Xbase++ Requires Chilkat v11.0.0+

Sign Mexico Pedimento

See more Misc Examples

Add a signature to a Mexico pedimento file. Xbase++

LOCAL nSuccess
LOCAL nBCRLF
LOCAL oSb
LOCAL cMd5_base64
LOCAL oPrivKey
LOCAL oXml
LOCAL oAsn
LOCAL oRsa
LOCAL oBdSig
LOCAL oCert
LOCAL cSerialHex
LOCAL oSbSerial
LOCAL nNumReplaced

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  This is the contents before signing:

//  500|1|3621|4199800|400||
//  601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||
//  507|4199800|IM|2006-7888">
//  507|4199800|MS|2">
//  800|4199800|1">
//  801|M3621037.222|1|5|011|

//  This is the contents after signing

//  500|1|3621|4199800|400||
//  601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||
//  507|4199800|IM|2006-7888">
//  507|4199800|MS|2">
//  800|4199800|1|fhP2Ker54D2+3+UZch23F0E72 .... 9qNSPIuAqpj524qLZbbA==|30001000000500003416|
//  801|M3621037.222|1|5|011|

//  First create the text to be signed.
nBCRLF := 1
oSb := CreateObject("Chilkat.StringBuilder")
//  Use CRLF line endings.
oSb:AppendLine("500|1|3621|4199800|400||", nBCRLF)
oSb:AppendLine("601|3621|4199800|400|IN|1||EKU9003173C9|EKU9003173C9FRNN09|1||", nBCRLF)
oSb:AppendLine("507|4199800|IM|2006-7888">", nBCRLF)
oSb:AppendLine("507|4199800|MS|2">", nBCRLF)

//  Generate the MD5 hash of what we have so far..
cMd5_base64 := oSb:GetHash("md5", "base64", "utf-8")
? "MD5 hash = " + cMd5_base64

//  Complete the original file.
//  After signing, we'll update the BASE64_SIGNATURE and CERT_SERIAL
oSb:AppendLine("800|4199800|1|BASE64_SIGNATURE|CERT_SERIAL|", nBCRLF)
oSb:AppendLine("801|M3621037.222|1|5|011|", nBCRLF)

//  We're going to sign the MD5 hash using the private key.
oPrivKey := CreateObject("Chilkat.PrivateKey")
nSuccess := oPrivKey:LoadAnyFormatFile("qa_data/certs/mexico_test/Certificados_de_Prueba/Certificados_Pruebas/Personas Morales/EKU9003173C9_20230517223532/CSD_EKU9003173C9_20230517223903/CSD_Sucursal_1_EKU9003173C9_20230517_223850.key", "12345678a")
IF (nSuccess == 0)
    ? oPrivKey:LastErrorText
    oSb:destroy()
    oPrivKey:destroy()
    RETURN
ENDIF

//  Generate the ASN.1 to be signed.

//  <sequence>
//      <sequence>
//          <oid>1.2.840.113549.2.5</oid>
//          <null/>
//      </sequence>
//      <octets>SwxHfaJhG+N3pPqay6UzVA==</octets>
//  </sequence>

oXml := CreateObject("Chilkat.Xml")
oXml:Tag := "sequence"
oXml:UpdateChildContent("sequence|oid", "1.2.840.113549.2.5")
oXml:UpdateChildContent("sequence|null", "")
oXml:UpdateChildContent("octets", cMd5_base64)

oAsn := CreateObject("Chilkat.Asn")
oAsn:LoadAsnXml(oXml:GetXml())
? "ASN.1 = " + oAsn:GetEncodedDer("base64")

//  Sign with the private key.
oRsa := CreateObject("Chilkat.Rsa")
nSuccess := oRsa:UsePrivateKey(oPrivKey)
IF (nSuccess == 0)
    ? oRsa:LastErrorText
    oSb:destroy()
    oPrivKey:destroy()
    oXml:destroy()
    oAsn:destroy()
    oRsa:destroy()
    RETURN
ENDIF

//  Create the opaque signature.
oBdSig := CreateObject("Chilkat.BinData")
oBdSig:AppendEncoded(oAsn:GetEncodedDer("base64"), "base64")
nSuccess := oRsa:SignRawBd(oBdSig)
IF (nSuccess == 0)
    ? oRsa:LastErrorText
    oSb:destroy()
    oPrivKey:destroy()
    oXml:destroy()
    oAsn:destroy()
    oRsa:destroy()
    oBdSig:destroy()
    RETURN
ENDIF

//  bd now contains the opaque signature, which embeds the ASN.1, which contains the MD5 hash.
//  We're going to add this line:
//  800|4199800|1|BASE64_SIGNATURE|CERT_SERIAL_NUM|

oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadFromFile("qa_data/certs/mexico_test/Certificados_de_Prueba/Certificados_Pruebas/Personas Morales/EKU9003173C9_20230517223532/CSD_EKU9003173C9_20230517223903/CSD_Sucursal_1_EKU9003173C9_20230517_223850.cer")
IF (nSuccess == 0)
    ? oCert:LastErrorText
    oSb:destroy()
    oPrivKey:destroy()
    oXml:destroy()
    oAsn:destroy()
    oRsa:destroy()
    oBdSig:destroy()
    oCert:destroy()
    RETURN
ENDIF

cSerialHex := oCert:SerialNumber
//  The serial in hex form looks like this:   3330303031303030303030353030303033343136
//  Decode to us-ascii.
oSbSerial := CreateObject("Chilkat.StringBuilder")
oSbSerial:DecodeAndAppend(cSerialHex, "hex", "us-ascii")
? "serial number in us-ascii: " + oSbSerial:GetAsString()

nNumReplaced := oSb:Replace("CERT_SERIAL", oSbSerial:GetAsString())
nNumReplaced := oSb:Replace("BASE64_SIGNATURE", oBdSig:GetEncoded("base64"))

? "------------------------------------"
? "Result:"
? oSb:GetAsString()

oSb:destroy()
oPrivKey:destroy()
oXml:destroy()
oAsn:destroy()
oRsa:destroy()
oBdSig:destroy()
oCert:destroy()
oSbSerial:destroy()