CkPython

SII XML Digital Signature

See more uncategorized Examples

Example for SII XML Digital Signature. CkPython

import sys
import chilkat

success = False

success = True

# Load the XML to be signed.
xmlToSign = chilkat.CkXml()
success = xmlToSign.LoadXmlFile("c:/aaworkarea/eduardo/sii_unsigned.xml")
if (success == False):
    print(xmlToSign.lastErrorText())
    sys.exit()

# The sample XML to be signed looks like this:

# <?xml version="1.0" encoding="ISO-8859-1"?>
# <EnvioDTE xmlns="http://www.sii.cl/SiiDte" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sii.cl/SiiDte EnvioDTE_v10.xsd" version="1.0">
# <SetDTE ID="SetDocF0T33_20240425_170512">
#  <Caratula version="1.0">
#   <RutEmisor>99999999-4</RutEmisor>
#   <RutEnvia>12345678-6</RutEnvia>
#   <RutReceptor>888888000-K</RutReceptor>
#   <FchResol>2014-08-22</FchResol>
#   <NroResol>80</NroResol>
#   <TmstFirmaEnv>2024-04-25T17:05:13</TmstFirmaEnv>
#   <SubTotDTE>
#    <TpoDTE>33</TpoDTE>
#    <NroDTE>1</NroDTE>
#   </SubTotDTE>
#  </Caratula>
# <DTE version="1.0">
# <Documento ID="F555T55">
# ...
# </Documento>
# </EnvioDTE>

gen = chilkat.CkXmlDSigGen()

gen.put_SigLocation("EnvioDTE|SetDTE|DTE")
gen.put_SigLocationMod(0)
gen.put_SigNamespacePrefix("")
gen.put_SigNamespaceUri("http://www.w3.org/2000/09/xmldsig#")
gen.put_SignedInfoCanonAlg("C14N")
gen.put_SignedInfoDigestMethod("sha1")

# -------- Reference 1 --------
xml1 = chilkat.CkXml()
xml1.put_Tag("Transforms")
xml1.UpdateAttrAt("Transform",True,"Algorithm","http://www.w3.org/TR/2001/REC-xml-c14n-20010315")

gen.AddSameDocRef2("F511T33","sha1",xml1,"")

# Provide a certificate + private key. (PFX password is test123)
cert = chilkat.CkCert()
success = cert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123")
if (success != True):
    print(cert.lastErrorText())
    sys.exit()

gen.SetX509Cert(cert,True)

gen.put_KeyInfoType("X509Data+KeyValue")
gen.put_X509Type("Certificate")

# Load XML to be signed...
sbXml = chilkat.CkStringBuilder()
xmlToSign.GetXmlSb(sbXml)

gen.put_Behaviors("IndentedSignature")

# Sign the XML...
success = gen.CreateXmlDSigSb(sbXml)
if (success != True):
    print(gen.lastErrorText())
    sys.exit()

# -----------------------------------------------

# Save the signed XML to a file.
success = sbXml.WriteFile("c:/temp/qa_output/signedXml.xml","utf-8",False)

print(sbXml.getAsString())

# ----------------------------------------
# Verify the signatures we just produced...
verifier = chilkat.CkXmlDSig()
success = verifier.LoadSignatureSb(sbXml)
if (success != True):
    print(verifier.lastErrorText())
    sys.exit()

numSigs = verifier.get_NumSignatures()
verifyIdx = 0
while verifyIdx < numSigs :
    verifier.put_Selector(verifyIdx)
    verified = verifier.VerifySignature(True)
    if (verified != True):
        print(verifier.lastErrorText())
        sys.exit()

    verifyIdx = verifyIdx + 1

print("All signatures were successfully verified.")