(DataFlex) Create CAdES-T Signature using Aruba TSA Server (servizi.arubapec.it)

Demonstrates how to create a signature with an external timestamp (using the Aruba TSA Server) that certifies the time of signing.

Note: This example requires Chilkat v9.5.0.79 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoCrypt
    Variant vCert
    Handle hoCert
    String sPfxPath
    String sPfxPassword
    Boolean iSuccess
    Handle hoAttrs
    String sInFile
    String sOutFile
    String sTemp1

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatCrypt2)) To hoCrypt
    If (Not(IsComObjectCreated(hoCrypt))) Begin
        Send CreateComObject of hoCrypt
    End

    // This example will use a certificate + private key from a .pfx/.p12 file.
    // On Windows systems, it is also possible to use certs on smartcards/usb tokens or certs pre-installed in the Windows registry.
    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End

    Move "qa_data/pfx/myCertAndKey.p12" To sPfxPath
    Move "test123" To sPfxPassword

    Get ComLoadPfxFile Of hoCert sPfxPath sPfxPassword To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCert To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get pvComObject of hoCert to vCert
    Get ComSetSigningCert Of hoCrypt vCert To iSuccess

    // Use SHA-256 rather than the default of SHA-1
    Set ComHashAlgorithm Of hoCrypt To "sha256"

    // Create JSON that tells Chilkat what signing attributes to include:
    Get Create (RefClass(cComChilkatJsonObject)) To hoAttrs
    If (Not(IsComObjectCreated(hoAttrs))) Begin
        Send CreateComObject of hoAttrs
    End
    Get ComUpdateBool Of hoAttrs "contentType" True To iSuccess
    Get ComUpdateBool Of hoAttrs "signingTime" True To iSuccess
    Get ComUpdateBool Of hoAttrs "messageDigest" True To iSuccess
    Get ComUpdateBool Of hoAttrs "signingCertificateV2" True To iSuccess

    // A CAdES-T signature is one that includes a timestampToken created by an online TSA (time stamping authority).
    // We must include the TSA's URL, as well as a few options to indicate what is desired.
    // This example uses the Aruba TSA server, which requires a login/password for the HTTPS request.
    Get ComUpdateBool Of hoAttrs "timestampToken.enabled" True To iSuccess
    Get ComUpdateString Of hoAttrs "timestampToken.tsaUrl" "https://servizi.arubapec.it/tsa/ngrequest.php" To iSuccess

    // The tsaUsername/tsaPassword feature was added in Chilkat v9.5.0.79.
    // Make sure you are using a version of Chilkat that is no older than v9.5.0.79
    Get ComUpdateString Of hoAttrs "timestampToken.tsaUsername" "arubaTsaUsername" To iSuccess
    Get ComUpdateString Of hoAttrs "timestampToken.tsaPassword" "arubaTsaPassword" To iSuccess

    Get ComUpdateBool Of hoAttrs "timestampToken.addNonce" False To iSuccess
    Get ComUpdateBool Of hoAttrs "timestampToken.requestTsaCert" True To iSuccess
    Get ComUpdateString Of hoAttrs "timestampToken.hashAlg" "sha256" To iSuccess

    Get ComEmit Of hoAttrs To sTemp1
    Set ComSigningAttributes Of hoCrypt To sTemp1

    Move "qa_data/json/sample.json" To sInFile
    Move "qa_output/sample_cades_t.p7m" To sOutFile

    // This creates the CAdES-T signature.  During the signature creation, it
    // communicates with the TSA to get a timestampToken.
    Get ComCreateP7M Of hoCrypt sInFile sOutFile To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln "Success."


End_Procedure