(Delphi DLL) Duplicate OpensSSL to Create Signature using Cert and Key Files

This example duplicates the following:

openssl smime –sign -in something.xml -out something.der -signer mycert.crt -inkey cert.key -outform der –nodetach

Note: Although "smime" is the OpenSSL command, it's not actually producing S/MIME. The arguments "-outform der -binary" indicates that the output is binary DER (i.e. the PKCS7 binary signature). The input can be any type of file: XML, PDF, JPG, ... *anything*...

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, BinData, PrivateKey, Cert, Crypt2;

...

procedure TForm1.Button1Click(Sender: TObject);
var
crypt: HCkCrypt2;
cert: HCkCert;
success: Boolean;
bd: HCkBinData;
privkey: HCkPrivateKey;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

crypt := CkCrypt2_Create();

// Load the cert and private key from separate files.
cert := CkCert_Create();
success := CkCert_LoadFromFile(cert,'myCert.crt');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(cert));
    Exit;
  end;

bd := CkBinData_Create();
success := CkBinData_LoadFile(bd,'cert.key');
privkey := CkPrivateKey_Create();
// Load from any format private key.
// If the file does not need a password, the 2nd arg is ignored.
success := CkPrivateKey_LoadAnyFormat(privkey,bd,'password_if_needed');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkPrivateKey__lastErrorText(privkey));
    Exit;
  end;

success := CkCrypt2_SetSigningCert2(crypt,cert,privkey);
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCrypt2__lastErrorText(crypt));
    Exit;
  end;

// Create the opaque signature (PKCS7 binary DER that contains both the signature and original file data).
success := CkCrypt2_CreateP7M(crypt,'qa_data/infile.anything','qa_output/outfile.der');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCrypt2__lastErrorText(crypt));
    Exit;
  end;

Memo1.Lines.Add('Success.');

CkCrypt2_Dispose(crypt);
CkCert_Dispose(cert);
CkBinData_Dispose(bd);
CkPrivateKey_Dispose(privkey);

end;