(Swift 3,4,5...) Sign Mexico Pedimento

Add a signature to a Mexico pedimento file.

Chilkat Downloads for the Swift Programming Language MAC OS X (Cocoa) Objective-C/Swift Libs iOS Objective-C/Swift Libs

func chilkatTest() {
    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var success: Bool

    // This is the contents before signing:

    // 500|1|3621|4199800|400||
    // 601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||
    // 507|4199800|IM|2006-7888">
    // 507|4199800|MS|2">
    // 800|4199800|1">
    // 801|M3621037.222|1|5|011|

    // This is the contents after signing

    // 500|1|3621|4199800|400||
    // 601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||
    // 507|4199800|IM|2006-7888">
    // 507|4199800|MS|2">
    // 800|4199800|1|fhP2Ker54D2+3+UZch23F0E72 .... 9qNSPIuAqpj524qLZbbA==|30001000000500003416|
    // 801|M3621037.222|1|5|011|

    // First create the text to be signed.
    var bCRLF: Bool = true
    let sb = CkoStringBuilder()!
    // Use CRLF line endings.
    sb.appendLine("500|1|3621|4199800|400||", crlf: bCRLF)
    sb.appendLine("601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||", crlf: bCRLF)
    sb.appendLine("507|4199800|IM|2006-7888">", crlf: bCRLF)
    sb.appendLine("507|4199800|MS|2">", crlf: bCRLF)

    // Generate the MD5 hash of what we have so far..
    var md5_base64: String? = sb.getHash("md5", encoding: "base64", charset: "utf-8")
    print("MD5 hash = \(md5_base64!)")

    // Complete the original file.
    // After signing, we'll update the BASE64_SIGNATURE and CERT_SERIAL
    sb.appendLine("800|4199800|1|BASE64_SIGNATURE|CERT_SERIAL|", crlf: bCRLF)
    sb.appendLine("801|M3621037.222|1|5|011|", crlf: bCRLF)

    // We're going to sign the MD5 hash using the private key.
    let privKey = CkoPrivateKey()!
    success = privKey.loadAnyFormatFile("qa_data/certs/mexico_test/Certificados_de_Prueba/Certificados_Pruebas/Personas Morales/EKU9003173C9_20230517223532/CSD_EKU9003173C9_20230517223903/CSD_Sucursal_1_EKU9003173C9_20230517_223850.key", password: "12345678a")
    if success == false {
        print("\(privKey.lastErrorText!)")
        return
    }

    // Generate the ASN.1 to be signed.

    // <sequence>
    //     <sequence>
    //         <oid>1.2.840.113549.2.5</oid>
    //         <null/>
    //     </sequence>
    //     <octets>SwxHfaJhG+N3pPqay6UzVA==</octets>
    // </sequence>

    let xml = CkoXml()!
    xml.tag = "sequence"
    xml.updateChildContent("sequence|oid", value: "1.2.840.113549.2.5")
    xml.updateChildContent("sequence|null", value: "")
    xml.updateChildContent("octets", value: md5_base64)

    let asn = CkoAsn()!
    asn.loadXml(xml.getXml())
    print("ASN.1 = \(asn.getEncodedDer("base64")!)")

    // Sign with the private key.
    let rsa = CkoRsa()!
    success = rsa.importPrivateKeyObj(privKey)
    if success == false {
        print("\(rsa.lastErrorText!)")
        return
    }

    // Create the opaque signature.
    let bdSig = CkoBinData()!
    bdSig.appendEncoded(asn.getEncodedDer("base64"), encoding: "base64")
    success = rsa.openSslSignBd(bdSig)
    if success == false {
        print("\(rsa.lastErrorText!)")
        return
    }

    // bd now contains the opaque signature, which embeds the ASN.1, which contains the MD5 hash.
    // We're going to add this line:
    // 800|4199800|1|BASE64_SIGNATURE|CERT_SERIAL_NUM|

    let cert = CkoCert()!
    success = cert.load(fromFile: "qa_data/certs/mexico_test/Certificados_de_Prueba/Certificados_Pruebas/Personas Morales/EKU9003173C9_20230517223532/CSD_EKU9003173C9_20230517223903/CSD_Sucursal_1_EKU9003173C9_20230517_223850.cer")
    if success == false {
        print("\(cert.lastErrorText!)")
        return
    }

    var serialHex: String? = cert.serialNumber
    // The serial in hex form looks like this:   3330303031303030303030353030303033343136
    // Decode to us-ascii.
    let sbSerial = CkoStringBuilder()!
    sbSerial.decodeAndAppend(serialHex, encoding: "hex", charset: "us-ascii")
    print("serial number in us-ascii: \(sbSerial.getAsString()!)")

    var numReplaced: Int = sb.replace("CERT_SERIAL", replacement: sbSerial.getAsString()).intValue
    numReplaced = sb.replace("BASE64_SIGNATURE", replacement: bdSig.getEncoded("base64")).intValue

    print("------------------------------------")
    print("Result:")
    print("\(sb.getAsString()!)")

}