Class: NfsePrefeituraSp::Signer

Inherits:
Object
  • Object
show all
Defined in:
lib/nfse_prefeitura_sp/signer.rb

Overview

Based on https://github.com/iugu/nfe-paulistana

Instance Method Summary collapse

Constructor Details

#initialize(cert) ⇒ Signer

Returns a new instance of Signer.



4
5
6
 
# File 'lib/nfse_prefeitura_sp/signer.rb', line 4

def initialize(cert)
  @cert = cert
end

Instance Method Details

#sign(input_str) ⇒ Object 



8
9
10
11
 
# File 'lib/nfse_prefeitura_sp/signer.rb', line 8

def sign(input_str)
  sign_hash = @cert.key.sign(OpenSSL::Digest::SHA1.new, input_str)
  Base64.strict_encode64(sign_hash)
end

#sign_xml(xml) ⇒ Object 



13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
 
# File 'lib/nfse_prefeitura_sp/signer.rb', line 13

def sign_xml(xml)
  xml = Nokogiri::XML(xml.to_s, &:noblanks)

  # 1. Digest Hash for all XML
  xml_canon = xml.canonicalize(Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0)
  xml_digest = Base64.encode64(OpenSSL::Digest::SHA1.digest(xml_canon)).strip

  # 2. Add Signature Node
  signature = xml.xpath("//ds:Signature", "ds" => "http://www.w3.org/2000/09/xmldsig#").first
  unless signature
    signature = Nokogiri::XML::Node.new('Signature', xml)
    signature.default_namespace = 'http://www.w3.org/2000/09/xmldsig#'
    xml.root().add_child(signature)
  end

  # 3. Add Elements to Signature Node

  # 3.1 Create Signature Info
  signature_info = Nokogiri::XML::Node.new('SignedInfo', xml)

  # 3.2 Add CanonicalizationMethod
  child_node = Nokogiri::XML::Node.new('CanonicalizationMethod', xml)
  child_node['Algorithm'] = 'http://www.w3.org/2001/10/xml-exc-c14n#'
  signature_info.add_child child_node

  # 3.3 Add SignatureMethod
  child_node = Nokogiri::XML::Node.new('SignatureMethod', xml)
  child_node['Algorithm'] = 'http://www.w3.org/2000/09/xmldsig#rsa-sha1'
  signature_info.add_child child_node

  # 3.4 Create Reference
  reference = Nokogiri::XML::Node.new('Reference', xml)
  reference['URI'] = ''

  # 3.5 Add Transforms
  transforms = Nokogiri::XML::Node.new('Transforms', xml)

  child_node = Nokogiri::XML::Node.new('Transform', xml)
  child_node['Algorithm'] = 'http://www.w3.org/2000/09/xmldsig#enveloped-signature'
  transforms.add_child child_node

  child_node = Nokogiri::XML::Node.new('Transform', xml)
  child_node['Algorithm'] = 'http://www.w3.org/TR/2001/REC-xml-c14n-20010315'
  transforms.add_child child_node

  reference.add_child transforms

  # 3.6 Add Digest
  child_node = Nokogiri::XML::Node.new('DigestMethod', xml)
  child_node['Algorithm'] = 'http://www.w3.org/2000/09/xmldsig#sha1'
  reference.add_child child_node

  # 3.6 Add DigestValue
  child_node = Nokogiri::XML::Node.new('DigestValue', xml)
  child_node.content = xml_digest
  reference.add_child child_node

  # 3.7 Add Reference and Signature Info
  signature_info.add_child reference
  signature.add_child signature_info

  # 4 Sign Signature
  sign_canon      = signature_info.canonicalize(Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0)
  signature_hash  = @cert.key.sign(OpenSSL::Digest::SHA1.new, sign_canon)
  signature_value = Base64.encode64(signature_hash).gsub("\n", '')

  # 4.1 Add SignatureValue
  child_node = Nokogiri::XML::Node.new('SignatureValue', xml)
  child_node.content = signature_value
  signature.add_child child_node

  # 5 Create KeyInfo
  key_info = Nokogiri::XML::Node.new('KeyInfo', xml)

  # 5.1 Add X509 Data and Certificate
  x509_data        = Nokogiri::XML::Node.new('X509Data', xml)
  x509_certificate = Nokogiri::XML::Node.new('X509Certificate', xml)
  x509_certificate.content = @cert.certificate.to_s.gsub(/\-\-\-\-\-[A-Z]+ CERTIFICATE\-\-\-\-\-/, "").gsub(/\n/,"")

  x509_data.add_child x509_certificate
  key_info.add_child x509_data

  # 5.2 Add KeyInfo
  signature.add_child key_info

  # 6 Add Signature
  xml.root().add_child signature

  # Return XML
  xml.canonicalize(Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0)
end