(Chilkat2-Python) PKCS7 Sign Text using RSA 2048, SHA256, Base64 Output

Demonstrates how to sign text using 2048-bit RSA with SHA256, producing PKCS#7 output in Base64. The certificate w/ private key used for signing is loaded from a .p12/.pfx file.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

cert = chilkat2.Cert()

# Load the cert and private key.  Whatever the private key happens to be,
# such as RSA or ECC, then Chilkat will use it.  If the private key is 
# a 2048-bit RSA key, then that's what will be used..
success = cert.LoadPfxFile("qa_data/pfx/myCertAndKey.p12","password")
if (success != True):
    print(cert.LastErrorText)
    sys.exit()

crypt = chilkat2.Crypt2()

success = crypt.SetSigningCert(cert)
if (success != True):
    print(crypt.LastErrorText)
    sys.exit()

# Use SHA-256
crypt.HashAlgorithm = "sha256"

# Hash the utf-8 byte representation of the string
crypt.Charset = "utf-8"

# Return the result in base64
crypt.EncodingMode = "base64"

# Sign some text..
textToSign = "This is the text to be hashed and signed."
sigBase64 = crypt.OpaqueSignStringENC(textToSign)
if (crypt.LastMethodSuccess != True):
    print(crypt.LastErrorText)
    sys.exit()

print(sigBase64)

# The result:
# MIIS2wYJKoZIhvcNAQc ... zGeeY4Oxg==