AutoIt Requires Chilkat v11.0.0+
Verify a CAdES-BES Signature and Examine Signature Contents

Demonstrates how to validate a .p7m (.p7s) signature and examine the contents of the signature.
Chilkat AutoIt Downloads

AutoIt
Local $bSuccess = False

;  This example requires the Chilkat API to have been previously unlocked.
;  See Global Unlock Sample for sample code.

$oCrypt = ObjCreate("Chilkat.Crypt2")

Local $sOutputFile = "qa_output/original.xml"
Local $sInFile = "qa_data/p7m/fattura_signature.xml.p7m"

;  Verify the signature and extract the contained file, which in this case is XML.
$bSuccess = $oCrypt.VerifyP7M($sInFile,$sOutputFile)
If ($bSuccess = False) Then
    ConsoleWrite($oCrypt.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite("Signature validated." & @CRLF)

;  Now let's examine the information about the signature.
$oJson = ObjCreate("Chilkat.JsonObject")
$oCrypt.GetLastJsonData $oJson

$oJson.EmitCompact = False
ConsoleWrite($oJson.Emit() & @CRLF)

;  Here's an example of the information about the signature:
;  {
;    "pkcs7": {
;      "verify": {
;        "certs": [
;          {
;            "issuerCN": "Xyz EU Qualified Certificates CA G1",
;            "serial": "99A28A51AC389999"
;          }
;        ],
;        "useConstructedOctets": true,
;        "digestAlgorithms": [
;          "sha256"
;        ],
;        "signerInfo": [
;          {
;            "cert": {
;              "subjectKeyIdentifier": "5VM4x8AWnXf07yzbXuLtbb0U3yY=",
;              "digestAlgOid": "2.16.840.1.101.3.4.2.1",
;              "digestAlgName": "SHA256"
;            },
;            "signingAlgOid": "1.2.840.113549.1.1.11",
;            "signingAlgName": "RSA-SHA256-PKCSV-1_5",
;            "authAttr": {
;              "1.2.840.113549.1.9.3": {
;                "name": "contentType",
;                "oid": "1.2.840.113549.1.7.1"
;              },
;              "1.2.840.113549.1.9.5": {
;                "name": "signingTime",
;                "utctime": "190901152340Z"
;              },
;              "1.2.840.113549.1.9.4": {
;                "name": "messageDigest",
;                "digest": "y+gd/zAQK33A//HInhaZba7w1fUJleV9AHbP1Ntx6U0="
;              },
;              "1.2.840.113549.1.9.16.2.47": {
;                "name": "signingCertificateV2",
;                "der": "MIH4MI..w4vv0="
;              }
;            }
;          }
;        ]
;      }
;    }
;  }

;  Use this online tool to generate parsing code from sample JSON: 
;  Generate Parsing Code from JSON

$oAuthAttrSigningTimeUtctime = ObjCreate("Chilkat.DtObj")
Local $sIssuerCN
Local $serial
Local $strVal
Local $sCertSubjectKeyIdentifier
Local $sCertDigestAlgOid
Local $sCertDigestAlgName
Local $signingAlgOid
Local $signingAlgName
Local $sAuthAttrContentTypeName
Local $sAuthAttrContentTypeOid
Local $sAuthAttrSigningTimeName
Local $sAuthAttrMessageDigestName
Local $sAuthAttrMessageDigestDigest
Local $sAuthAttrSigningCertificateV2Name
Local $sAuthAttrSigningCertificateV2Der

Local $i = 0
Local $iCount_i = $oJson.SizeOfArray("pkcs7.verify.certs")
While $i < $iCount_i
    $oJson.I = $i
    $sIssuerCN = $oJson.StringOf("pkcs7.verify.certs[i].issuerCN")
    $serial = $oJson.StringOf("pkcs7.verify.certs[i].serial")
    $i = $i + 1
Wend
$i = 0
$iCount_i = $oJson.SizeOfArray("pkcs7.verify.digestAlgorithms")
While $i < $iCount_i
    $oJson.I = $i
    $strVal = $oJson.StringOf("pkcs7.verify.digestAlgorithms[i]")
    $i = $i + 1
Wend
$i = 0
$iCount_i = $oJson.SizeOfArray("pkcs7.verify.signerInfo")
While $i < $iCount_i
    $oJson.I = $i
    $sCertSubjectKeyIdentifier = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.subjectKeyIdentifier")
    $sCertDigestAlgOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.digestAlgOid")
    $sCertDigestAlgName = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.digestAlgName")
    $signingAlgOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].signingAlgOid")
    $signingAlgName = $oJson.StringOf("pkcs7.verify.signerInfo[i].signingAlgName")
    $sAuthAttrContentTypeName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.3"".name")
    $sAuthAttrContentTypeOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.3"".oid")
    $sAuthAttrSigningTimeName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.5"".name")
    $oJson.DtOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.5"".utctime",False,$oAuthAttrSigningTimeUtctime)
    $sAuthAttrMessageDigestName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.4"".name")
    $sAuthAttrMessageDigestDigest = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.4"".digest")
    $sAuthAttrSigningCertificateV2Name = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.16.2.47"".name")
    $sAuthAttrSigningCertificateV2Der = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.16.2.47"".der")
    $i = $i + 1
Wend