Sample code for 30+ languages & platforms
AutoIt

Verify a CAdES-BES Signature and Examine Signature Contents

See more Digital Signatures Examples

Demonstrates how to validate a .p7m (.p7s) signature and examine the contents of the signature.

Chilkat AutoIt Downloads

Download Chilkat for AutoIt
AutoIt 
Local $bSuccess = False

; This example requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

$oCrypt = ObjCreate("Chilkat.Crypt2")

Local $sOutputFile = "qa_output/original.xml"
Local $sInFile = "qa_data/p7m/fattura_signature.xml.p7m"

; Verify the signature and extract the contained file, which in this case is XML.
$bSuccess = $oCrypt.VerifyP7M($sInFile,$sOutputFile)
If ($bSuccess = False) Then
    ConsoleWrite($oCrypt.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite("Signature validated." & @CRLF)

; Now let's examine the information about the signature.
$oJson = ObjCreate("Chilkat.JsonObject")
$oCrypt.GetLastJsonData $oJson

$oJson.EmitCompact = False
ConsoleWrite($oJson.Emit() & @CRLF)

; Here's an example of the information about the signature:
; {
;   "pkcs7": {
;     "verify": {
;       "certs": [
;         {
;           "issuerCN": "Xyz EU Qualified Certificates CA G1",
;           "serial": "99A28A51AC389999"
;         }
;       ],
;       "useConstructedOctets": true,
;       "digestAlgorithms": [
;         "sha256"
;       ],
;       "signerInfo": [
;         {
;           "cert": {
;             "subjectKeyIdentifier": "5VM4x8AWnXf07yzbXuLtbb0U3yY=",
;             "digestAlgOid": "2.16.840.1.101.3.4.2.1",
;             "digestAlgName": "SHA256"
;           },
;           "signingAlgOid": "1.2.840.113549.1.1.11",
;           "signingAlgName": "RSA-SHA256-PKCSV-1_5",
;           "authAttr": {
;             "1.2.840.113549.1.9.3": {
;               "name": "contentType",
;               "oid": "1.2.840.113549.1.7.1"
;             },
;             "1.2.840.113549.1.9.5": {
;               "name": "signingTime",
;               "utctime": "190901152340Z"
;             },
;             "1.2.840.113549.1.9.4": {
;               "name": "messageDigest",
;               "digest": "y+gd/zAQK33A//HInhaZba7w1fUJleV9AHbP1Ntx6U0="
;             },
;             "1.2.840.113549.1.9.16.2.47": {
;               "name": "signingCertificateV2",
;               "der": "MIH4MI..w4vv0="
;             }
;           }
;         }
;       ]
;     }
;   }
; }

; Use this online tool to generate parsing code from sample JSON: 
; Generate Parsing Code from JSON

$oAuthAttrSigningTimeUtctime = ObjCreate("Chilkat.DtObj")
Local $sIssuerCN
Local $serial
Local $strVal
Local $sCertSubjectKeyIdentifier
Local $sCertDigestAlgOid
Local $sCertDigestAlgName
Local $signingAlgOid
Local $signingAlgName
Local $sAuthAttrContentTypeName
Local $sAuthAttrContentTypeOid
Local $sAuthAttrSigningTimeName
Local $sAuthAttrMessageDigestName
Local $sAuthAttrMessageDigestDigest
Local $sAuthAttrSigningCertificateV2Name
Local $sAuthAttrSigningCertificateV2Der

Local $i = 0
Local $iCount_i = $oJson.SizeOfArray("pkcs7.verify.certs")
While $i < $iCount_i
    $oJson.I = $i
    $sIssuerCN = $oJson.StringOf("pkcs7.verify.certs[i].issuerCN")
    $serial = $oJson.StringOf("pkcs7.verify.certs[i].serial")
    $i = $i + 1
Wend
$i = 0
$iCount_i = $oJson.SizeOfArray("pkcs7.verify.digestAlgorithms")
While $i < $iCount_i
    $oJson.I = $i
    $strVal = $oJson.StringOf("pkcs7.verify.digestAlgorithms[i]")
    $i = $i + 1
Wend
$i = 0
$iCount_i = $oJson.SizeOfArray("pkcs7.verify.signerInfo")
While $i < $iCount_i
    $oJson.I = $i
    $sCertSubjectKeyIdentifier = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.subjectKeyIdentifier")
    $sCertDigestAlgOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.digestAlgOid")
    $sCertDigestAlgName = $oJson.StringOf("pkcs7.verify.signerInfo[i].cert.digestAlgName")
    $signingAlgOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].signingAlgOid")
    $signingAlgName = $oJson.StringOf("pkcs7.verify.signerInfo[i].signingAlgName")
    $sAuthAttrContentTypeName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.3"".name")
    $sAuthAttrContentTypeOid = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.3"".oid")
    $sAuthAttrSigningTimeName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.5"".name")
    $oJson.DtOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.5"".utctime",False,$oAuthAttrSigningTimeUtctime)
    $sAuthAttrMessageDigestName = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.4"".name")
    $sAuthAttrMessageDigestDigest = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.4"".digest")
    $sAuthAttrSigningCertificateV2Name = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.16.2.47"".name")
    $sAuthAttrSigningCertificateV2Der = $oJson.StringOf("pkcs7.verify.signerInfo[i].authAttr.""1.2.840.113549.1.9.16.2.47"".der")
    $i = $i + 1
Wend