You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
45 lines
1.6 KiB
45 lines
1.6 KiB
# -*- coding: utf-8 -*-
|
|
# © 2016 Danimar Ribeiro, Trustcode
|
|
# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
|
|
|
|
import signxml
|
|
from lxml import etree
|
|
from pytrustnfe.certificado import extract_cert_and_key_from_pfx
|
|
from signxml import XMLSigner
|
|
|
|
|
|
class Assinatura(object):
|
|
|
|
def __init__(self, arquivo, senha):
|
|
self.arquivo = arquivo
|
|
self.senha = senha
|
|
|
|
def assina_xml(self, xml_element, reference):
|
|
cert, key = extract_cert_and_key_from_pfx(self.arquivo, self.senha)
|
|
|
|
for element in xml_element.iter("*"):
|
|
if element.text is not None and not element.text.strip():
|
|
element.text = None
|
|
|
|
signer = XMLSigner(
|
|
method=signxml.methods.enveloped, signature_algorithm=u"rsa-sha1",
|
|
digest_algorithm=u'sha1',
|
|
c14n_algorithm=u'http://www.w3.org/TR/2001/REC-xml-c14n-20010315')
|
|
|
|
ns = {}
|
|
ns[None] = signer.namespaces['ds']
|
|
signer.namespaces = ns
|
|
element_to_be_signed = xml_element.getchildren()[0].getchildren()[0]
|
|
|
|
signed_root = signer.sign(
|
|
element_to_be_signed, key=key.encode(), cert=cert.encode())
|
|
if reference:
|
|
element_signed = signed_root.find(".//*[@Id='%s']" % reference)
|
|
|
|
signature = signed_root.find(
|
|
".//{http://www.w3.org/2000/09/xmldsig#}Signature")
|
|
|
|
if element_signed is not None and signature is not None:
|
|
parent = xml_element.getchildren()[0]
|
|
parent.append(signature)
|
|
return etree.tostring(xml_element, encoding=str)
|