Perl

Sign Manifest File to Generate a Passbook .pkpass in Memory

Demonstrates how to create a Passbook .pkpass archive by creating a signature of a manifest file and then zipping to a .pkpass archive in memory Perl

use chilkat();

$success = 0;

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# ---------------------------------------------------------------------------------------------
# This example is the same as Sign Manifest File to Generate a Passbook .pkpass file
# except everything happens in memory (no input files, no output files)
# ---------------------------------------------------------------------------------------------

# First create the manifest.json

$manifest = chilkat::CkJsonObject->new();
$crypt = chilkat::CkCrypt2->new();

$zip = chilkat::CkZip->new();
$zip->NewZip("notUsedAndNeverCreated.zip");

$crypt->put_HashAlgorithm("sha1");
# Return hashes as lowercase hex.
$crypt->put_EncodingMode("hexlower");

$pngData = chilkat::CkBinData->new();
# Assume we load the pngData with bytes for "icon.png" from somewhere, such as a byte array in memory.
$zip->AddBd("icon.png",$pngData);
$digestStr = $crypt->hashBdENC($pngData);
$manifest->UpdateString("\"icon.png\"",$digestStr);

$pngData->Clear();
# Assume we load the pngData with bytes for "icon@2x.png" from somewhere...
$zip->AddBd('icon@2x.png',$pngData);
$digestStr = $crypt->hashBdENC($pngData);
$manifest->UpdateString('\'icon@2x.png\'',$digestStr);

$pngData->Clear();
# Assume we load the pngData with bytes for "logo.png" from somewhere...
$zip->AddBd("logo.png",$pngData);
$digestStr = $crypt->hashBdENC($pngData);
$manifest->UpdateString("\"logo.png\"",$digestStr);

$pngData->Clear();
# Assume we load the pngData with bytes for "logo@2x.png" from somewhere...
$zip->AddBd('logo@2x.png',$pngData);
$digestStr = $crypt->hashBdENC($pngData);
$manifest->UpdateString('\'logo@2x.png\'',$digestStr);

$passJson = "{ .... }";#  Contains the contents of pass.json
$zip->AddString("pass.json",$passJson,"utf-8");
$digestStr = $crypt->hashStringENC($passJson);
$manifest->UpdateString("\"pass.json\"",$digestStr);

$zip->AddString("manifest.json",$manifest->emit(),"utf-8");

# Make sure we have the Apple WWDR intermediate certificate available for 
# the cert chain in the signature.
$certVault = chilkat::CkXmlCertVault->new();
$appleWwdrCert = chilkat::CkCert->new();
$success = $appleWwdrCert->LoadByCommonName("Apple Worldwide Developer Relations Certification Authority");
if ($success != 1) {
    print "The Apple WWDR intermediate certificate is not installed." . "\r\n";
    print "It is available at https://developer.apple.com/certificationauthority/AppleWWDRCA.cer" . "\r\n";
    print "You may alternatively load the .cer like this..." . "\r\n";
    $success = $appleWwdrCert->LoadFromFile("qa_data/certs/AppleWWDRCA.cer");
    if ($success == 0) {
        print $appleWwdrCert->lastErrorText() . "\r\n";
        exit;
    }

}

$certVault->AddCert($appleWwdrCert);
$crypt->UseCertVault($certVault);

# Use a digital certificate and private key from a PFX
$bdPfx = chilkat::CkBinData->new();
# Assume we loaded a PFX into bdPfx....
$pfxPassword = "test123";

$cert = chilkat::CkCert->new();
$success = $cert->LoadPfxBd($bdPfx,$pfxPassword);
if ($success == 0) {
    print $cert->lastErrorText() . "\r\n";
    exit;
}

# Provide the signing cert (with associated private key).
$success = $crypt->SetSigningCert($cert);
if ($success == 0) {
    print $crypt->lastErrorText() . "\r\n";
    exit;
}

# Specify the signed attributes to be included.
# (These attributes appear to not be necessary, but we're including
# them just in case they become necessary in the future.)
$jsonSignedAttrs = chilkat::CkJsonObject->new();
$jsonSignedAttrs->UpdateInt("contentType",1);
$jsonSignedAttrs->UpdateInt("signingTime",1);
$crypt->put_SigningAttributes($jsonSignedAttrs->emit());

# Sign the manifest JSON to produce a signature
$crypt->put_EncodingMode("base64");
$sig = $crypt->signStringENC($manifest->emit());
$bdSig = chilkat::CkBinData->new();
$bdSig->AppendEncoded($sig,"base64");
$zip->AddBd("signature",$bdSig);

# ---------------------------------------------------------------------------------------------
# Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
# If this is of interest, please send email to support@chilkatsoft.com
# ---------------------------------------------------------------------------------------------

# Create the .pkipass archive (which is a .zip archive containing the required files).
# the .zip is written to bdZip
$bdZip = chilkat::CkBinData->new();
$success = $zip->WriteBd($bdZip);
if ($success == 0) {
    print $zip->lastErrorText() . "\r\n";
    exit;
}

print "Success." . "\r\n";