(PowerBuilder) Create P7M for ISO20022 Message (Customer Credit Transfer)

Demonstrates how to create a .p7m (signed data) for an ISO20022 XML message using an HSM such as that provided by Swift 3SKey or by banks. Also shows how to validate and extract the XML message.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
oleobject loo_Cert
integer li_Success
oleobject loo_Crypt
string ls_InFile
string ls_P7mFile
string ls_OutFile

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// What is a .p7m file?

// Load the signing certificate from the connected HSM.
loo_Cert = create oleobject
// Use "Chilkat_9_5_0.Cert" for versions of Chilkat < 10.0.0
li_rc = loo_Cert.ConnectToNewObject("Chilkat.Cert")
if li_rc < 0 then
    destroy loo_Cert
    MessageBox("Error","Connecting to COM object failed")
    return
end if
li_Success = loo_Cert.LoadFromSmartcard("")
if li_Success = 0 then
    Write-Debug loo_Cert.LastErrorText
    destroy loo_Cert
    return
end if

loo_Crypt = create oleobject
// Use "Chilkat_9_5_0.Crypt2" for versions of Chilkat < 10.0.0
li_rc = loo_Crypt.ConnectToNewObject("Chilkat.Crypt2")

// Tell the crypt class to use the cert on the ePass2003 token.
li_Success = loo_Crypt.SetSigningCert(loo_Cert)
if li_Success <> 1 then
    Write-Debug loo_Crypt.LastErrorText
    destroy loo_Cert
    destroy loo_Crypt
    return
end if

// The CadesEnabled property applies to all methods that create CMS/PKCS7 signatures. 
// To create a CAdES-BES signature, set this property equal to true. 
loo_Crypt.CadesEnabled = 1

loo_Crypt.HashAlgorithm = "sha256"

// The XML file to be signed and encapsulated in the signature looks like this:

// <Document xmlns="urn:iso:std:iso:20022:tech:xsd:pain.001.001.02">
//     <CstmrCdtTrfInitn>
//         <GrpHdr>
//             <MsgId>1234567890</MsgId>
//             <CreDtTm>2024-10-02T12:00:00</CreDtTm>
//             <NbOfTxs>1</NbOfTxs>
//             <CtrlSum>1000.00</CtrlSum>
//             <InitgPty>
//                 <Nm>Example Company</Nm>
//             </InitgPty>
//         </GrpHdr>
//         <PmtInf>
//             <!-- Payment information goes here -->
//         </PmtInf>
//     </CstmrCdtTrfInitn>
// </Document>

// What is "pain.001.001.02"?
// 
//     "pain.001": This is an ISO 20022 message type for Customer Credit Transfer
//     Initiation. It is used to instruct a bank or financial institution to transfer
//     funds from a customer's account to a beneficiary's account.
//     "pain.001.001.02": This specifies version "02" of the "pain.001" message.
//     The versioning indicates that there might be other versions like
//     "pain.001.001.01", and this version "02" includes revisions or updates compared
//     to version "01".
// 
// Usage:
// 
//     This namespace is typically seen in XML files that follow the ISO 20022
//     payment initiation standards. Financial institutions, payment service providers,
//     and other entities use it to exchange structured payment data in a standardized
//     XML format.
//     A typical use case for "pain.001.001.02" is to send payment instructions for
//     credit transfers, such as payments from businesses to suppliers or salary
//     payments from employers to employees.

// We can sign any type of file, creating a .p7m as output.
// The .p7m contains the signature and also embeds the data of the file that is signed.
ls_InFile = "qa_data/xml/cust_credit_transfer.xml"
ls_P7mFile = "c:/temp/qa_output/cust_credit_transfer.p7m"

// -----------------------------------------------------------------------------------------
// Also see Chilkat's online tool to examine a .p7m and generate code to duplicate the .p7m
// -----------------------------------------------------------------------------------------

// Create the CAdES-BES attached signature, which contains the original data.
li_Success = loo_Crypt.CreateP7M(ls_InFile,ls_P7mFile)
if li_Success = 0 then
    Write-Debug loo_Crypt.LastErrorText
    destroy loo_Cert
    destroy loo_Crypt
    return
end if

Write-Debug "Created the .p7m"

// --------------------------------------
// Now do the reverse and validate/extract
// --------------------------------------

ls_OutFile = "c:/temp/qa_output/out.xml"
ls_InFile = "qa_data/p7m/cust_credit_transfer.p7m"

// Verify and extract the encapsulated file:
li_Success = loo_Crypt.VerifyP7M(ls_InFile,ls_OutFile)
if li_Success = 0 then
    Write-Debug loo_Crypt.LastErrorText
    destroy loo_Cert
    destroy loo_Crypt
    return
end if

Write-Debug "Success!"


destroy loo_Cert
destroy loo_Crypt