(Node.js) RSA Signature with Certificate's Private Key from PFX

See more RSA Examples

Demonstrates how to use a certificate's private key from a PFX file to create an RSA signature.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOS

var os = require('os');
if (os.platform() == 'win32') {  
  var chilkat = require('@chilkat/ck-node23-win64'); 
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node23-linux-arm');
    } else if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node23-linux-arm64');
    } else {
        var chilkat = require('@chilkat/ck-node23-linux-x64');
    }
} else if (os.platform() == 'darwin') {
  var chilkat = require('@chilkat/ck-node23-mac-universal');
}

function chilkatExample() {

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Create an instance of a certificate store object, load a PFX file,
    // locate the certificate we need, and use it for signing.
    // (a PFX file may contain more than one certificate.)
    var certStore = new chilkat.CertStore();

    // The 1st argument is the filename, the 2nd arg is the 
    // PFX file's password:
    var success = certStore.LoadPfxFile("chilkat.pfx","test");
    if (success !== true) {
        console.log(certStore.LastErrorText);
        return;
    }

    // cert: Cert
    var cert = certStore.FindCertBySubject("Chilkat Software, Inc.");
    if (certStore.LastMethodSuccess == false) {
        console.log(certStore.LastErrorText);
        return;
    }

    // pkey: PrivateKey
    var pkey = cert.ExportPrivateKey();
    if (cert.LastMethodSuccess == false) {
        console.log(cert.LastErrorText);

        return;
    }

    // Get the private key in XML format:
    var pkeyXml = pkey.GetXml();

    var rsa = new chilkat.Rsa();

    // Import the private key into the RSA component:
    success = rsa.ImportPrivateKey(pkeyXml);
    if (success !== true) {
        console.log(rsa.LastErrorText);

        return;
    }

    // Encode the signature as a hex string
    rsa.EncodingMode = "hex";

    var strData = "This is the string to be signed.";

    // Sign the string using the sha-1 hash algorithm.
    // Other valid choices are "sha-256", "md2" and "md5".
    var hexSig = rsa.SignStringENC(strData,"sha-1");

    console.log(hexSig);

    console.log("Success!");

}

chilkatExample();