(MFC) Create .p7s Compliant with ICP-Brazil Digital Signature Standard

Demonstrates how to create a .p7s signature that contains a data file, which in this case is a PDF. The .p7s will be compliant with the ICP-Brazil Digital Signature Standard.

Important: This example requires Chilkat v9.5.0.83 or later.

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkCrypt2.h>
#include <CkBinData.h>
#include <CkCert.h>
#include <CkJsonObject.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkCrypt2 crypt;

    // Any type of file can be signed.  It doesn't have to be a PDF.
    const char *inFile = "qa_data/pdf/helloWorld.pdf";

    CkBinData bd;
    bool success = bd.LoadFile(inFile);
    if (success == false) {
        strOut.append("Failed to load ");
        strOut.append(inFile);
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Get the certificate we'll be using to sign.
    CkCert cert;
    success = cert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123");
    if (success == false) {
        strOut.append(cert.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    success = crypt.SetSigningCert(cert);
    if (success == false) {
        strOut.append(crypt.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Set properties for signing...
    crypt.put_HashAlgorithm("sha256");

    CkJsonObject jsonSigningAttrs;
    jsonSigningAttrs.UpdateInt("contentType",1);
    jsonSigningAttrs.UpdateInt("signingTime",1);
    jsonSigningAttrs.UpdateInt("messageDigest",1);
    jsonSigningAttrs.UpdateInt("signingCertificateV2",1);

    jsonSigningAttrs.UpdateString("policyId.id","2.16.76.1.7.1.1.2.3");
    jsonSigningAttrs.UpdateString("policyId.hash","sW6Iu/dzIqZ5lbeQeHeO09DqfIhYe29tUYtxXo92o9U=");
    jsonSigningAttrs.UpdateString("policyId.uri","http://politicas.icpbrasil.gov.br/PA_AD_RB_v2_3.der");
    jsonSigningAttrs.UpdateString("policyId.hashAlg","SHA256");

    // Don't forget to change "helloWorld.pdf" to the name of the file you desire. (it can be any type of file, it doesn't have to be a PDF)
    jsonSigningAttrs.UpdateString("contentHint.text","Content-Type: application/octet-stream\r\nContent-Disposition: attachment;filename=\"helloWorld.pdf\"");
    jsonSigningAttrs.UpdateString("contentHint.oid","1.2.840.113549.1.7.1");

    crypt.put_SigningAttributes(jsonSigningAttrs.emit());

    // The Brazil government validator requires the ASN.1 data to be in "constructed octets" form..
    crypt.put_UncommonOptions("UseConstructedOctets,OmitAlgorithmIdNull");
    crypt.put_IncludeCertChain(false);

    // Sign. 
    success = crypt.OpaqueSignBd(bd);
    if (success == false) {
        strOut.append(crypt.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Save to a .p7s
    success = bd.WriteFile("qa_output/helloWorld.pdf.p7s");

    strOut.append("Success");
    strOut.append("\r\n");


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }