(PowerBuilder) ITIDA Debug Signed JSON and HTTP POST

See more Egypt ITIDA Examples

Explains how to debug when problems are encountered with ITIDA canonicalization, signing, and posting to api.preprod.invoicing.eta.gov.eg.

The most common error response from the api.preprod.invoicing.eta.gov.eg server is:

ITIDA Signature Invalid Signature * 4043 4043:message-digest attribute value does not match the calculated value[message-digest attribute value does not match the calculated value]

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
oleobject loo_Crypt
oleobject loo_Cert
integer li_Success
oleobject loo_CmsOptions
oleobject loo_JsonSigningAttrs
oleobject loo_Json
string ls_JsonToSign
string ls_SigBase64
oleobject loo_SbToSend
oleobject loo_Http
oleobject loo_Resp

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loo_Crypt = create oleobject
// Use "Chilkat_9_5_0.Crypt2" for versions of Chilkat < 10.0.0
li_rc = loo_Crypt.ConnectToNewObject("Chilkat.Crypt2")
if li_rc < 0 then
    destroy loo_Crypt
    MessageBox("Error","Connecting to COM object failed")
    return
end if
loo_Crypt.VerboseLogging = 1

loo_Cert = create oleobject
// Use "Chilkat_9_5_0.Cert" for versions of Chilkat < 10.0.0
li_rc = loo_Cert.ConnectToNewObject("Chilkat.Cert")

loo_Cert.VerboseLogging = 1

// Set the smart card PIN, which will be needed for signing.
loo_Cert.SmartCardPin = "12345678"

// There are many ways to load the certificate.  
// This example was created for a customer using an ePass2003 USB token.
// Assuming the USB token is the only source of a hardware-based private key..
li_Success = loo_Cert.LoadFromSmartcard("")
if li_Success <> 1 then
    Write-Debug loo_Cert.LastErrorText
    destroy loo_Crypt
    destroy loo_Cert
    return
end if

// Tell the crypt class to use this cert.
li_Success = loo_Crypt.SetSigningCert(loo_Cert)
if li_Success <> 1 then
    Write-Debug loo_Crypt.LastErrorText
    destroy loo_Crypt
    destroy loo_Cert
    return
end if

loo_CmsOptions = create oleobject
// Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
li_rc = loo_CmsOptions.ConnectToNewObject("Chilkat.JsonObject")

// Setting "DigestData" causes OID 1.2.840.113549.1.7.5 (digestData) to be used.
loo_CmsOptions.UpdateBool("DigestData",1)
loo_CmsOptions.UpdateBool("OmitAlgorithmIdNull",1)

// Indicate that we are passing normal JSON and we want Chilkat do automatically
// do the ITIDA JSON canonicalization:
loo_CmsOptions.UpdateBool("CanonicalizeITIDA",1)

loo_Crypt.CmsOptions = loo_CmsOptions.Emit()

// The CadesEnabled property applies to all methods that create CMS/PKCS7 signatures. 
// To create a CAdES-BES signature, set this property equal to true. 
loo_Crypt.CadesEnabled = 1

loo_Crypt.HashAlgorithm = "sha256"

loo_JsonSigningAttrs = create oleobject
// Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
li_rc = loo_JsonSigningAttrs.ConnectToNewObject("Chilkat.JsonObject")

loo_JsonSigningAttrs.UpdateInt("contentType",1)
loo_JsonSigningAttrs.UpdateInt("signingTime",1)
loo_JsonSigningAttrs.UpdateInt("messageDigest",1)
loo_JsonSigningAttrs.UpdateInt("signingCertificateV2",1)
loo_Crypt.SigningAttributes = loo_JsonSigningAttrs.Emit()

// By default, all the certs in the chain of authentication are included in the signature.
// If desired, we can choose to only include the signing certificate:
loo_Crypt.IncludeCertChain = 0

// First, load the JSON file that is to be canonicalized and signed.
// The JSON file should look like this:
// NOTE: The JSON should not begin with "{ "documents" : [ ..."
// We want to send a single signed document like this:

//       {
//          "issuer":{
//             "address":{
//                "branchID":"0",
//                "country":"EG",
//                "regionCity":"Cairo",
//                "postalCode":"",
//                "buildingNumber":"0",
//                "street":"123rd Street",
//                "governate":"GOVERNATE"
//             },
//             "type":"B",
//             "id":"209999899",
//             "name":"Xyz SAE"
//          },
//          "receiver":{
//             "address":{
//                "country":"EG",
//                "regionCity":"CAIRO",
//                "postalCode":"11435",
//                "buildingNumber":"0",
//                "street":"Autostrad Road Abc",
//                "governate":"GOVERNATE"
//             },
//             "type":"B",
//             "id":"999999999",
//             "name":"XYZ EGYPT FOR TRADE"
//          },
//          "documentType":"I",
//          "documentTypeVersion":"1.0",
//          "dateTimeIssued":"2020-11-15T11:04:53Z",
//          "taxpayerActivityCode":"1073",
//          "internalID":"ZZZZ999",
//          "purchaseOrderReference":"2009199918",
//          "salesOrderReference":"",
//          "payment":{
//             "bankName":"",
//             "bankAddress":"",
//             "bankAccountNo":"",
//             "bankAccountIBAN":"",
//             "swiftCode":"",
//             "terms":""
//          },
//          "delivery":{
//             "approach":"",
//             "packaging":"",
//             "dateValidity":"",
//             "exportPort":"",
//             "countryOfOrigin":"EG",
//             "grossWeight":0,
//             "netWeight":0,
//             "terms":""
//          },
//          "invoiceLines":[
//             {
//                "description":"CDM Widget 48GX99X12BA",
//                "itemType":"GS1",
//                "itemCode":"7622213335056",
//                "unitType":"CS",
//                "quantity":1.00,
//                "unitValue":{
//                   "currencySold":"EGP",
//                   "amountEGP":588.67,
//                   "amountSold":0,
//                   "currencyExchangeRate":0
//                },
//                "salesTotal":588.67,
//                "total":603.97,
//                "valueDifference":0,
//                "totalTaxableFees":0,
//                "netTotal":529.8,
//                "itemsDiscount":0,
//                "discount":{
//                   "rate":10.00,
//                   "amount":58.87
//                },
//                "taxableItems":[
//                   {
//                      "taxType":"T1",
//                      "amount":74.17,
//                      "subType":"No sub",
//                      "rate":14.00
//                   }
//                ],
//                "internalCode":"9099994"
//             }
//          ],
//          "totalSales":588.67,
//          "totalSalesAmount":588.67,
//          "totalDiscountAmount":58.87,
//          "netAmount":529.80,
//          "taxTotals":[
//             {
//                "taxType":"T1",
//                "amount":74.17
//             }
//          ],
//          "extraDiscountAmount":0,
//          "totalItemsDiscountAmount":0,
//          "totalAmount":603.97,
//       }
// 

// Please include this JSON file as an attachment in your support email to Chilkat.
loo_Json = create oleobject
// Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
li_rc = loo_Json.ConnectToNewObject("Chilkat.JsonObject")

li_Success = loo_Json.LoadFile("c:/someDir/jsonToSignAndSend.json")
if li_Success = 0 then
    Write-Debug "Failed to load input JSON file."
    destroy loo_Crypt
    destroy loo_Cert
    destroy loo_CmsOptions
    destroy loo_JsonSigningAttrs
    destroy loo_Json
    return
end if

loo_Json.EmitCompact = 1
ls_JsonToSign = loo_Json.Emit()

// Create the CAdES-BES signature.
loo_Crypt.EncodingMode = "base64"

// Make sure we sign the utf-8 byte representation of the JSON string
loo_Crypt.Charset = "utf-8"

// Turn on verbose logging.
loo_Crypt.VerboseLogging = 1

ls_SigBase64 = loo_Crypt.SignStringENC(ls_JsonToSign)
if loo_Crypt.LastMethodSuccess = 0 then
    Write-Debug loo_Crypt.LastErrorText
    destroy loo_Crypt
    destroy loo_Cert
    destroy loo_CmsOptions
    destroy loo_JsonSigningAttrs
    destroy loo_Json
    return
end if

// The LastErrorText property still contains information when the method succeeds.
// Send the contents of this LastErrorText as an attachment in your support email to Chilkat.
Write-Debug loo_Crypt.LastErrorText

// Insert the base64 signature into the JSON to be sent
loo_Json.UpdateString("signatures[0].signatureType","I")
loo_Json.UpdateString("signatures[0].value",ls_SigBase64)

// Wrap the JSON in  {"documents":[ ... ]}
loo_SbToSend = create oleobject
// Use "Chilkat_9_5_0.StringBuilder" for versions of Chilkat < 10.0.0
li_rc = loo_SbToSend.ConnectToNewObject("Chilkat.StringBuilder")

loo_SbToSend.Append("{~"documents~":[")
loo_SbToSend.Append(loo_Json.Emit())
loo_SbToSend.Append("]}")

// ------------------------------------------------------------------------
// Submit the signed JSON to Chilkat's URL for simply echoing back the contents of the HTTP POST it receives:
// 
// We just want to see what actually gets sent.  To do this, we can send to https://www.chilkatsoft.com/echoPostBody.asp
// which will echo in the response that data and headers it received.

loo_Http = create oleobject
// Use "Chilkat_9_5_0.Http" for versions of Chilkat < 10.0.0
li_rc = loo_Http.ConnectToNewObject("Chilkat.Http")

// Also, set the SessionLogFilename property so we can see the exact bytes of the HTTP request sent from your end.
// Please include this session log file as an attachment in your support email to Chilkat.
loo_Http.SessionLogFilename = "c:/someDir/sessionLog.txt"

loo_Resp = loo_Http.PostJson2("https://www.chilkatsoft.com/echoPostBody.asp","application/json; charset=utf-8",loo_SbToSend.GetAsString())
if loo_Http.LastMethodSuccess = 0 then
    Write-Debug loo_Http.LastErrorText
    destroy loo_Crypt
    destroy loo_Cert
    destroy loo_CmsOptions
    destroy loo_JsonSigningAttrs
    destroy loo_Json
    destroy loo_SbToSend
    destroy loo_Http
    return
end if

// Save the exact contents of Chilkat's response to a file.
// The server at https://www.chilkatsoft.com/echoPostBody.asp is simply echoing back the headers and POST body it received.
// Please include the responseBody.txt as an attachment in your support email to Chilkat.
li_Success = loo_Resp.SaveBodyBinary("c:/someDir/responseBody.txt")

Write-Debug "Response status code: " + string(loo_Resp.StatusCode)

destroy loo_Resp

// -------------------------------------------------
// In summary, please include the following in your support email to Chilkat
// 1. The original JSON file before signing and before canonicalization (i.e. c:/someDir/jsonToSignAndSend.json)
// 2. The contents of the LastErrorText for the successful call to SignStringENC.
// 3. The HTTP session log file (i.e. c:/someDir/sessionLog.txt)
// 4. The responseBody.txt file.


destroy loo_Crypt
destroy loo_Cert
destroy loo_CmsOptions
destroy loo_JsonSigningAttrs
destroy loo_Json
destroy loo_SbToSend
destroy loo_Http