Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Android™) Create CAdES p7m using AWS KMS to Sign in the CloudSee more Signing in the Cloud ExamplesDemonstrates how to create a CAdES p7m, using AWS KMS. The signing of the hash happens in the Cloud on AWS KMS. Everything else regarding the creation of CAdES happens locally within Chilkat. Note: This example requires Chilkat v9.5.0.96 or greater.
// Important: Don't forget to include the call to System.loadLibrary // as shown at the bottom of this code sample. package com.test; import android.app.Activity; import com.chilkatsoft.*; import android.widget.TextView; import android.os.Bundle; public class SimpleActivity extends Activity { private static final String TAG = "Chilkat"; // Called when the activity is first created. @Override public void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState); // This example assumes the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // Load the certificate used for signing. The certificate's private key is stored in AWS KMS // However, we still need the certificate locally (without private key). CkCert cert = new CkCert(); boolean success = cert.LoadFromFile("qa_data/certs/myCert.cer"); if (success == false) { Log.i(TAG, cert.lastErrorText()); return; } // Here's a screenshot showing the key ID of a private key in AWS KMS: // To sign using AWS KMS, // add the following lines of code to specify your AWS authentication credentials, // and the ID of the KMS private key. CkJsonObject jsonAwsKms = new CkJsonObject(); // Set the "service" equal to "aws_kms" to tell Chilkat to use AWS KMS for signing. jsonAwsKms.UpdateString("service","aws_kms"); jsonAwsKms.UpdateString("access_key","ACCESS_KEY"); jsonAwsKms.UpdateString("secret_key","SECRET_KEY"); // Make sure to specify the correct region for your case. jsonAwsKms.UpdateString("region","us-west-2"); // In the above screenshot, our key ID is "187012e8-008f-4fc7-b100-5efe6146dff2". You will use your key ID. jsonAwsKms.UpdateString("key_id","187012e8-008f-4fc7-b100-5efe6146dff2"); success = cert.SetCloudSigner(jsonAwsKms); CkCrypt2 crypt = new CkCrypt2(); success = crypt.SetSigningCert(cert); if (success == false) { Log.i(TAG, crypt.lastErrorText()); return; } // The CadesEnabled property applies to all methods that create PKCS7 signatures. // To create a CAdES-BES signature, set this property equal to true. crypt.put_CadesEnabled(true); crypt.put_HashAlgorithm("sha256"); CkJsonObject signedAttrs = new CkJsonObject(); signedAttrs.UpdateInt("contentType",1); signedAttrs.UpdateInt("signingTime",1); signedAttrs.UpdateInt("messageDigest",1); signedAttrs.UpdateInt("signingCertificateV2",1); crypt.put_SigningAttributes(signedAttrs.emit()); // You can sign any type of file.. String inputXmlPath = "qa_data/e-Invoice.xml"; String outputP7mPath = "qa_output/signed.p7m"; // Create the CAdES-BES attached signature, which contains the original data. // Chilkat will build the .p7m locally, but will (internally) use ARSS // to do the RSA signing remotely. success = crypt.CreateP7M(inputXmlPath,outputP7mPath); if (success == false) { Log.i(TAG, crypt.lastErrorText()); return; } Log.i(TAG, "Success."); } static { System.loadLibrary("chilkat"); // Note: If the incorrect library name is passed to System.loadLibrary, // then you will see the following error message at application startup: //"The application <your-application-name> has stopped unexpectedly. Please try again." } } |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.