(Chilkat2-Python) Sign a File to Create a .p7m File (using a PFX)

Chilkat2-Python example to sign a file creating a .p7m file as output. The .p7m contains the signed contents of the original file. It can be verified and restored by calling VerifyP7M.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

crypt = chilkat2.Crypt2()

# Use a digital certificate and private key from a PFX file (.pfx or .p12).
signingCertSubject = "Acme Inc"
pfxFilename = "/Users/chilkat/testData/pfx/acme.pfx"
pfxPassword = "test123"

certStore = chilkat2.CertStore()
success = certStore.LoadPfxFile(pfxFilename,pfxPassword)
if (success != True):
    print(certStore.LastErrorText)
    sys.exit()

# cert is a CkCert
cert = certStore.FindCertBySubjectCN(signingCertSubject)
if (certStore.LastMethodSuccess == False):
    print("Failed to find certificate by subject common name.")
    sys.exit()

# Tell the crypt component to use this cert.
success = crypt.SetSigningCert(cert)

# We can sign any type of file, creating a .p7m as output:
inFile = "/Users/chilkat/testData/pdf/sample.pdf"
outputFile = "/Users/chilkat/testData/p7m/sample.pdf.p7m"
success = crypt.CreateP7M(inFile,outputFile)
if (success == False):
    print(crypt.LastErrorText)

    sys.exit()

# Verify and restore the original file:
success = crypt.SetVerifyCert(cert)

inFile = outputFile
outputFile = "/Users/chilkat/testData/pdf/restored.pdf"

success = crypt.VerifyP7M(inFile,outputFile)
if (success == False):
    print(crypt.LastErrorText)

    sys.exit()

print("Success!")