You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
139 lines
5.0 KiB
139 lines
5.0 KiB
# -*- coding: utf-8 -*-
|
|
# © 2016 Danimar Ribeiro, Trustcode
|
|
# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
|
|
|
|
import xmlsec
|
|
import libxml2
|
|
import os.path
|
|
|
|
NAMESPACE_SIG = 'http://www.w3.org/2000/09/xmldsig#'
|
|
|
|
|
|
class Assinatura(object):
|
|
|
|
def __init__(self, arquivo, senha):
|
|
self.arquivo = arquivo
|
|
self.senha = senha
|
|
|
|
def _checar_certificado(self):
|
|
if not os.path.isfile(self.arquivo):
|
|
raise Exception('Caminho do certificado não existe.')
|
|
|
|
def _inicializar_cripto(self):
|
|
libxml2.initParser()
|
|
libxml2.substituteEntitiesDefault(1)
|
|
|
|
xmlsec.init()
|
|
xmlsec.cryptoAppInit(None)
|
|
xmlsec.cryptoInit()
|
|
|
|
def _finalizar_cripto(self):
|
|
xmlsec.cryptoShutdown()
|
|
xmlsec.cryptoAppShutdown()
|
|
xmlsec.shutdown()
|
|
|
|
libxml2.cleanupParser()
|
|
|
|
def assina_xml(self, xml, reference):
|
|
self._checar_certificado()
|
|
self._inicializar_cripto()
|
|
try:
|
|
doc_xml = libxml2.parseMemory(
|
|
xml.encode('utf-8'), len(xml.encode('utf-8')))
|
|
|
|
signNode = xmlsec.TmplSignature(doc_xml,
|
|
xmlsec.transformInclC14NId(),
|
|
xmlsec.transformRsaSha1Id(), None)
|
|
|
|
doc_xml.getRootElement().addChild(signNode)
|
|
refNode = signNode.addReference(xmlsec.transformSha1Id(),
|
|
None, '#' + str(reference), None)
|
|
|
|
refNode.addTransform(xmlsec.transformEnvelopedId())
|
|
refNode.addTransform(xmlsec.transformInclC14NId())
|
|
keyInfoNode = signNode.ensureKeyInfo()
|
|
keyInfoNode.addX509Data()
|
|
|
|
dsig_ctx = xmlsec.DSigCtx()
|
|
chave = xmlsec.cryptoAppKeyLoad(filename=str(self.arquivo),
|
|
format=xmlsec.KeyDataFormatPkcs12,
|
|
pwd=str(self.senha),
|
|
pwdCallback=None,
|
|
pwdCallbackCtx=None)
|
|
|
|
dsig_ctx.signKey = chave
|
|
dsig_ctx.sign(signNode)
|
|
|
|
status = dsig_ctx.status
|
|
dsig_ctx.destroy()
|
|
|
|
if status != xmlsec.DSigStatusSucceeded:
|
|
raise RuntimeError(
|
|
'Erro ao realizar a assinatura do arquivo; status: "' +
|
|
str(status) +
|
|
'"')
|
|
|
|
xpath = doc_xml.xpathNewContext()
|
|
xpath.xpathRegisterNs('sig', NAMESPACE_SIG)
|
|
certificados = xpath.xpathEval(
|
|
'//sig:X509Data/sig:X509Certificate')
|
|
for i in range(len(certificados) - 1):
|
|
certificados[i].unlinkNode()
|
|
certificados[i].freeNode()
|
|
|
|
xml = doc_xml.serialize()
|
|
return xml
|
|
finally:
|
|
doc_xml.freeDoc()
|
|
# self._finalizar_cripto()
|
|
|
|
def assina_xml_nota(self, xml, reference):
|
|
self._checar_certificado()
|
|
self._inicializar_cripto()
|
|
try:
|
|
doc_xml = libxml2.parseMemory(
|
|
xml.encode('utf-8'), len(xml.encode('utf-8')))
|
|
signNode = xmlsec.TmplSignature(doc_xml,
|
|
xmlsec.transformInclC14NId(),
|
|
xmlsec.transformRsaSha1Id(), None)
|
|
doc_xml.getRootElement().get_last().addChild(signNode)
|
|
refNode = signNode.addReference(xmlsec.transformSha1Id(),
|
|
None, '#' + str(reference), None)
|
|
|
|
refNode.addTransform(xmlsec.transformEnvelopedId())
|
|
refNode.addTransform(xmlsec.transformInclC14NId())
|
|
keyInfoNode = signNode.ensureKeyInfo()
|
|
keyInfoNode.addX509Data()
|
|
|
|
dsig_ctx = xmlsec.DSigCtx()
|
|
chave = xmlsec.cryptoAppKeyLoad(filename=str(self.arquivo),
|
|
format=xmlsec.KeyDataFormatPkcs12,
|
|
pwd=str(self.senha),
|
|
pwdCallback=None,
|
|
pwdCallbackCtx=None)
|
|
|
|
dsig_ctx.signKey = chave
|
|
dsig_ctx.sign(signNode)
|
|
|
|
status = dsig_ctx.status
|
|
dsig_ctx.destroy()
|
|
|
|
if status != xmlsec.DSigStatusSucceeded:
|
|
raise RuntimeError(
|
|
'Erro ao realizar a assinatura do arquivo; status: "' +
|
|
str(status) +
|
|
'"')
|
|
|
|
xpath = doc_xml.xpathNewContext()
|
|
xpath.xpathRegisterNs('sig', NAMESPACE_SIG)
|
|
certificados = xpath.xpathEval(
|
|
'//sig:X509Data/sig:X509Certificate')
|
|
for i in range(len(certificados) - 1):
|
|
certificados[i].unlinkNode()
|
|
certificados[i].freeNode()
|
|
|
|
xml = doc_xml.serialize()
|
|
return xml
|
|
finally:
|
|
doc_xml.freeDoc()
|
|
# self._finalizar_cripto()
|