Xbase++
Create XAdES using Smart Card or USB Token

Demonstrates how to create an XAdES signed XML document using a certificate located on a smartcard or USB token.
Chilkat Xbase++ Downloads

Xbase++
LOCAL nSuccess
LOCAL oXmlToSign
LOCAL oGen
LOCAL oObject1
LOCAL oCert
LOCAL oSbXml
LOCAL oVerifier
LOCAL nVerified

nSuccess := 0

//  Load the XML to be signed.
oXmlToSign := CreateObject("Chilkat.Xml")
nSuccess := oXmlToSign:LoadXmlFile("qa_data/fattura_electronica/docToSign.xml")
IF (nSuccess == 0)
    ? oXmlToSign:LastErrorText
    oXmlToSign:destroy()
    RETURN
ENDIF

oGen := CreateObject("Chilkat.XmlDSigGen")

oGen:SigLocation := "p:FatturaElettronica"
oGen:SigId := "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504"
oGen:SigNamespacePrefix := "ds"
oGen:SigNamespaceUri := "http://www.w3.org/2000/09/xmldsig#"
oGen:SigValueId := "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-sigvalue"
oGen:SignedInfoCanonAlg := "C14N"
oGen:SignedInfoDigestMethod := "sha256"

//  Create an Object to be added to the Signature.
//  Note: Chilkat will automatically populate the strings indicated by "TO BE GENERATED BY CHILKAT" with actual/correct values
//  when the XML is signed.
oObject1 := CreateObject("Chilkat.Xml")
oObject1:Tag := "xades:QualifyingProperties"
oObject1:AddAttribute("xmlns:xades", "http://uri.etsi.org/01903/v1.3.2#")
oObject1:AddAttribute("xmlns:xades141", "http://uri.etsi.org/01903/v1.4.1#")
oObject1:AddAttribute("Target", "#xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504")
oObject1:UpdateAttrAt("xades:SignedProperties", 1, "Id", "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-signedprops")
oObject1:UpdateChildContent("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningTime", "TO BE GENERATED BY CHILKAT")
oObject1:UpdateAttrAt("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificateV2|xades:Cert|xades:CertDigest|ds:DigestMethod", 1, "Algorithm", "http://www.w3.org/2001/04/xmlenc#sha256")
oObject1:UpdateChildContent("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificateV2|xades:Cert|xades:CertDigest|ds:DigestValue", "TO BE GENERATED BY CHILKAT")
oObject1:UpdateChildContent("xades:SignedProperties|xades:SignedSignatureProperties|xades:SigningCertificateV2|xades:Cert|xades:IssuerSerialV2", "TO BE GENERATED BY CHILKAT")

oGen:AddObject("", oObject1:GetXml(), "", "")

//  -------- Reference 1 --------
oGen:KeyInfoId := "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-keyinfo"
oGen:AddSameDocRef("xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-keyinfo", "sha256", "", "", "")

//  -------- Reference 2 --------
oGen:AddSameDocRef("", "sha256", "", "", "")
oGen:SetRefIdAttr("", "xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-ref0")

//  -------- Reference 3 --------
oGen:AddObjectRef("xmldsig-6f4b994a-7191-4bb1-ab3c-17549515b504-signedprops", "sha256", "", "", "http://uri.etsi.org/01903#SignedProperties")

//  ----------------------------------------------------------------
//   Load a certificate that has been pre-installed on the Windows system
//   This includes certificates on smartcards and USB tokens
oCert := CreateObject("Chilkat.Cert")

//   You may provide the PIN here..
oCert:SmartCardPin := "000000"

//  Load the certificate on the smartcard currently in the reader (or on the USB token).
//  Pass an empty string to allow Chilkat to automatically choose the CSP (Cryptographi Service Provider).
//  See Load Certificate on Smartcard for information about explicitly selecting a particular CSP.
nSuccess := oCert:LoadFromSmartcard("")
IF (nSuccess == 0)
    ? oCert:LastErrorText
    oXmlToSign:destroy()
    oGen:destroy()
    oObject1:destroy()
    oCert:destroy()
    RETURN
ENDIF

oGen:SetX509Cert(oCert, 1)
oGen:KeyInfoType := "X509Data"
oGen:X509Type := "Certificate"

//  Load XML to be signed...
oSbXml := CreateObject("Chilkat.StringBuilder")
oXmlToSign:GetXmlSb(oSbXml)

oGen:Behaviors := "IndentedSignature,ForceAddEnvelopedSignatureTransform"

//  Sign the XML...
nSuccess := oGen:CreateXmlDSigSb(oSbXml)
IF (nSuccess == 0)
    ? oGen:LastErrorText
    oXmlToSign:destroy()
    oGen:destroy()
    oObject1:destroy()
    oCert:destroy()
    oSbXml:destroy()
    RETURN
ENDIF

//  Save the signed XMl to a file.
nSuccess := oSbXml:WriteFile("qa_output/signedXml.xml", "utf-8", 0)

? oSbXml:GetAsString()

//  ----------------------------------------
//  Verify the signature we just produced...
oVerifier := CreateObject("Chilkat.XmlDSig")
nSuccess := oVerifier:LoadSignatureSb(oSbXml)
IF (nSuccess == 0)
    ? oVerifier:LastErrorText
    oXmlToSign:destroy()
    oGen:destroy()
    oObject1:destroy()
    oCert:destroy()
    oSbXml:destroy()
    oVerifier:destroy()
    RETURN
ENDIF

nVerified := oVerifier:VerifySignature(1)
IF (nVerified != 1)
    ? oVerifier:LastErrorText
    oXmlToSign:destroy()
    oGen:destroy()
    oObject1:destroy()
    oCert:destroy()
    oSbXml:destroy()
    oVerifier:destroy()
    RETURN
ENDIF

? "This signature was successfully verified."

oXmlToSign:destroy()
oGen:destroy()
oObject1:destroy()
oCert:destroy()
oSbXml:destroy()
oVerifier:destroy()