(Node.js) Sign String to create a CAdES-T Signature

This example will sign a string to create a CAdEST-T signature.

Note: This example requires Chilkat v9.5.0.78 or greater.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var crypt = new chilkat.Crypt2();

    // This example will use the certificate + private key currently inserted into a smartcard reader.
    var cert = new chilkat.Cert();

    // If we wish to provide the smartcard PIN (otherwise the user will be prompted by the operating system).
    cert.SmartCardPin = "000000";
    var success = cert.LoadFromSmartcard("");
    if (success !== true) {
        console.log(cert.LastErrorText);
        return;
    }

    // Note: It is also possible to use certs from .pfx/.p12, .pem, or other sources such as 
    // pre-installed Windows certificates.

    success = crypt.SetSigningCert(cert);

    // Use SHA-256 rather than the default of SHA-1
    crypt.HashAlgorithm = "sha256";

    // Create JSON that tells Chilkat what signing attributes to include:
    var attrs = new chilkat.JsonObject();
    attrs.UpdateBool("contentType",true);
    attrs.UpdateBool("signingTime",true);
    attrs.UpdateBool("messageDigest",true);
    attrs.UpdateBool("signingCertificateV2",true);

    // A CAdES-T signature is one that includes a timestampToken created by an online TSA (time stamping authority).
    // We must include the TSA's URL, as well as a few options to indicate what is desired.
    // Except for the TSA URL, the options shown here are typically what you would need.
    attrs.UpdateBool("timestampToken.enabled",true);
    attrs.UpdateString("timestampToken.tsaUrl","https://freetsa.org/tsr");
    attrs.UpdateBool("timestampToken.addNonce",false);
    attrs.UpdateBool("timestampToken.requestTsaCert",true);
    attrs.UpdateString("timestampToken.hashAlg","sha256");

    crypt.SigningAttributes = attrs.Emit();

    var strToSign = "THIS IS MY ID";

    var bd = new chilkat.BinData();
    bd.AppendString(strToSign,"utf-8");

    // This creates the CAdES-T signature.  During the signature creation, it
    // communicates with the TSA to get a timestampToken.
    // The contents of bd are signed and replaced with the CAdES-T signature (which embeds the original content).
    success = crypt.OpaqueSignBd(bd);
    if (success !== true) {
        console.log(crypt.LastErrorText);
        return;
    }

    // Get the signature in base64 format:
    console.log(bd.GetEncoded("base64_mime"));

    // Or save the signature to a file.
    bd.WriteFile("qa_output/cades-t_sample.p7m");

    console.log("Success.");

}

chilkatExample();