(Excel) Create .p7s Compliant with ICP-Brazil Digital Signature Standard

Demonstrates how to create a .p7s signature that contains a data file, which in this case is a PDF. The .p7s will be compliant with the ICP-Brazil Digital Signature Standard.

Important: This example requires Chilkat v9.5.0.83 or later.

Download Excel Class Modules Chilkat Excel Class Modules

' This example requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

Dim crypt As Chilkat.Crypt2
Set crypt = Chilkat.NewCrypt2

' Any type of file can be signed.  It doesn't have to be a PDF.

inFile = "qa_data/pdf/helloWorld.pdf"

Dim bd As Chilkat.BinData
Set bd = Chilkat.NewBinData

success = bd.LoadFile(inFile)
If (success = False) Then
    Debug.Print "Failed to load "; inFile
    Exit Sub
End If

' Get the certificate we'll be using to sign.
Dim cert As Chilkat.Cert
Set cert = Chilkat.NewCert
success = cert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123")
If (success = False) Then
    Debug.Print cert.LastErrorText
    Exit Sub
End If

success = crypt.SetSigningCert(cert)
If (success = False) Then
    Debug.Print crypt.LastErrorText
    Exit Sub
End If

' Set properties for signing...
crypt.HashAlgorithm = "sha256"

Dim jsonSigningAttrs As Chilkat.JsonObject
Set jsonSigningAttrs = Chilkat.NewJsonObject
Dim success As Boolean
success = jsonSigningAttrs.UpdateInt("contentType",1)
success = jsonSigningAttrs.UpdateInt("signingTime",1)
success = jsonSigningAttrs.UpdateInt("messageDigest",1)
success = jsonSigningAttrs.UpdateInt("signingCertificateV2",1)

success = jsonSigningAttrs.UpdateString("policyId.id","2.16.76.1.7.1.1.2.3")
success = jsonSigningAttrs.UpdateString("policyId.hash","sW6Iu/dzIqZ5lbeQeHeO09DqfIhYe29tUYtxXo92o9U=")
success = jsonSigningAttrs.UpdateString("policyId.uri","http://politicas.icpbrasil.gov.br/PA_AD_RB_v2_3.der")
success = jsonSigningAttrs.UpdateString("policyId.hashAlg","SHA256")

' Don't forget to change "helloWorld.pdf" to the name of the file you desire. (it can be any type of file, it doesn't have to be a PDF)
success = jsonSigningAttrs.UpdateString("contentHint.text","Content-Type: application/octet-stream" & vbCrLf & "Content-Disposition: attachment;filename=""helloWorld.pdf""")
success = jsonSigningAttrs.UpdateString("contentHint.oid","1.2.840.113549.1.7.1")

crypt.SigningAttributes = jsonSigningAttrs.Emit()

' The Brazil government validator requires the ASN.1 data to be in "constructed octets" form..
crypt.UncommonOptions = "UseConstructedOctets,OmitAlgorithmIdNull"
crypt.IncludeCertChain = False

' Sign. 
success = crypt.OpaqueSignBd(bd)
If (success = False) Then
    Debug.Print crypt.LastErrorText
    Exit Sub
End If

' Save to a .p7s
success = bd.WriteFile("qa_output/helloWorld.pdf.p7s")

Debug.Print "Success"