Chilkat • HOME • Android™ • AutoIt • C • C# • C++ • Chilkat2-Python • CkPython • Classic ASP • DataFlex • Delphi DLL • Go • Java • Node.js • Objective-C • PHP Extension • Perl • PowerBuilder • PowerShell • PureBasic • Ruby • SQL Server • Swift • Tcl • Unicode C • Unicode C++ • VB.NET • VBScript • Visual Basic 6.0 • Visual FoxPro • Xojo Plugin
(Delphi ActiveX) PKCS11 Certificate ChainSee more PKCS11 ExamplesDemonstrates how to make CA certs available for the certificate chain to be included when creating a signature (using a PKCS11 compatible smart card / USB token) such as for PDF, XMLDSig, etc. Note: This example requires Chilkat v9.5.0.88 or later.
uses Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics, Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB; ... procedure TForm1.Button1Click(Sender: TObject); var pkcs11: TChilkatPkcs11; success: Integer; slotID: Integer; readWrite: Integer; userType: Integer; pin: WideString; cert: TChilkatCert; certVault: TChilkatXmlCertVault; begin // This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems. pkcs11 := TChilkatPkcs11.Create(Self); // You will use the DLL (or shared lib) provided by your smart card vendor, or a DLL compatible with your smart card. // On Windows, if the DLL is located in C:\Windows\System32, specify only the filename. // Otherwise provide the full path. pkcs11.SharedLibPath := 'bit4xpki.dll'; success := pkcs11.Initialize(); if (success = 0) then begin Memo1.Lines.Add(pkcs11.LastErrorText); Exit; end; // Pass -1 for the slotID to open a session on the first non-empty slot. slotID := -1; // Open a session. readWrite := 1; success := pkcs11.OpenSession(slotID,readWrite); if (success = 0) then begin Memo1.Lines.Add(pkcs11.LastErrorText); Exit; end; // Make it an authenticated session by calling Login. userType := 1; // Make sure to use the correct PIN for your smart card.. pin := '0000'; success := pkcs11.Login(userType,pin); if (success = 0) then begin Memo1.Lines.Add(pkcs11.LastErrorText); success := pkcs11.CloseSession(); Exit; end; // Get the certificate (on the smart card) that has a private key. cert := TChilkatCert.Create(Self); success := pkcs11.FindCert('privateKey','',cert.ControlInterface); if (success = 1) then begin Memo1.Lines.Add('Cert with private key: ' + cert.SubjectCN); end else begin Memo1.Lines.Add('No certificates having a private key were found.'); success := pkcs11.CloseSession(); Exit; end; // If the certificates in the chain of authentication were contained on the smart card, // then Chilkat would already have them (via the FindCert function) and the certs in the chain will be automatically used // as needed when signing occurs. // If you have CA certs located elsewhere, such as in .cer files, you can make them available to Chilkat in the following way: certVault := TChilkatXmlCertVault.Create(Self); // Please review the methods available in the XML certificate vault class. Different methods exist for adding certificates // from various sources, such as PEM, PFX, or in-memory sources.. success := certVault.AddCertFile('someDir/caIntermediateCert.cer'); // ... success := certVault.AddCertFile('someDir/caCert.cer'); // (Your code should check the return value to make sure it succeeded.) success := cert.UseCertVault(certVault.ControlInterface); if (success = 0) then begin Memo1.Lines.Add(cert.LastErrorText); success := pkcs11.CloseSession(); Exit; end; // -------------------------------------------------------------------------- // At this point, we have the cert (and certs in the chain of authentication) to be used for signing. // The code for using the certificate in creating the digital signature, such as for a PDF, XML, etc., go here... // -------------------------------------------------------------------------- // Revert to an unauthenticated session by calling Logout. success := pkcs11.Logout(); if (success = 0) then begin Memo1.Lines.Add(pkcs11.LastErrorText); success := pkcs11.CloseSession(); Exit; end; // When finished, close the session. // It is important to close the session (memory leaks will occur if the session is not properly closed). success := pkcs11.CloseSession(); if (success = 0) then begin Memo1.Lines.Add(pkcs11.LastErrorText); Exit; end; Memo1.Lines.Add('Success.'); end; |
© 2000-2025 Chilkat Software, Inc. All Rights Reserved.