DataFlex

Include the SigningCertificateV2 Authenticated Attribute in CAdES (CMS) Signature

See more CAdES Examples

Demonstrates how to include the SigningCertificateV2 authenticated attribute in a CMS (.p7m/.p7s) signature. DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoCrypt
    Variant vCert
    Handle hoCert
    String sInFile
    String sP7sFile
    Handle hoJsonSigningAttrs
    String sExtractedToFilePath
    String sTemp1

    Move False To iSuccess

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatCrypt2)) To hoCrypt
    If (Not(IsComObjectCreated(hoCrypt))) Begin
        Send CreateComObject of hoCrypt
    End

    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End
    Get ComLoadPfxFile Of hoCert "qa_data/pfx/cert_test123.pfx" "test123" To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCert To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Tell the crypt component to use this cert.
    Get pvComObject of hoCert to vCert
    Get ComSetSigningCert Of hoCrypt vCert To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // The CadesEnabled property applies to all methods that create PKCS7 signatures. 
    // To create a CAdES-BES signature, set this property equal to true. 
    Set ComCadesEnabled Of hoCrypt To True

    Set ComHashAlgorithm Of hoCrypt To "sha256"

    // We can sign any type of file, creating a .p7s as output.
    // The .p7s contains the signature and also embeds the data of the file that is signed.
    Move "qa_data/pdf/sample.pdf" To sInFile
    Move "qa_output/sample.pdf.p7s" To sP7sFile

    Get Create (RefClass(cComChilkatJsonObject)) To hoJsonSigningAttrs
    If (Not(IsComObjectCreated(hoJsonSigningAttrs))) Begin
        Send CreateComObject of hoJsonSigningAttrs
    End
    Get ComUpdateInt Of hoJsonSigningAttrs "contentType" 1 To iSuccess
    Get ComUpdateInt Of hoJsonSigningAttrs "signingTime" 1 To iSuccess
    Get ComUpdateInt Of hoJsonSigningAttrs "messageDigest" 1 To iSuccess

    // This is where we specify for the signingCertificateV2 attribute to be included:
    Get ComUpdateInt Of hoJsonSigningAttrs "signingCertificateV2" 1 To iSuccess

    Get ComEmit Of hoJsonSigningAttrs To sTemp1
    Set ComSigningAttributes Of hoCrypt To sTemp1

    // By default, all the certs in the chain of authentication are included in the signature.
    // If desired, we can choose to only include the signing certificate:
    Set ComIncludeCertChain Of hoCrypt To False

    // Create the CAdES-BES attached signature, which contains the original data.
    // Note: Chilkat's function naming is not accurate.  CreateP7M creates a PKCS7 signature where the signed file
    // is contained within the signature.  CreateP7S creates a detached PKCS7 signature where the signed file
    // is NOT contained within the signature.  We want the data to be contained in the signature, therefore
    // we call CreateP7M even though we are naming our output file .p7s.
    Get ComCreateP7M Of hoCrypt sInFile sP7sFile To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Verify the .p7s file and extract the original file from the .p7s. 
    Move "qa_output/sample.pdf" To sExtractedToFilePath
    Get ComVerifyP7M Of hoCrypt sP7sFile sExtractedToFilePath To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln "Success!"


End_Procedure