(DataFlex) Sign JSON to Create CAdES P7S Bytes

Demonstrates how to sign JSON using a certificate + private key from a .p12/.pfx to create a CAdES P7S byte array.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoCrypt
    Variant vCert
    Handle hoCert
    Boolean iSuccess
    Handle hoJsonSigningAttrs
    Variant hoCadesP7s
    String sOriginalJson
    String sTemp1
    Boolean bTemp1

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatCrypt2)) To hoCrypt
    If (Not(IsComObjectCreated(hoCrypt))) Begin
        Send CreateComObject of hoCrypt
    End

    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End
    Get ComLoadPfxFile Of hoCert "qa_data/pfx/cert_test123.pfx" "test123" To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCert To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Tell the crypt component to use this cert.
    Get pvComObject of hoCert to vCert
    Get ComSetSigningCert Of hoCrypt vCert To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // The CadesEnabled property applies to all methods that create PKCS7 signatures. 
    // To create a CAdES-BES signature, set this property equal to true. 
    Set ComCadesEnabled Of hoCrypt To True

    Set ComHashAlgorithm Of hoCrypt To "sha256"

    Get Create (RefClass(cComChilkatJsonObject)) To hoJsonSigningAttrs
    If (Not(IsComObjectCreated(hoJsonSigningAttrs))) Begin
        Send CreateComObject of hoJsonSigningAttrs
    End
    Get ComUpdateInt Of hoJsonSigningAttrs "contentType" 1 To iSuccess
    Get ComUpdateInt Of hoJsonSigningAttrs "signingTime" 1 To iSuccess
    Get ComUpdateInt Of hoJsonSigningAttrs "messageDigest" 1 To iSuccess
    Get ComUpdateInt Of hoJsonSigningAttrs "signingCertificateV2" 1 To iSuccess
    Get ComEmit Of hoJsonSigningAttrs To sTemp1
    Set ComSigningAttributes Of hoCrypt To sTemp1

    // By default, all the certs in the chain of authentication are included in the signature.
    // If desired, we can choose to only include the signing certificate:
    Set ComIncludeCertChain Of hoCrypt To False

    // Create the CAdES-BES attached signature, which contains the original data.
    Set ComCharset Of hoCrypt To "utf-8"

    Get ComOpaqueSignString Of hoCrypt '{ "abc": 123}' To hoCadesP7s
    Get ComLastMethodSuccess Of hoCrypt To bTemp1
    If (bTemp1 = False) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Verify the signature and extract the original JSON:
    Get ComOpaqueVerifyString Of hoCrypt vCadesP7s To sOriginalJson
    Get ComLastMethodSuccess Of hoCrypt To bTemp1
    If (bTemp1 = False) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln "Original JSON: " sOriginalJson

    Showln "Success!"


End_Procedure