Decoding Binary Security Token

Signing process
1

Hi, I’m trying to run fatoora -sign -invoice invoice.xml

but I get this error
2024-08-29 11:23:42,039 [ERROR] InvoiceSigningService - failed to sign invoice [please provide certificate decoded base64

I am under the impression that cert.pem has to be the binary security token decoded using base 64 decoder. https://base64.guru/converter/decode

I did that and the same error returned

Am I missing something? is the cert.pem the CSR I generated
Am I using the proper decoder? maybe I’m decoding wrong.

2

Hi @charbelsarkis123 ,

Thank you for reaching out.

Please find below is the signing process.

1- Before signing any B2C invoice ensure to decode the
BinarySecurityToken using Base64 and put the decoded BinarySecurityToken to the cert.pem fie following bath inside the SDK (zatca-einvoicing-sdk-238-
R3.3.4\Data\Certificates).
3- After that use the command for signing the invoice (fatoora -sign -invoice “invoiceName.xml”).

After you follow these steps and still facing the error, try to use another decoding tool.

For any further support don’t hesitate to send a detailed information about your concerns to the SP email.

Thanks,

3

I tried using 2 other decoding tools and they gave the same result

does the sercret have anything to do with this?
do I use the binarySecurityToken as is or do I concatenate?

@lalomar

4

You will use the secret in the API request

and you should decode the BainarySecurityToken as it is.

To ensure comprehensive support, please send your concern to the SP support email below. Make sure to include the XML file, the signing steps, and your configuration file that you generated the CSR from.

SP email: sp_support@zatca.gov.sa

5

@lalomar I have sent many emails to that email and no reply ever came.

I’m gonna post here in the hope I get some help
Here is my CCSID (binary security token)

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

Here is the same token in base 64 decoded

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

Do you need anything else to be capable of helping me?