/logo.png";
    fileHash = crypt.HashFileENC(filePath);
    zip.AppendOneFileOrDir("logo.png",false);
    manifest.UpdateString("\"logo.png\"",fileHash);

    filePath = "qa_data/p7s/pass-wallet/logo@2x.png";
    fileHash = crypt.HashFileENC(filePath);
    zip.AppendOneFileOrDir("logo@2x.png",false);
    manifest.UpdateString("\"logo@2x.png\"",fileHash);

    filePath = "qa_data/p7s/pass-wallet/pass.json";
    fileHash = crypt.HashFileENC(filePath);
    zip.AppendOneFileOrDir("pass.json",false);
    manifest.UpdateString("\"pass.json\"",fileHash);

    var sbJson = new chilkat.StringBuilder();
    manifest.EmitSb(sbJson);
    var manifestPath = "qa_data/p7s/pass-wallet/manifest.json";
    sbJson.WriteFile(manifestPath,"utf-8",false);
    zip.AppendOneFileOrDir("manifest.json",false);

    // Make sure we have the Apple WWDR intermediate certificate available for 
    // the cert chain in the signature.
    var certVault = new chilkat.XmlCertVault();
    var appleWwdrCert = new chilkat.Cert();
    success = appleWwdrCert.LoadByCommonName("Apple Worldwide Developer Relations Certification Authority");
    if (success !== true) {
        console.log("The Apple WWDR intermediate certificate is not installed.");
        console.log("It is available at https://developer.apple.com/certificationauthority/AppleWWDRCA.cer");
        console.log("You may alternatively load the .cer like this...");
        success = appleWwdrCert.LoadFromFile("qa_data/certs/AppleWWDRCA.cer");
        if (success !== true) {
            console.log(appleWwdrCert.LastErrorText);
            return;
        }

    }

    certVault.AddCert(appleWwdrCert);
    crypt.UseCertVault(certVault);

    // Use a digital certificate and private key from a PFX file (.pfx or .p12).
    var pfxPath = "qa_data/pfx/cert_test123.pfx";
    var pfxPassword = "test123";

    var cert = new chilkat.Cert();
    success = cert.LoadPfxFile(pfxPath,pfxPassword);
    if (success !== true) {
        console.log(cert.LastErrorText);
        return;
    }

    // Provide the signing cert (with associated private key).
    success = crypt.SetSigningCert(cert);
    if (success !== true) {
        console.log(crypt.LastErrorText);
        return;
    }

    // Specify the signed attributes to be included.
    // (These attributes appear to not be necessary, but we're including
    // them just in case they become necessary in the future.)
    var jsonSignedAttrs = new chilkat.JsonObject();
    jsonSignedAttrs.UpdateInt("contentType",1);
    jsonSignedAttrs.UpdateInt("signingTime",1);
    crypt.SigningAttributes = jsonSignedAttrs.Emit();

    // Sign the manifest JSON file to produce a file named "signature".
    var sigPath = "qa_data/p7s/pass-wallet/signature";

    // Create the "signature" file.
    success = crypt.CreateP7S(manifestPath,sigPath);
    if (success == false) {
        console.log(crypt.LastErrorText);
        return;
    }

    zip.AppendOneFileOrDir("signature",false);

    // ---------------------------------------------------------------------------------------------
    // Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
    // If this is of interest, please send email to support@chilkatsoft.com
    // ---------------------------------------------------------------------------------------------

    // Create the .pkipass archive (which is a .zip archive containing the required files).
    success = zip.WriteZipAndClose();
    if (success !== true) {
        console.log(zip.LastErrorText);
        return;
    }

    console.log("Success.");

}

chilkatExample();