nfe-signer 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 21bba212753355413acc9428620b8b72199f4c66
+  data.tar.gz: 693a6a2f356ffa8cd44f7a789ed1e06684e6b0dd
+SHA512:
+  metadata.gz: ffd72e5417a2f38764fea7ab9845367fb6762e8c273cf8a5e62c758bcbd994d3543346a3e28dd7dd799583f77381b0849f951d94ccb3fd806f72035eaaf08300
+  data.tar.gz: f11f4574c912323b19cd58591ee4c25429bede75c6ec4fcf576534cbd5d96eef475cee3af06a0d2fbf5c049039b4a84822e32eb59f6e4f0031bcd5f99fd8429e

data/.gitignore

@@ -0,0 +1,11 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/
+/.gitconfig
+/*.gem

data/.rspec

@@ -0,0 +1,2 @@
+--format documentation
+--color

data/.ruby-gemset

@@ -0,0 +1 @@
+nfe

data/.ruby-version

@@ -0,0 +1 @@
+2.4

data/.travis.yml

@@ -0,0 +1,7 @@
+sudo: false
+language: ruby
+rvm:
+  - 2.4.0
+  - 2.3.3
+  - ruby-head
+before_install: gem install bundler -v 1.13.7

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in nfe-signer.gemspec
+gemspec

data/README.md

@@ -0,0 +1,78 @@
+NFe Signer
+==========
+
+[![Build Status](https://travis-ci.org/nfegeral/nfe-signer.svg?branch=master)](https://travis-ci.org/nfegeral/nfe-signer)
+
+Assinador de Nota Fiscal Eletronica em ruby.
+
+Versões suportadas
+------------------
+
+* Ruby 1.9.3
+* Ruby 2.0.x
+* Ruby 2.3.x
+* Ruby 2.4.0
+
+Install
+-------
+
+Se você estiver usando o `Bundler`, basta colocar essa linha no seu Gemfile:
+
+```ruby
+gem 'nfe-signer'
+```
+
+Em seguida, execute o comando bundle install:
+    
+    bundle
+
+Caso contrário, você ainda pode executar um método de instalação padrão de gem:
+    
+    gem install nfe-signer
+
+Exemplo de Uso
+--------------
+
+Primeiro você deve obter a chave privada e o certificado:
+
+```ruby
+key = OpenSSL::PKey::RSA.new(File.read("key.pem"))
+cert = OpenSSL::X509::Certificate.new(File.read("cert.pem"))
+```
+
+Para carregar o xml a partir de um arquivo:
+
+```ruby
+doc = File.open("Nfe.xml") { |f| Nfe::Signer(f) }
+```
+
+Para carregar o xml a partir de uma string:
+
+```ruby
+xml = %{
+  <NFe xmlns="http://www.portalfiscal.inf.br/nfe">
+    <infNFe Id='NFe35170101508376000174550010000000011000203062" versao="3.10">
+    ...
+    </infNFe>
+  </NFe>  
+}
+
+doc = Nfe::Signer(xml)
+```
+
+Para Assinar basta chamar o método sign! passando a chave privada e o certificado.
+Para obter a string com o xml assinado basta executar o metódo to_xml.
+
+```ruby
+doc.sign!(key, cert)
+doc.to_xml
+```
+
+## Contribuidores
+
+* Ronaldo de Sousa Araujo ([ronaldoaraujo](https://github.com/ronaldoaraujo))
+* Lucas Augusto Correa ([correalucas](https://github.com/correalucas))
+
+## Copyright
+
+Copyright (c) 2017 NFe Geral. Leia LICENSE para mais detalhes.

data/Rakefile

@@ -0,0 +1,6 @@
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task :default => :spec

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "nfe/signer"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/lib/nfe/signer.rb

@@ -0,0 +1,21 @@
+require "nokogiri"
+require "nfe/signer/version"
+require "nfe/signer/signature"
+
+module Nfe
+
+  class << self
+
+    def Signer(thing)
+      Nokogiri::XML::Document.parse(thing, nil, "utf-8", Nokogiri::XML::ParseOptions::NOBLANKS)
+    end
+  end
+
+  class Nokogiri::XML::Document
+
+    def sign!(cert, key)
+      Nfe::Signer::Signature.new(self, cert, key)
+      self
+    end
+  end
+end

data/lib/nfe/signer/signature.rb

@@ -0,0 +1,113 @@
+require "base64"
+
+module Nfe
+  module Signer
+    class Signature
+      attr_accessor :document, :key, :cert
+
+      def initialize(document, key, cert)
+        @document = document
+        @key  = key
+        @cert = cert
+        document.root.add_child signature
+      end
+
+      def signature
+        # Create Signature
+        node = Nokogiri::XML::Node.new('Signature', @document)
+        node.default_namespace = 'http://www.w3.org/2000/09/xmldsig#'
+        node.add_child signature_info
+        node.add_child signature_value
+        node.add_child key_info
+        node
+      end
+
+      def signature_info
+        # Create SignatureInfo
+        signature_info_node = Nokogiri::XML::Node.new('SignedInfo', @document)
+
+        # Add CanonicalizationMethod
+        child_node = Nokogiri::XML::Node.new('CanonicalizationMethod', @document)
+        child_node['Algorithm'] = 'http://www.w3.org/TR/2001/REC-xml-c14n-20010315'
+        signature_info_node.add_child child_node
+
+        # Add SignatureMethod
+        child_node = Nokogiri::XML::Node.new('SignatureMethod', @document)
+        child_node['Algorithm'] = 'http://www.w3.org/2000/09/xmldsig#rsa-sha1'
+        signature_info_node.add_child child_node
+
+        # Add Reference
+        signature_info_node.add_child reference
+        signature_info_node
+      end
+
+      def signature_value
+        # Sign Signature
+        xml = Nokogiri::XML(signature_info.to_xml, &:noblanks)
+        xml.root["xmlns"] = 'http://www.w3.org/2000/09/xmldsig#'
+        sign_canon = xml.canonicalize(Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0)
+        signature_hash = @key.sign(OpenSSL::Digest::SHA1.new, sign_canon)
+
+        # Add SignatureValue
+        node = Nokogiri::XML::Node.new('SignatureValue', @document)
+        node.content = Base64.encode64(signature_hash).gsub("\n", '')
+        node
+      end
+
+      def key_info
+        # Create KeyInfo
+        node = Nokogiri::XML::Node.new('KeyInfo', @document)
+        
+        # Add X509 Data and Certificate
+        x509_data = Nokogiri::XML::Node.new('X509Data', @document)
+        x509_certificate = Nokogiri::XML::Node.new('X509Certificate', @document)
+        x509_certificate.content = @cert.to_pem.gsub(/\-\-\-\-\-[A-Z]+ CERTIFICATE\-\-\-\-\-/, "").gsub(/\n/,"")
+
+        x509_data.add_child x509_certificate
+        node.add_child x509_data
+        node
+      end
+
+      def reference
+        infNFe = @document.at_css("infNFe")
+
+        # Calculate digest
+        xml_canon = infNFe.canonicalize(Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0)
+        xml_digest = Base64.encode64(OpenSSL::Digest::SHA1.digest(xml_canon)).strip
+
+        # Create Reference
+        node = Nokogiri::XML::Node.new('Reference', @document)
+        node['URI'] = "##{infNFe['Id']}"
+        node.add_child transforms
+
+        # Add Digest
+        child_node  = Nokogiri::XML::Node.new('DigestMethod', @document)
+        child_node['Algorithm'] = 'http://www.w3.org/2000/09/xmldsig#sha1'
+        node.add_child child_node
+        
+        # Add DigestValue
+        child_node  = Nokogiri::XML::Node.new('DigestValue', @document)
+        child_node.content = xml_digest
+        node.add_child child_node        
+        node
+      end
+
+      def transforms
+        # Add Transforms
+        node = Nokogiri::XML::Node.new('Transforms', @document)
+
+        # Add Transform
+        child_node  = Nokogiri::XML::Node.new('Transform', @document)
+        child_node['Algorithm'] = 'http://www.w3.org/2000/09/xmldsig#enveloped-signature'
+        node.add_child child_node
+
+        # Add Transform
+        child_node  = Nokogiri::XML::Node.new('Transform', @document)
+        child_node['Algorithm'] = 'http://www.w3.org/TR/2001/REC-xml-c14n-20010315'
+        node.add_child child_node
+        node
+      end
+
+    end
+  end
+end

data/lib/nfe/signer/version.rb

@@ -0,0 +1,5 @@
+module Nfe
+  module Signer
+    VERSION = "0.1.0"
+  end
+end

data/nfe-signer.gemspec

@@ -0,0 +1,29 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'nfe/signer/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "nfe-signer"
+  spec.version       = Nfe::Signer::VERSION
+  spec.authors       = ["Ronaldo de Sousa Araujo"]
+  spec.email         = ["contato@ronaldoaraujo.eti.br"]
+
+  spec.summary       = "Assinador para Nota Fiscal Eletronica"
+  spec.description   = "Gem criada para interagir com o sistema de notas fiscais eletronicas do governo brasileiro"
+  spec.homepage      = "http://www.nfegeral.com.br"
+  spec.licenses      = ["MIT"]
+
+  spec.files         = `git ls-files -z`.split("\x0").reject do |f|
+    f.match(%r{^(test|spec|features)/})
+  end
+  spec.bindir        = "exe"
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency "bundler", "~> 1.13"
+  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency "rspec", "~> 3.0"
+  spec.add_development_dependency "nokogiri", "~> 1.7"  
+  spec.add_development_dependency "openssl", "~> 2.0"  
+end

metadata

@@ -0,0 +1,129 @@
+--- !ruby/object:Gem::Specification
+name: nfe-signer
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Ronaldo de Sousa Araujo
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2017-01-21 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.13'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.13'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+- !ruby/object:Gem::Dependency
+  name: openssl
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+description: Gem criada para interagir com o sistema de notas fiscais eletronicas
+  do governo brasileiro
+email:
+- contato@ronaldoaraujo.eti.br
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- ".ruby-gemset"
+- ".ruby-version"
+- ".travis.yml"
+- Gemfile
+- README.md
+- Rakefile
+- bin/console
+- bin/setup
+- lib/nfe/signer.rb
+- lib/nfe/signer/signature.rb
+- lib/nfe/signer/version.rb
+- nfe-signer.gemspec
+homepage: http://www.nfegeral.com.br
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.8
+signing_key: 
+specification_version: 4
+summary: Assinador para Nota Fiscal Eletronica
+test_files: []