AutoIt
AutoIt
Verify and Unwrap S/MIME, and get Information about CMS Signature
See more MIME Examples
Demonstrates calling the Verify method to verify and unwrap S/MIME. The MIME is restored to the original structure that it would have originally had prior to signing. The Verify method works with both detached signatures, as well as opaque/attached signatures.Calls LastJsonData to get information about the signature(s) that were verified.
Chilkat AutoIt Downloads
Local $bSuccess = False
; This example requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.
$oMime = ObjCreate("Chilkat.Mime")
; Load the signed MIME from a file...
$bSuccess = $oMime.LoadMimeFile("qa_data/mime/detached_sig.eml")
If ($bSuccess = False) Then
ConsoleWrite($oMime.LastErrorText & @CRLF)
Exit
EndIf
; Verify the S/MIME and restore the MIME
; to the structure/content it had prior to signing.
Local $bVerified = $oMime.Verify()
If ($bVerified = False) Then
ConsoleWrite($oMime.LastErrorText & @CRLF)
Exit
EndIf
; Examine the details of what was verified.
$oJson = ObjCreate("Chilkat.JsonObject")
$oMime.GetLastJsonData $oJson
$oJson.EmitCompact = False
ConsoleWrite($oJson.Emit() & @CRLF)
; The code to parse the following JSON (i.e. extract desired information) is shown below..
; {
; "pkcs7": {
; "verify": {
; "certs": [
; {
; "issuerCN": "VeriSign Class 1 Public Primary Certification Authority - G3",
; "serial": "0702A21A85B84B659E180A6EE6F5A365"
; },
; {
; "issuerCN": "VeriSign Class 1 Public Primary Certification Authority - G3",
; "serial": "008B5B75568454850B00CFAF3848CEB1A4"
; },
; {
; "issuerCN": "Symantec Class 1 Individual Subscriber CA - G5",
; "serial": "619C55C32FF6BD1A7B7E0330D21C8F3C"
; }
; ],
; "digestAlgorithms": [
; "sha1"
; ],
; "signerInfo": [
; {
; "cert": {
; "serialNumber": "619C55C32FF6BD1A7B7E0330D21C8F3C",
; "issuerCN": "Symantec Class 1 Individual Subscriber CA - G5",
; "digestAlgOid": "1.3.14.3.2.26",
; "digestAlgName": "SHA1"
; },
; "contentType": "1.2.840.113549.1.7.1",
; "signingTime": "160428055000Z",
; "messageDigest": "2hJJVmO/jtaJV5uCKMFzIkRRvtY=",
; "signingAlgOid": "1.2.840.113549.1.1.1",
; "signingAlgName": "RSA-PKCSV-1_5",
; "authAttr": {
; "1.2.840.113549.1.9.3": {
; "name": "contentType",
; "oid": "1.2.840.113549.1.7.1"
; },
; "1.2.840.113549.1.9.5": {
; "name": "signingTime",
; "utctime": "160428055000Z"
; },
; "1.2.840.113549.1.9.4": {
; "name": "messageDigest",
; "digest": "2hJJVmO/jtaJV5uCKMFzIkRRvtY="
; },
; "1.2.840.113549.1.9.15": {
; "der": "MFAwCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKA=="
; },
; "1.3.6.1.4.1.311.16.4": {
; "der": "MIG7MIG...7fgMw0hyPPA=="
; }
; }
; }
; ]
; }
; }
; }
; Use this online tool to generate parsing code from sample JSON:
; Generate Parsing Code from JSON
$oSigningTime = ObjCreate("Chilkat.DtObj")
$oAuthAttrSigningTimeUtctime = ObjCreate("Chilkat.DtObj")
Local $sIssuerCN
Local $serial
Local $strVal
Local $sCertSerialNumber
Local $sCertIssuerCN
Local $sCertDigestAlgOid
Local $sCertDigestAlgName
Local $sContentType
Local $sMessageDigest
Local $signingAlgOid
Local $signingAlgName
Local $sAuthAttrContentTypeName
Local $sAuthAttrContentTypeOid
Local $sAuthAttrSigningTimeName
Local $sAuthAttrMessageDigestName
Local $sAuthAttrMessageDigestDigest
Local $sAuthAttr1_2_840_113549_1_9_15Der
Local $sAuthAttr1_3_6_1_4_1_311_16_4Der
Local $i = 0
Local $iCount_i = $oJson.SizeOfArray("pkcs7.verify.certs")
While $i < $iCount_i
$oJson.I = $i
$sIssuerCN = $oJson.StringOf("pkcs7.verify.certs[i].issuerCN")
$serial = $oJson.StringOf("pkcs7.verify.certs[i].serial")
$i = $i + 1
Wend
$i = 0
$iCount_i = $oJson.SizeOfArray("pkcs7.verify.digestAlgorithms")
While $i < $iCount_i
$oJson.I = $i
$strVal = $oJson.StringOf("pkcs7.verify.digestAlgorithms[i]")
$i = $i + 1
Wend
$i = 0
$iCount_i = $oJson.SizeOfArray("pkcs7.verify.signerInfo")
While $i < $iCount_i
$oJson.I = $i
$sCertSerialNumber = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.serialNumber")
$sCertIssuerCN = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.issuerCN")
$sCertDigestAlgOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.digestAlgOid")
$sCertDigestAlgName = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.digestAlgName")
$sContentType = $oJson.StringOf("pkcs7.verify.signerInfo[i].contentType")
$oJson.DtOf("pkcs7.verify.signerInfo[i].signingTime",False,$oSigningTime)
$sMessageDigest = $oJson.StringOf("pkcs7.verify.signerInfo[i].messageDigest")
$signingAlgOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].signingAlgOid")
$signingAlgName = $oJson.StringOf("pkcs7.verify.signerInfo[i].signingAlgName")
$sAuthAttrContentTypeName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.3"".name")
$sAuthAttrContentTypeOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.3"".oid")
$sAuthAttrSigningTimeName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.5"".name")
$oJson.DtOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.5"".utctime",False,$oAuthAttrSigningTimeUtctime)
$sAuthAttrMessageDigestName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.4"".name")
$sAuthAttrMessageDigestDigest = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.4"".digest")
$sAuthAttr1_2_840_113549_1_9_15Der = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.15"".der")
$sAuthAttr1_3_6_1_4_1_311_16_4Der = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.3.6.1.4.1.311.16.4"".der")
$i = $i + 1
Wend