خطأ 400 Invalid-CSR عند التسجيل في بيئة المحاكاة

Onboarding, renewal and revocation
1

السلام عليكم
حصلت على CSID المبدئي للامتثال
وارسلت عدد من الفواتير الضريبية القياسية والاشعارات دائن/مدين بنجاح واريد الان تسجيل production CSID
حيث استخدم لغة php

$authValue = base64_encode($api['csid'] . ':' . $api['secret']);
$headers = [
    "Authorization: Basic $authValue",
    "Accept: application/json",
    "accept-version: v2",
    "Accept-Language: en",
    "Content-Type: application/json",
];

    $payload = json_encode(['compliance_request_id' => (string)$api['last_request_id']], JSON_UNESCAPED_SLASHES);

    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_POST           => true,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER     => $headers,
        CURLOPT_POSTFIELDS     => $payload,
        CURLOPT_SSL_VERIFYPEER => true,
        CURLOPT_SSL_VERIFYHOST => 2,
        CURLOPT_TIMEOUT        => 30, 
    ]);

حيث ان بيانات الارسال :

REQUEST HEADERS:
Array
(
    [0] => Authorization: Basic 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
    [1] => Accept: application/json
    [2] => accept-version: v2
    [3] => Accept-Language: en
    [4] => Content-Type: application/json
)

REQUEST PAYLOAD:
{"compliance_request_id":"1748007643395"}

ورغم ذلك تظهر لي رسالة الخطأ التالية

RAW RESPONSE (HTTP 400):
Array
(
    [errorCode] => 400
    [errorCategory] => Invalid-CSR
    [errorMessage] => The provided Certificate Signing Request (CSR) is invalid.
)

API Error: The provided Certificate Signing Request (CSR) is invalid.

علما بأنني استخدم الرابط :

https://gw-fatoora.zatca.gov.sa/e-invoicing/simulation/production/csids

ارجو المساعده

2

وعليكم السلام ورحمة الله، الرجاء الاطلاع على الاجابة ادناه باللغة الانجليزية @abubany

You are receiving such an error because of a mistake in generating your CSR for simulation, please ensure performing next steps to solve this issue:

Re-generate a Certificate Signing Request (CSR):**

  • Ensure taking simulation requirements in consideration:
    • OpenSSL: Set CertificateTemplateNameASN1 in “CNF” configuration file to PRINTABLESTRING:PREZATCA-Code-Signing
    • SDK Command: Include -sim before the command for generating the CSR if you are using SDK for CSR generation.
  1. Ensure using right endpoints for “simulation” which can be found on fatoora portal user manual
  2. Re-do the same process with a new “OTP” that obtained from fatoora “simulation” portal

Although simulation is a replica to the production environment, they are still independent environments, so please consider simulation requirements when generating the CSR.

Please confirm when the issue is fixed, should you require any further information, please don’t hesitate to reach out.

3

ارجو المساعدة لازلت عالق عند هذه النقطة!!

4

السلام عليكم .. هل تم حل المشكلة؟

5

**"I have the same issue. I’m working with Laravel and generating a CSR, but when I try to generate the CSID and secret key, I get an ‘invalid CSR’ error

im working with a simulation for local test

and my env this is fake data im put it **
ZATCA_ENVIRONMENT=simulation

# Business Information (REQUIRED)

ZATCA_SELLER_NAME=“Sting”

ZATCA_TAX_NUMBER=“300000000000003”

ZATCA_ORGANIZATION_NAME=“Sting”

ZATCA_BUSINESS_CATEGORY=“IT Services”

ZATCA_REGISTERED_ADDRESS=“Riyadh, Riyadh, Saudi Arabia”

# Phase 2 Credentials (Get these after CSR process)

ZATCA_CSID=‘’

ZATCA_SECRET=‘’

# B2B Threshold (invoices above this amount need clearance)

ZATCA_B2B_THRESHOLD=1000

and im using salla/zataca for generate csr

$data = CSRRequest::make()

            ->setUID($this->tax_number)

            ->setSerialNumber('INVOICE_SYSTEM', '1.0.0', uniqid())

            ->setCommonName($this->organization_name ?: $this->seller_name)

            ->setCountryName('SA')

            ->setOrganizationName($this->organization_name ?: $this->seller_name)

            ->setOrganizationalUnitName($this->business_category)

            ->setRegisteredAddress($this->registered_address ?: 'Riyadh, Saudi Arabia')

            ->setInvoiceType(true, true) *// Both simplified and standard*

            ->setCurrentZatcaEnv($this->environment)

            ->setBusinessCategory($this->business_category);

any help?

6

*وعَـليّـكــمُ الــسَلآم ورحَــمةٌ اللَّـــہ وبــركَاتــه*

نعم، الحمدلله

7

السلام عليكم ممكن مساعده في المرحله الثانيه ؟ انا حاليا بعمل generate csr بداتا من عندى
وعاوز اجيب ال csid
انا في بيئه اختبار الان وشغال ب laravel
ممكن رقم تواصل او تساعدنى لو سمحت؟ واكون شاكر ليك جدا

8

يوجد رابط مثبت في الصفحة الرئيسية يشرح طريقة الحصول على CSR , و باقي الخطوات بصراحة مفيد جدا

9

عندى مشكله حاليا في ارسال ال 6 فواتير
3 ال standard
بينجحوا اما ال
simplified
فيهم 3 مشاكل ال qr and certificate hash
ممكن تساعدنى اذا قمت بعملها من قبلها