Chilkat • HOME • Android™ • AutoIt • C • C# • C++ • Chilkat2-Python • CkPython • Classic ASP • DataFlex • Delphi DLL • Go • Java • Node.js • Objective-C • PHP Extension • Perl • PowerBuilder • PowerShell • PureBasic • Ruby • SQL Server • Swift • Tcl • Unicode C • Unicode C++ • VB.NET • VBScript • Visual Basic 6.0 • Visual FoxPro • Xojo Plugin
(Delphi ActiveX) A3/A4 Certificate to Create and Verify an Opaque PKCS7/CMS SignatureDemonstrates how to use an A3 or A4 certificate w/ private key on a smartcard or token to create a PKCS7 opaque signature, and also how to verify an opaque signature. An opaque signature is different than a detached PKCS7 signature in that it contains the original data. Verifying an opaque signature retrieves the original content.
uses Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics, Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB; ... procedure TForm1.Button1Click(Sender: TObject); var crypt: TChilkatCrypt2; cert: TChilkatCert; success: Integer; originalData: WideString; opaqueSig: WideString; vCrypt: TChilkatCrypt2; extractedData: WideString; begin // This example assumes the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. crypt := TChilkatCrypt2.Create(Self); // A certificate and private key is needed to create a signature. // Chilkat provides many different ways to load a certificate and private key, such // as from a smartcards and hardware tokens, PFX/.p12, Java keystore, JWK, Windows registry-based certificate stores, and other sources. // This example will load the default certificate from the smartcard that is currently in // the smartcard reader. cert := TChilkatCert.Create(Self); // If the smartcard or token requires a PIN, we can set it here to avoid the dialog... cert.SmartCardPin := '000000'; success := cert.LoadFromSmartcard(''); if (success <> 1) then begin Memo1.Lines.Add(cert.LastErrorText); Exit; end; // Tell it to use the cert and private key we've loaded. success := crypt.SetSigningCert(cert.ControlInterface); if (success <> 1) then begin Memo1.Lines.Add(crypt.LastErrorText); Exit; end; // Indicate we want the opaque signature in base64 format: crypt.EncodingMode := 'base64'; // Sign the string using the "utf-8" byte representation: crypt.Charset := 'utf-8'; // Create the opaque signature: originalData := 'This is the string to be signed.'; opaqueSig := crypt.OpaqueSignStringENC(originalData); if (crypt.LastMethodSuccess <> 1) then begin Memo1.Lines.Add(crypt.LastErrorText); Exit; end; Memo1.Lines.Add(opaqueSig); // The output looks like this: // MIIPgQYJKoZIhvcNAQcCoIIPcjCCD24CAQExCzAJBgUrDgMCGgUAMC8GCSqGSIb3DQEHAaAiBCBUaGlzIGlzIHRoZSBzdHJpbmcgdG8gYmUgc... // ---------------------------------------------------------------------------------------------- // Now let's verify the signature and retrieve the original data. // We'll use a new Crypt2 object to keep things completely separate... vCrypt := TChilkatCrypt2.Create(Self); // We only need the certificate to verify a signature (and extract the data from // an opaque signature). The public key is always embedded within a certificate. success := vCrypt.SetVerifyCert(cert.ControlInterface); if (success <> 1) then begin Memo1.Lines.Add(vCrypt.LastErrorText); Exit; end; vCrypt.EncodingMode := 'base64'; vCrypt.Charset := 'utf-8'; extractedData := vCrypt.OpaqueVerifyStringENC(opaqueSig); if (vCrypt.LastMethodSuccess <> 1) then begin Memo1.Lines.Add(vCrypt.LastErrorText); Exit; end; Memo1.Lines.Add('The extracted data: ' + extractedData); // The output is: // The extracted data: This is the string to be signed. end; |
© 2000-2025 Chilkat Software, Inc. All Rights Reserved.