(DataFlex) RSA Signature with Certificate's Private Key from PFX

Demonstrates how to use a certificate's private key from a PFX file to create an RSA signature.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-9.5.0-win32.pkg

Procedure Test
    Handle hoCertStore
    Boolean iSuccess
    Variant vCert
    Handle hoCert
    Variant vPkey
    Handle hoPkey
    String sPkeyXml
    Handle hoRsa
    String sStrData
    String sHexSig
    String sTemp1
    Boolean bTemp1

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Create an instance of a certificate store object, load a PFX file,
    // locate the certificate we need, and use it for signing.
    // (a PFX file may contain more than one certificate.)
    Get Create (RefClass(cComChilkatCertStore)) To hoCertStore
    If (Not(IsComObjectCreated(hoCertStore))) Begin
        Send CreateComObject of hoCertStore
    End

    // The 1st argument is the filename, the 2nd arg is the 
    // PFX file's password:
    Get ComLoadPfxFile Of hoCertStore "chilkat.pfx" "test" To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCertStore To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComFindCertBySubject Of hoCertStore "Chilkat Software, Inc." To vCert
    If (IsComObject(vCert)) Begin
        Get Create (RefClass(cComChilkatCert)) To hoCert
        Set pvComObject Of hoCert To vCert
    End
    Get ComLastMethodSuccess Of hoCertStore To bTemp1
    If (bTemp1 = False) Begin
        Get ComLastErrorText Of hoCertStore To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComExportPrivateKey Of hoCert To vPkey
    If (IsComObject(vPkey)) Begin
        Get Create (RefClass(cComChilkatPrivateKey)) To hoPkey
        Set pvComObject Of hoPkey To vPkey
    End
    Get ComLastMethodSuccess Of hoCert To bTemp1
    If (bTemp1 = False) Begin
        Get ComLastErrorText Of hoCert To sTemp1
        Showln sTemp1
        Send Destroy of hoCert
        Procedure_Return
    End

    Send Destroy of hoCert

    // Get the private key in XML format:
    Get ComGetXml Of hoPkey To sPkeyXml

    Get Create (RefClass(cComChilkatRsa)) To hoRsa
    If (Not(IsComObjectCreated(hoRsa))) Begin
        Send CreateComObject of hoRsa
    End

    // Import the private key into the RSA component:
    Get ComImportPrivateKey Of hoRsa sPkeyXml To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoRsa To sTemp1
        Showln sTemp1
        Send Destroy of hoPkey
        Procedure_Return
    End

    // This example will sign a string, and receive the signature
    // in a hex-encoded string.  Therefore, set the encoding mode
    // to "hex":
    Set ComEncodingMode Of hoRsa To "hex"

    // If some other non-Chilkat application or web service is going to be verifying
    // the signature, it is important to match the byte-ordering.
    // The LittleEndian property may be set to True
    // for little-endian byte ordering, 
    // or False  for big-endian byte ordering.
    // Microsoft apps typically use little-endian, while
    // OpenSSL and other services (such as Amazon CloudFront)
    // use big-endian.
    Set ComLittleEndian Of hoRsa To False

    Move "This is the string to be signed." To sStrData

    // Sign the string using the sha-1 hash algorithm.
    // Other valid choices are "sha-256", "md2" and "md5".
    Get ComSignStringENC Of hoRsa sStrData "sha-1" To sHexSig

    Showln sHexSig

    Send Destroy of hoPkey

    Showln "Success!"


End_Procedure