(PHP ActiveX) SII XML Digital Signature

Example for SII XML Digital Signature.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

$success = 1;

// Load the XML to be signed.
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Xml')
$xmlToSign = new COM("Chilkat.Xml");
$success = $xmlToSign->LoadXmlFile('c:/aaworkarea/eduardo/sii_unsigned.xml');
if ($success == 0) {
    print $xmlToSign->LastErrorText . "\n";
    exit;
}

// The sample XML to be signed looks like this:

// <?xml version="1.0" encoding="ISO-8859-1"?>
// <EnvioDTE xmlns="http://www.sii.cl/SiiDte" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sii.cl/SiiDte EnvioDTE_v10.xsd" version="1.0">
// <SetDTE ID="SetDocF0T33_20240425_170512">
//  <Caratula version="1.0">
//   <RutEmisor>99999999-4</RutEmisor>
//   <RutEnvia>12345678-6</RutEnvia>
//   <RutReceptor>888888000-K</RutReceptor>
//   <FchResol>2014-08-22</FchResol>
//   <NroResol>80</NroResol>
//   <TmstFirmaEnv>2024-04-25T17:05:13</TmstFirmaEnv>
//   <SubTotDTE>
//    <TpoDTE>33</TpoDTE>
//    <NroDTE>1</NroDTE>
//   </SubTotDTE>
//  </Caratula>
// <DTE version="1.0">
// <Documento ID="F555T55">
// ...
// </Documento>
// </EnvioDTE>

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.XmlDSigGen')
$gen = new COM("Chilkat.XmlDSigGen");

$gen->SigLocation = 'EnvioDTE|SetDTE|DTE';
$gen->SigLocationMod = 0;
$gen->SigNamespacePrefix = '';
$gen->SigNamespaceUri = 'http://www.w3.org/2000/09/xmldsig#';
$gen->SignedInfoCanonAlg = 'C14N';
$gen->SignedInfoDigestMethod = 'sha1';

// -------- Reference 1 --------
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Xml')
$xml1 = new COM("Chilkat.Xml");
$xml1->Tag = 'Transforms';
$xml1->UpdateAttrAt('Transform',1,'Algorithm','http://www.w3.org/TR/2001/REC-xml-c14n-20010315');

$gen->AddSameDocRef2('F511T33','sha1',$xml1,'');

// Provide a certificate + private key. (PFX password is test123)
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");
$success = $cert->LoadPfxFile('qa_data/pfx/cert_test123.pfx','test123');
if ($success != 1) {
    print $cert->LastErrorText . "\n";
    exit;
}

$gen->SetX509Cert($cert,1);

$gen->KeyInfoType = 'X509Data+KeyValue';
$gen->X509Type = 'Certificate';

// Load XML to be signed...
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.StringBuilder')
$sbXml = new COM("Chilkat.StringBuilder");
$xmlToSign->GetXmlSb($sbXml);

$gen->Behaviors = 'IndentedSignature';

// Sign the XML...
$success = $gen->CreateXmlDSigSb($sbXml);
if ($success != 1) {
    print $gen->LastErrorText . "\n";
    exit;
}

// -----------------------------------------------

// Save the signed XML to a file.
$success = $sbXml->WriteFile('c:/temp/qa_output/signedXml.xml','utf-8',0);

print $sbXml->getAsString() . "\n";

// ----------------------------------------
// Verify the signatures we just produced...
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.XmlDSig')
$verifier = new COM("Chilkat.XmlDSig");
$success = $verifier->LoadSignatureSb($sbXml);
if ($success != 1) {
    print $verifier->LastErrorText . "\n";
    exit;
}

$numSigs = $verifier->NumSignatures;
$verifyIdx = 0;
while ($verifyIdx < $numSigs) {
    $verifier->Selector = $verifyIdx;
    $verified = $verifier->VerifySignature(1);
    if ($verified != 1) {
        print $verifier->LastErrorText . "\n";
        exit;
    }

    $verifyIdx = $verifyIdx + 1;
}

print 'All signatures were successfully verified.' . "\n";

?>