Lua Requires Chilkat v11.0.0+

P7S - Access Signature Information (date/time, certificate used, etc.)

See more Digital Signatures Examples

Examine a PKCS7 signature (.p7s) and get information about it. Lua

local chilkat = require("chilkat")

-- This requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

-- First load the .p7s file into a BinData object..
local bd = chilkat.BinData.new()
local success = bd:load_file("qa_data/p7s/sample.p7s")
if not success then
    print("Failed to load .p7s file.")
    return
end

local crypt = chilkat.Crypt2.new()

-- Assuming this is a signature that contains the original data that was signed..
success = crypt:opaque_verify_bd(bd)
if not success then
    print(crypt.last_error_text)
    return
end

-- Examine the last JSON data after signature verification..
local json = chilkat.JsonObject.new()
crypt:get_last_json_data(json)

json.emit_compact = false
print(json:emit())

-- Sample output...
-- Go to http://tools.chilkat.io/jsonParse.cshtml
-- and paste the JSON into the online form to generate JSON parsing code.

-- {
--   "pkcs7": {
--     "verify": {
--       "digestAlgorithms": [
--         "sha256"
--       ],
--       "signerInfo": [
--         {
--           "cert": {
--             "serialNumber": "AAC5FC48C0FD8FBB",
--             "issuerCN": "AC ABCDEF RFB v5",
--             "issuerDN": "",
--             "digestAlgOid": "2.16.840.1.101.3.4.2.1",
--             "digestAlgName": "SHA-256"
--           },
--           "contentType": "1.2.840.113549.1.7.1",
--           "signingTime": "180607195054Z",
--           "messageDigest": "trzyxXbZ96z2M4mncyZ7BNMV4yIT92+5sS27Fu64iG8=",
--           "signingAlgOid": "1.2.840.113549.1.1.11",
--           "signerDigest": "trzyxXbZ96z2M4mncyZ7BNMV4yIT92+5sS27Fu64iG8="
--         },
--         {
--           "cert": {
--             "serialNumber": "324FB38ABD59723F",
--             "issuerCN": "AC ABCDEF RFB v5",
--             "issuerDN": "",
--             "digestAlgOid": "2.16.840.1.101.3.4.2.1",
--             "digestAlgName": "SHA-256"
--           },
--           "contentType": "1.2.840.113549.1.7.1",
--           "signingTime": "180608182517Z",
--           "messageDigest": "trzyxXbZ96z2M4mncyZ7BNMV4yIT92+5sS27Fu64iG8=",
--           "signingAlgOid": "1.2.840.113549.1.1.11",
--           "signerDigest": "trzyxXbZ96z2M4mncyZ7BNMV4yIT92+5sS27Fu64iG8="
--         }
--       ]
--     }
--   }
-- }
--

local strVal = ""
local certSerialNumber = ""
local certIssuerCN = ""
local certIssuerDN = ""
local certDigestAlgOid = ""
local certDigestAlgName = ""
local contentType = ""
local signingTime = ""
local messageDigest = ""
local signingAlgOid = ""
local signerDigest = ""
local dt = chilkat.DateTime.new()

local i = 0
local count_i = json:size_of_array("pkcs7.verify.digestAlgorithms")
while i < count_i do
    json.i = i
    strVal = json:string_of("pkcs7.verify.digestAlgorithms[i]")
    i = i + 1
end

i = 0
count_i = json:size_of_array("pkcs7.verify.signerInfo")
while i < count_i do
    json.i = i
    certSerialNumber = json:string_of("pkcs7.verify.signerInfo[i].cert.serialNumber")
    certIssuerCN = json:string_of("pkcs7.verify.signerInfo[i].cert.issuerCN")
    certIssuerDN = json:string_of("pkcs7.verify.signerInfo[i].cert.issuerDN")
    certDigestAlgOid = json:string_of("pkcs7.verify.signerInfo[i].cert.digestAlgOid")
    certDigestAlgName = json:string_of("pkcs7.verify.signerInfo[i].cert.digestAlgName")
    contentType = json:string_of("pkcs7.verify.signerInfo[i].contentType")
    signingTime = json:string_of("pkcs7.verify.signerInfo[i].signingTime")

    -- The signingTime isin UTCTime format.
    -- UTCTime values take the form of either "YYMMDDhhmm[ss]Z" or "YYMMDDhhmm[ss](+|-)hhmm"
    -- The SetFromTimestamp method auto-recognizes the UTCTime format and parses it correctly.
    success = dt:set_from_timestamp(signingTime)
    -- To get the signingTime in other date/time formats, look at the online reference documentation for CkDateTime.
    -- There are numerous methods such as GetAsDateTime, GetAsIso8601, GetAsUnixTime, GetAsRfc822, etc.

    messageDigest = json:string_of("pkcs7.verify.signerInfo[i].messageDigest")
    signingAlgOid = json:string_of("pkcs7.verify.signerInfo[i].signingAlgOid")
    signerDigest = json:string_of("pkcs7.verify.signerInfo[i].signerDigest")
    i = i + 1
end

-- println crypt.LastErrorText;
print("Success.")