(PHP ActiveX) Sign Manifest File to Generate a Passbook .pkpass in Memory

Demonstrates how to create a Passbook .pkpass archive by creating a signature of a manifest file and then zipping to a .pkpass archive in memory

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// ---------------------------------------------------------------------------------------------
// This example is the same as Sign Manifest File to Generate a Passbook .pkpass file
// except everything happens in memory (no input files, no output files)
// ---------------------------------------------------------------------------------------------

// First create the manifest.json

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject')
$manifest = new COM("Chilkat.JsonObject");
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2')
$crypt = new COM("Chilkat.Crypt2");

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Zip')
$zip = new COM("Chilkat.Zip");
$zip->NewZip('notUsedAndNeverCreated.zip');

$crypt->HashAlgorithm = 'sha1';
// Return hashes as lowercase hex.
$crypt->EncodingMode = 'hexlower';

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.BinData')
$pngData = new COM("Chilkat.BinData");
// Assume we load the pngData with bytes for "icon.png" from somewhere, such as a byte array in memory.
// entry is a Chilkat.ZipEntry
$entry = $zip->AppendBd('icon.png',$pngData);

$digestStr = $crypt->hashBdENC($pngData);
$manifest->UpdateString('\'icon.png\'',$digestStr);

$pngData->Clear();
// Assume we load the pngData with bytes for "icon@2x.png" from somewhere...
// entry is a Chilkat.ZipEntry
$entry = $zip->AppendBd('icon@2x.png',$pngData);

$digestStr = $crypt->hashBdENC($pngData);
$manifest->UpdateString('\'icon@2x.png\'',$digestStr);

$pngData->Clear();
// Assume we load the pngData with bytes for "logo.png" from somewhere...
// entry is a Chilkat.ZipEntry
$entry = $zip->AppendBd('logo.png',$pngData);

$digestStr = $crypt->hashBdENC($pngData);
$manifest->UpdateString('\'logo.png\'',$digestStr);

$pngData->Clear();
// Assume we load the pngData with bytes for "logo@2x.png" from somewhere...
// entry is a Chilkat.ZipEntry
$entry = $zip->AppendBd('logo@2x.png',$pngData);

$digestStr = $crypt->hashBdENC($pngData);
$manifest->UpdateString('\'logo@2x.png\'',$digestStr);

$passJson = '{ .... }';//  Contains the contents of pass.json
// entry is a Chilkat.ZipEntry
$entry = $zip->AppendString('pass.json',$passJson);

$digestStr = $crypt->hashStringENC($passJson);
$manifest->UpdateString('\'pass.json\'',$digestStr);

// entry is a Chilkat.ZipEntry
$entry = $zip->AppendString('manifest.json',$manifest->emit());

// Make sure we have the Apple WWDR intermediate certificate available for 
// the cert chain in the signature.
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.XmlCertVault')
$certVault = new COM("Chilkat.XmlCertVault");
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$appleWwdrCert = new COM("Chilkat.Cert");
$success = $appleWwdrCert->LoadByCommonName('Apple Worldwide Developer Relations Certification Authority');
if ($success != 1) {
    print 'The Apple WWDR intermediate certificate is not installed.' . "\n";
    print 'It is available at https://developer.apple.com/certificationauthority/AppleWWDRCA.cer' . "\n";
    print 'You may alternatively load the .cer like this...' . "\n";
    $success = $appleWwdrCert->LoadFromFile('qa_data/certs/AppleWWDRCA.cer');
    if ($success != 1) {
        print $appleWwdrCert->LastErrorText . "\n";
        exit;
    }

}

$certVault->AddCert($appleWwdrCert);
$crypt->UseCertVault($certVault);

// Use a digital certificate and private key from a PFX
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.BinData')
$bdPfx = new COM("Chilkat.BinData");
// Assume we loaded a PFX into bdPfx....
$pfxPassword = 'test123';

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");
$success = $cert->LoadPfxBd($bdPfx,$pfxPassword);
if ($success != 1) {
    print $cert->LastErrorText . "\n";
    exit;
}

// Provide the signing cert (with associated private key).
$success = $crypt->SetSigningCert($cert);
if ($success != 1) {
    print $crypt->LastErrorText . "\n";
    exit;
}

// Specify the signed attributes to be included.
// (These attributes appear to not be necessary, but we're including
// them just in case they become necessary in the future.)
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject')
$jsonSignedAttrs = new COM("Chilkat.JsonObject");
$jsonSignedAttrs->UpdateInt('contentType',1);
$jsonSignedAttrs->UpdateInt('signingTime',1);
$crypt->SigningAttributes = $jsonSignedAttrs->emit();

// Sign the manifest JSON to produce a signature
$crypt->EncodingMode = 'base64';
$sig = $crypt->signStringENC($manifest->emit());
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.BinData')
$bdSig = new COM("Chilkat.BinData");
$bdSig->AppendEncoded($sig,'base64');
// entry is a Chilkat.ZipEntry
$entry = $zip->AppendBd('signature',$bdSig);

// ---------------------------------------------------------------------------------------------
// Note: Chilkat also has the capability to do everything in-memory (no files would be involved).  
// If this is of interest, please send email to support@chilkatsoft.com
// ---------------------------------------------------------------------------------------------

// Create the .pkipass archive (which is a .zip archive containing the required files).
// the .zip is written to bdZip
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.BinData')
$bdZip = new COM("Chilkat.BinData");
$success = $zip->WriteBd($bdZip);
if ($success != 1) {
    print $zip->LastErrorText . "\n";
    exit;
}

print 'Success.' . "\n";

?>