DataFlex

A3 Certificate Sign PDF to pdf.p7s

See more CAdES Examples

Demonstrates how to use an A3/A4 certificate on a smartcard or hardware token to convert a PDF into a .p7s file that contains the PDF within a PKCS7 signature (the .p7s format). DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoCrypt
    Variant vCert
    Handle hoCert
    String sInFile
    String sP7sFile
    String sExtractedToFilePath
    String sTemp1

    Move False To iSuccess

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatCrypt2)) To hoCrypt
    If (Not(IsComObjectCreated(hoCrypt))) Begin
        Send CreateComObject of hoCrypt
    End

    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End

    // If the smartcard or token requires a PIN, we can set it here to avoid the dialog...
    Set ComSmartCardPin Of hoCert To "000000"

    Get ComLoadFromSmartcard Of hoCert "" To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCert To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Tell the crypt component to use this cert.
    Get pvComObject of hoCert to vCert
    Get ComSetSigningCert Of hoCrypt vCert To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // The CadesEnabled property applies to all methods that create PKCS7 signatures. 
    // To create a CAdES-BES signature, set this property equal to true. 
    Set ComCadesEnabled Of hoCrypt To True

    Set ComHashAlgorithm Of hoCrypt To "sha256"

    // We can sign any type of file, creating a .p7s as output.
    // The .p7s contains the signature and also embeds the data of the file that is signed.
    Move "qa_data/pdf/sample.pdf" To sInFile
    Move "qa_output/sample.pdf.p7s" To sP7sFile

    // Create the CAdES-BES attached signature, which contains the original data.
    // Note: Chilkat's function naming is not accurate.  CreateP7M creates a PKCS7 signature where the signed file
    // is contained within the signature.  CreateP7S creates a detached PKCS7 signature where the signed file
    // is NOT contained within the signature.  We want the data to be contained in the signature, therefore
    // we call CreateP7M even though we are naming our output file .p7s.
    Get ComCreateP7M Of hoCrypt sInFile sP7sFile To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Verify the .p7s file and extract the original file from the .p7s. 
    Move "qa_output/sample.pdf" To sExtractedToFilePath
    Get ComVerifyP7M Of hoCrypt sP7sFile sExtractedToFilePath To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln "Success!"


End_Procedure