(Go) RSA Signature with Certificate's Private Key from PFX

See more RSA Examples

Note: This example requires Chilkat v10.1.2 or greater.

Chilkat Go Downloads Go Package for Windows, MacOS, Linux, Alpine Linux, Solaris

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Create an instance of a certificate store object, load a PFX file,
    // locate the certificate we need, and use it for signing.
    // (a PFX file may contain more than one certificate.)
    certStore := CertStore_Ref.html">chilkat.NewCertStore()

    // The 1st argument is the filename, the 2nd arg is the 
    // PFX file's password:
    success := certStore.LoadPfxFile("chilkat.pfx","test")
    if success != true {
        fmt.Println(certStore.LastErrorText())
        certStore.DisposeCertStore()
        return
    }

    // Find the certificate by the subject common name:
    jsonCN := JsonObject_Ref.html">chilkat.NewJsonObject()
    jsonCN.UpdateString("CN","cert common name")

    cert := Cert_Ref.html">chilkat.NewCert()
    success = certStore.FindCert(jsonCN,cert)
    if success == false {
        fmt.Println(certStore.LastErrorText())
        certStore.DisposeCertStore()
        jsonCN.DisposeJsonObject()
        cert.DisposeCert()
        return
    }

    pkey := cert.ExportPrivateKey()
    if cert.LastMethodSuccess() == false {
        fmt.Println(cert.LastErrorText())
        certStore.DisposeCertStore()
        jsonCN.DisposeJsonObject()
        cert.DisposeCert()
        return
    }

    // Get the private key in XML format:
    pkeyXml := pkey.GetXml()

    rsa := Rsa_Ref.html">chilkat.NewRsa()

    // Import the private key into the RSA component:
    success = rsa.ImportPrivateKey(*pkeyXml)
    if success != true {
        fmt.Println(rsa.LastErrorText())
        pkey.DisposePrivateKey()
        certStore.DisposeCertStore()
        jsonCN.DisposeJsonObject()
        cert.DisposeCert()
        rsa.DisposeRsa()
        return
    }

    // Encode the signature as a hex string
    rsa.SetEncodingMode("hex")

    strData := "This is the string to be signed."

    // Sign the string using the sha-1 hash algorithm.
    // Other valid choices are "sha-256", "md2" and "md5".
    hexSig := rsa.SignStringENC(strData,"sha-1")

    fmt.Println(*hexSig)

    pkey.DisposePrivateKey()

    fmt.Println("Success!")

    certStore.DisposeCertStore()
    jsonCN.DisposeJsonObject()
    cert.DisposeCert()
    rsa.DisposeRsa()