(Chilkat2-Python) RSA Signature with Certificate's Private Key from PFX

See more RSA Examples

Demonstrates how to use a certificate's private key from a PFX file to create an RSA signature.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Create an instance of a certificate store object, load a PFX file,
# locate the certificate we need, and use it for signing.
# (a PFX file may contain more than one certificate.)
certStore = chilkat2.CertStore()

# The 1st argument is the filename, the 2nd arg is the 
# PFX file's password:
success = certStore.LoadPfxFile("chilkat.pfx","test")
if (success != True):
    print(certStore.LastErrorText)
    sys.exit()

# cert is a CkCert
cert = certStore.FindCertBySubject("Chilkat Software, Inc.")
if (certStore.LastMethodSuccess == False):
    print(certStore.LastErrorText)
    sys.exit()

# pkey is a CkPrivateKey
pkey = cert.ExportPrivateKey()
if (cert.LastMethodSuccess == False):
    print(cert.LastErrorText)

    sys.exit()

# Get the private key in XML format:
pkeyXml = pkey.GetXml()

rsa = chilkat2.Rsa()

# Import the private key into the RSA component:
success = rsa.ImportPrivateKey(pkeyXml)
if (success != True):
    print(rsa.LastErrorText)

    sys.exit()

# Encode the signature as a hex string
rsa.EncodingMode = "hex"

strData = "This is the string to be signed."

# Sign the string using the sha-1 hash algorithm.
# Other valid choices are "sha-256", "md2" and "md5".
hexSig = rsa.SignStringENC(strData,"sha-1")

print(hexSig)

print("Success!")