AutoIt

Create Egypt ITIDA CAdES-BES .p7s Signature (with strings in-memory)

See more Egypt ITIDA Examples

Demonstrates how to create a .p7s signature that fits Egypt's ITIDA requirements.

Note: This example requires Chilkat v9.5.0.75 or greater.

AutoIt

Local $bSuccess = False

; This example assumes the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

$oCrypt = ObjCreate("Chilkat.Crypt2")

$oCert = ObjCreate("Chilkat.Cert")

; There are many ways to load the certificate.  
; This example was created for a customer using an ePass2003 USB token.
; Assuming the USB token is the only source of a hardware-based private key..
$bSuccess = $oCert.LoadFromSmartcard("")
If ($bSuccess <> True) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    Exit
EndIf

; Tell the crypt component to use this cert.
$bSuccess = $oCrypt.SetSigningCert($oCert)
If ($bSuccess <> True) Then
    ConsoleWrite($oCrypt.LastErrorText & @CRLF)
    Exit
EndIf

$oCmsOptions = ObjCreate("Chilkat.JsonObject")
; Setting "DigestData" causes OID 1.2.840.113549.1.7.5 (digestData) to be used.
$oCmsOptions.UpdateBool("DigestData",True)
$oCmsOptions.UpdateBool("OmitAlgorithmIdNull",True)
$oCrypt.CmsOptions = $oCmsOptions.Emit()

; The CadesEnabled property applies to all methods that create CMS/PKCS7 signatures. 
; To create a CAdES-BES signature, set this property equal to true. 
$oCrypt.CadesEnabled = True

$oCrypt.HashAlgorithm = "sha256"

$oJsonSigningAttrs = ObjCreate("Chilkat.JsonObject")
$oJsonSigningAttrs.UpdateInt("contentType",1)
$oJsonSigningAttrs.UpdateInt("signingTime",1)
$oJsonSigningAttrs.UpdateInt("messageDigest",1)
$oJsonSigningAttrs.UpdateInt("signingCertificateV2",1)
$oCrypt.SigningAttributes = $oJsonSigningAttrs.Emit()

; By default, all the certs in the chain of authentication are included in the signature.
; If desired, we can choose to only include the signing certificate:
$oCrypt.IncludeCertChain = False

; Make sure we sign the utf-8 byte representation of the JSON string
$oCrypt.Charset = "utf-8"

; Create the CAdES-BES signature.
Local $sTextToSign = """issuer""""address""""branchID""""0""""country""""EG""""regionCity..."

$oCrypt.EncodingMode = "base64"
Local $sigBase64 = $oCrypt.SignStringENC($sTextToSign)
If ($oCrypt.LastMethodSuccess = False) Then
    ConsoleWrite($oCrypt.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite("Base64 signature:" & @CRLF)
ConsoleWrite($sigBase64 & @CRLF)