(AutoIt) Verify and Unwrap S/MIME, and get Information about CMS Signature

Demonstrates calling the Verify method to verify and unwrap S/MIME. The MIME is restored to the original structure that it would have originally had prior to signing. The Verify method works with both detached signatures, as well as opaque/attached signatures.

Calls LastJsonData to get information about the signature(s) that were verified.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

; This example requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

$oMime = ObjCreate("Chilkat.Mime")

; Load the signed MIME from a file...
Local $bSuccess = $oMime.LoadMimeFile("qa_data/mime/detached_sig.eml")
If ($bSuccess = False) Then
    ConsoleWrite($oMime.LastErrorText & @CRLF)
    Exit
EndIf

; Verify the S/MIME and restore the MIME
; to the structure/content it had prior to signing.
Local $bVerified = $oMime.Verify()
If ($bVerified = False) Then
    ConsoleWrite($oMime.LastErrorText & @CRLF)
    Exit
EndIf

; Examine the details of what was verified.
Local $oJson = $oMime.LastJsonData()
$oJson.EmitCompact = False
ConsoleWrite($oJson.Emit() & @CRLF)

; The code to parse the following JSON (i.e. extract desired information) is shown below..

; {
;   "pkcs7": {
;     "verify": {
;       "certs": [
;         {
;           "issuerCN": "VeriSign Class 1 Public Primary Certification Authority - G3",
;           "serial": "0702A21A85B84B659E180A6EE6F5A365"
;         },
;         {
;           "issuerCN": "VeriSign Class 1 Public Primary Certification Authority - G3",
;           "serial": "008B5B75568454850B00CFAF3848CEB1A4"
;         },
;         {
;           "issuerCN": "Symantec Class 1 Individual Subscriber CA - G5",
;           "serial": "619C55C32FF6BD1A7B7E0330D21C8F3C"
;         }
;       ],
;       "digestAlgorithms": [
;         "sha1"
;       ],
;       "signerInfo": [
;         {
;           "cert": {
;             "serialNumber": "619C55C32FF6BD1A7B7E0330D21C8F3C",
;             "issuerCN": "Symantec Class 1 Individual Subscriber CA - G5",
;             "digestAlgOid": "1.3.14.3.2.26",
;             "digestAlgName": "SHA1"
;           },
;           "contentType": "1.2.840.113549.1.7.1",
;           "signingTime": "160428055000Z",
;           "messageDigest": "2hJJVmO/jtaJV5uCKMFzIkRRvtY=",
;           "signingAlgOid": "1.2.840.113549.1.1.1",
;           "signingAlgName": "RSA-PKCSV-1_5",
;           "authAttr": {
;             "1.2.840.113549.1.9.3": {
;               "name": "contentType",
;               "oid": "1.2.840.113549.1.7.1"
;             },
;             "1.2.840.113549.1.9.5": {
;               "name": "signingTime",
;               "utctime": "160428055000Z"
;             },
;             "1.2.840.113549.1.9.4": {
;               "name": "messageDigest",
;               "digest": "2hJJVmO/jtaJV5uCKMFzIkRRvtY="
;             },
;             "1.2.840.113549.1.9.15": {
;               "der": "MFAwCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKA=="
;             },
;             "1.3.6.1.4.1.311.16.4": {
;               "der": "MIG7MIG...7fgMw0hyPPA=="
;             }
;           }
;         }
;       ]
;     }
;   }
; }

; Use this online tool to generate parsing code from sample JSON: 
; Generate Parsing Code from JSON

$oSigningTime = ObjCreate("Chilkat.DtObj")
$oAuthAttrSigningTimeUtctime = ObjCreate("Chilkat.DtObj")
Local $sIssuerCN
Local $serial
Local $strVal
Local $sCertSerialNumber
Local $sCertIssuerCN
Local $sCertDigestAlgOid
Local $sCertDigestAlgName
Local $sContentType
Local $sMessageDigest
Local $signingAlgOid
Local $signingAlgName
Local $sAuthAttrContentTypeName
Local $sAuthAttrContentTypeOid
Local $sAuthAttrSigningTimeName
Local $sAuthAttrMessageDigestName
Local $sAuthAttrMessageDigestDigest
Local $sAuthAttr1_2_840_113549_1_9_15Der
Local $sAuthAttr1_3_6_1_4_1_311_16_4Der

Local $i = 0
Local $iCount_i = $oJson.SizeOfArray("pkcs7.verify.certs")
While $i < $iCount_i
    $oJson.I = $i
    $sIssuerCN = $oJson.StringOf("pkcs7.verify.certs[i].issuerCN")
    $serial = $oJson.StringOf("pkcs7.verify.certs[i].serial")
    $i = $i + 1
Wend
$i = 0
$iCount_i = $oJson.SizeOfArray("pkcs7.verify.digestAlgorithms")
While $i < $iCount_i
    $oJson.I = $i
    $strVal = $oJson.StringOf("pkcs7.verify.digestAlgorithms[i]")
    $i = $i + 1
Wend
$i = 0
$iCount_i = $oJson.SizeOfArray("pkcs7.verify.signerInfo")
While $i < $iCount_i
    $oJson.I = $i
    $sCertSerialNumber = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.serialNumber")
    $sCertIssuerCN = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.issuerCN")
    $sCertDigestAlgOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.digestAlgOid")
    $sCertDigestAlgName = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.digestAlgName")
    $sContentType = $oJson.StringOf("pkcs7.verify.signerInfo[i].contentType")
    $oJson.DtOf("pkcs7.verify.signerInfo[i].signingTime",False,$oSigningTime)
    $sMessageDigest = $oJson.StringOf("pkcs7.verify.signerInfo[i].messageDigest")
    $signingAlgOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].signingAlgOid")
    $signingAlgName = $oJson.StringOf("pkcs7.verify.signerInfo[i].signingAlgName")
    $sAuthAttrContentTypeName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.3"".name")
    $sAuthAttrContentTypeOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.3"".oid")
    $sAuthAttrSigningTimeName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.5"".name")
    $oJson.DtOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.5"".utctime",False,$oAuthAttrSigningTimeUtctime)
    $sAuthAttrMessageDigestName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.4"".name")
    $sAuthAttrMessageDigestDigest = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.4"".digest")
    $sAuthAttr1_2_840_113549_1_9_15Der = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.15"".der")
    $sAuthAttr1_3_6_1_4_1_311_16_4Der = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.3.6.1.4.1.311.16.4"".der")
    $i = $i + 1
Wend