(Tcl) TicketBAI Sign XML Example 2

See more TicketBAI Examples

Second example to demonstrate how to sign XML for TicketBAI.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set success 1
# Create the XML to be signed...
set xmlToSign [new_CkXml]

CkXml_put_Tag $xmlToSign "T:TicketBai"
CkXml_AddAttribute $xmlToSign "xmlns:T" "urn:ticketbai:emision"
CkXml_UpdateChildContent $xmlToSign "Cabecera|IDVersionTBAI" "1.2"
CkXml_UpdateChildContent $xmlToSign "Sujetos|Emisor|NIF" "79732487C"
CkXml_UpdateChildContent $xmlToSign "Sujetos|Emisor|ApellidosNombreRazonSocial" "ARRIOLA LEJARDI ANE"
CkXml_UpdateChildContent $xmlToSign "Sujetos|Destinatarios|IDDestinatario|NIF" "A48012363"
CkXml_UpdateChildContent $xmlToSign "Sujetos|Destinatarios|IDDestinatario|ApellidosNombreRazonSocial" "ACADEMIA ESKOLA"
CkXml_UpdateChildContent $xmlToSign "Factura|CabeceraFactura|SerieFactura" "A2022"
CkXml_UpdateChildContent $xmlToSign "Factura|CabeceraFactura|NumFactura" "0400"
CkXml_UpdateChildContent $xmlToSign "Factura|CabeceraFactura|FechaExpedicionFactura" "12-05-2022"
CkXml_UpdateChildContent $xmlToSign "Factura|CabeceraFactura|HoraExpedicionFactura" "12:20:15"
CkXml_UpdateChildContent $xmlToSign "Factura|DatosFactura|DescripcionFactura" "Venta maquinaria y existencias"
CkXml_UpdateChildContent $xmlToSign "Factura|DatosFactura|ImporteTotalFactura" "1936.00"
CkXml_UpdateChildContent $xmlToSign "Factura|DatosFactura|Claves|IDClave|ClaveRegimenIvaOpTrascendencia" "01"
CkXml_UpdateChildContent $xmlToSign "Factura|TipoDesglose|DesgloseFactura|Sujeta|NoExenta|DetalleNoExenta|TipoNoExenta" "S1"
CkXml_UpdateChildContent $xmlToSign "Factura|TipoDesglose|DesgloseFactura|Sujeta|NoExenta|DetalleNoExenta|DesgloseIVA|DetalleIVA|BaseImponible" "1600.00"
CkXml_UpdateChildContent $xmlToSign "Factura|TipoDesglose|DesgloseFactura|Sujeta|NoExenta|DetalleNoExenta|DesgloseIVA|DetalleIVA|TipoImpositivo" "21.00"
CkXml_UpdateChildContent $xmlToSign "Factura|TipoDesglose|DesgloseFactura|Sujeta|NoExenta|DetalleNoExenta|DesgloseIVA|DetalleIVA|CuotaImpuesto" "336.00"
CkXml_UpdateChildContent $xmlToSign "HuellaTBAI|EncadenamientoFacturaAnterior|SerieFacturaAnterior" "A2022"
CkXml_UpdateChildContent $xmlToSign "HuellaTBAI|EncadenamientoFacturaAnterior|NumFacturaAnterior" "0399"
CkXml_UpdateChildContent $xmlToSign "HuellaTBAI|EncadenamientoFacturaAnterior|FechaExpedicionFacturaAnterior" "06-05-2022"
CkXml_UpdateChildContent $xmlToSign "HuellaTBAI|EncadenamientoFacturaAnterior|SignatureValueFirmaFacturaAnterior" "KdxKFNXeNJuBZNjgvKEa9lICamXs9MHuin6R+yuFHZw9aMewuBvdhaMr7g0eUz8aNYEa1elpCTr7aLgVZjQrFQK/TjIg353iAVxA"
CkXml_UpdateChildContent $xmlToSign "HuellaTBAI|Software|LicenciaTBAI" "TBAIPRUEBA"
CkXml_UpdateChildContent $xmlToSign "HuellaTBAI|Software|EntidadDesarrolladora|NIF" "A48119820"
CkXml_UpdateChildContent $xmlToSign "HuellaTBAI|Software|Nombre" "DFBTBAI"
CkXml_UpdateChildContent $xmlToSign "HuellaTBAI|Software|Version" "1.04.00"
CkXml_UpdateChildContent $xmlToSign "HuellaTBAI|NumSerieDispositivo" "GP4FC5J"

set gen [new_CkXmlDSigGen]

CkXmlDSigGen_put_SigLocation $gen "T:TicketBai"
CkXmlDSigGen_put_SigLocationMod $gen 0
CkXmlDSigGen_put_SigId $gen "Signature-43861174-a0e6-45f9-afbf-8b48c46c6c13-Signature"
CkXmlDSigGen_put_SigNamespacePrefix $gen "ds"
CkXmlDSigGen_put_SigNamespaceUri $gen "http://www.w3.org/2000/09/xmldsig#"
CkXmlDSigGen_put_SigValueId $gen "Signature-43861174-a0e6-45f9-afbf-8b48c46c6c13-SignatureValue"
CkXmlDSigGen_put_SignedInfoCanonAlg $gen "C14N"
CkXmlDSigGen_put_SignedInfoDigestMethod $gen "sha256"

# Set the KeyInfoId before adding references..
CkXmlDSigGen_put_KeyInfoId $gen "Signature-43861174-a0e6-45f9-afbf-8b48c46c6c13-KeyInfo"

# Create an Object to be added to the Signature.
set object1 [new_CkXml]

CkXml_put_Tag $object1 "xades:QualifyingProperties"
CkXml_AddAttribute $object1 "xmlns:xades" "http://uri.etsi.org/01903/v1.3.2#"
CkXml_AddAttribute $object1 "Id" "Signature-43861174-a0e6-45f9-afbf-8b48c46c6c13-QualifyingProperties"
CkXml_AddAttribute $object1 "Target" "#Signature-43861174-a0e6-45f9-afbf-8b48c46c6c13-Signature"
CkXml_AddAttribute $object1 "xmlns:ds" "http://www.w3.org/2000/09/xmldsig#"
CkXml_UpdateAttrAt $object1 "xades:SignedProperties" 1 "Id" "Signature-43861174-a0e6-45f9-afbf-8b48c46c6c13-SignedProperties"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningTime" "TO BE GENERATED BY CHILKAT"
CkXml_UpdateAttrAt $object1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificateV2|xades:Cert|xades:CertDigest|ds:DigestMethod" 1 "Algorithm" "http://www.w3.org/2001/04/xmlenc#sha512"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificateV2|xades:Cert|xades:CertDigest|ds:DigestValue" "TO BE GENERATED BY CHILKAT"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificateV2|xades:Cert|xades:IssuerSerialV2" "TO BE GENERATED BY CHILKAT"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SignaturePolicyIdentifier|xades:SignaturePolicyId|xades:SigPolicyId|xades:Identifier" "https://www.batuz.eus/fitxategiak/batuz/ticketbai/sinadura_elektronikoaren_zehaztapenak_especificaciones_de_la_firma_electronica_v1_0.pdf"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SignaturePolicyIdentifier|xades:SignaturePolicyId|xades:SigPolicyId|xades:Description" ""
CkXml_UpdateAttrAt $object1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SignaturePolicyIdentifier|xades:SignaturePolicyId|xades:SigPolicyHash|ds:DigestMethod" 1 "Algorithm" "http://www.w3.org/2001/04/xmlenc#sha256"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SignaturePolicyIdentifier|xades:SignaturePolicyId|xades:SigPolicyHash|ds:DigestValue" "Quzn98x3PMbSHwbUzaj5f5KOpiH0u8bvmwbbbNkO9Es="
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedSignatureProperties|xades:SignaturePolicyIdentifier|xades:SignaturePolicyId|xades:SigPolicyQualifiers|xades:SigPolicyQualifier|xades:SPURI" "https://www.batuz.eus/fitxategiak/batuz/ticketbai/sinadura_elektronikoaren_zehaztapenak_especificaciones_de_la_firma_electronica_v1_0.pdf"
CkXml_UpdateAttrAt $object1 "xades:SignedProperties|xades:SignedDataObjectProperties|xades:DataObjectFormat" 1 "ObjectReference" "#Reference-43b5c8a3-7ce0-4056-bdbe-d2076d8ac825"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedDataObjectProperties|xades:DataObjectFormat|xades:Description" ""
CkXml_UpdateAttrAt $object1 "xades:SignedProperties|xades:SignedDataObjectProperties|xades:DataObjectFormat|xades:ObjectIdentifier|xades:Identifier" 1 "Qualifier" "OIDAsURN"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedDataObjectProperties|xades:DataObjectFormat|xades:ObjectIdentifier|xades:Identifier" "urn:oid:1.2.840.10003.5.109.10"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedDataObjectProperties|xades:DataObjectFormat|xades:ObjectIdentifier|xades:Description" ""
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedDataObjectProperties|xades:DataObjectFormat|xades:MimeType" "text/xml"
CkXml_UpdateChildContent $object1 "xades:SignedProperties|xades:SignedDataObjectProperties|xades:DataObjectFormat|xades:Encoding" ""

CkXmlDSigGen_AddObject $gen "" [CkXml_getXml $object1] "" ""

# -------- Reference 1 --------
CkXmlDSigGen_AddSameDocRef $gen "" "sha512" "C14N" "" "http://www.w3.org/2000/09/xmldsig#Object"
CkXmlDSigGen_SetRefIdAttr $gen "" "Reference-43b5c8a3-7ce0-4056-bdbe-d2076d8ac825"

# -------- Reference 2 --------
CkXmlDSigGen_AddObjectRef $gen "Signature-43861174-a0e6-45f9-afbf-8b48c46c6c13-SignedProperties" "sha512" "" "" "http://uri.etsi.org/01903#SignedProperties"

# -------- Reference 3 --------
CkXmlDSigGen_AddSameDocRef $gen "Signature-43861174-a0e6-45f9-afbf-8b48c46c6c13-KeyInfo" "sha512" "" "" ""

# Provide a certificate + private key. (PFX password is test123)
set cert [new_CkCert]

set success [CkCert_LoadPfxFile $cert "qa_data/pfx/cert_test123.pfx" "test123"]
if {$success != 1} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkXml $xmlToSign
    delete_CkXmlDSigGen $gen
    delete_CkXml $object1
    delete_CkCert $cert
    exit
}

CkXmlDSigGen_SetX509Cert $gen $cert 1

CkXmlDSigGen_put_KeyInfoType $gen "X509Data+KeyValue"
CkXmlDSigGen_put_X509Type $gen "Certificate"

# Load XML to be signed...
set sbXml [new_CkStringBuilder]

CkXml_GetXmlSb $xmlToSign $sbXml

CkXmlDSigGen_put_Behaviors $gen "IndentedSignature,TransformSignatureXPath"

# Sign the XML...
set success [CkXmlDSigGen_CreateXmlDSigSb $gen $sbXml]
if {$success != 1} then {
    puts [CkXmlDSigGen_lastErrorText $gen]
    delete_CkXml $xmlToSign
    delete_CkXmlDSigGen $gen
    delete_CkXml $object1
    delete_CkCert $cert
    delete_CkStringBuilder $sbXml
    exit
}

# -----------------------------------------------

# Save the signed XML to a file.
set success [CkStringBuilder_WriteFile $sbXml "qa_output/signedXml_2.xml" "utf-8" 0]

puts [CkStringBuilder_getAsString $sbXml]

# ----------------------------------------
# Verify the signatures we just produced...
set verifier [new_CkXmlDSig]

set success [CkXmlDSig_LoadSignatureSb $verifier $sbXml]
if {$success != 1} then {
    puts [CkXmlDSig_lastErrorText $verifier]
    delete_CkXml $xmlToSign
    delete_CkXmlDSigGen $gen
    delete_CkXml $object1
    delete_CkCert $cert
    delete_CkStringBuilder $sbXml
    delete_CkXmlDSig $verifier
    exit
}

set numSigs [CkXmlDSig_get_NumSignatures $verifier]
set verifyIdx 0
while {$verifyIdx < $numSigs} {
    CkXmlDSig_put_Selector $verifier $verifyIdx
    set verified [CkXmlDSig_VerifySignature $verifier 1]
    if {$verified != 1} then {
        puts [CkXmlDSig_lastErrorText $verifier]
        delete_CkXml $xmlToSign
        delete_CkXmlDSigGen $gen
        delete_CkXml $object1
        delete_CkCert $cert
        delete_CkStringBuilder $sbXml
        delete_CkXmlDSig $verifier
        exit
    }

    set verifyIdx [expr $verifyIdx + 1]
}
puts "All signatures were successfully verified."

delete_CkXml $xmlToSign
delete_CkXmlDSigGen $gen
delete_CkXml $object1
delete_CkCert $cert
delete_CkStringBuilder $sbXml
delete_CkXmlDSig $verifier