(Node.js) RSA Sign String using Private Key of Certificate Type A3 (smart card / token)

Demonstrates RSA signing a string using the private key of a certificate type A3 (smart card, token).

Note: This is a Windows-only example.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // First get the A3 certificate that was installed on the Windows system.
    var certStore = new chilkat.CertStore();

    var thumbprint = "12c1dd8015f3f03f7b1fa619dc24e2493ca8b4b2";

    // This is specific to Windows because it is opening the Windows Current-User certificate store.
    var bReadOnly = true;
    var success = certStore.OpenCurrentUserStore(bReadOnly);
    if (success !== true) {
        console.log(certStore.LastErrorText);
        return;
    }

    // Find the certificate with the desired thumbprint
    // (There are many ways to locate a certificate.  This example chooses to find by thumbprint.)
    // cert: Cert
    var cert = certStore.FindCertBySha1Thumbprint(thumbprint);
    if (certStore.LastMethodSuccess !== true) {
        console.log("Failed to find the certificate.");
        return;
    }

    console.log("Found: " + cert.SubjectCN);

    var rsa = new chilkat.Rsa();

    // Provide the cert's private key
    var bUsePrivateKey = true;
    success = rsa.SetX509Cert(cert,bUsePrivateKey);

    if (success !== true) {
        console.log(rsa.LastErrorText);
        return;
    }

    // Return the RSA signature in base64 encoded form.
    rsa.EncodingMode = "base64";

    // Sign the utf-8 byte representation of the string.
    rsa.Charset = "utf-8";

    // You can also choose other hash algorithms, such as SHA-1.
    var sigBase64 = rsa.SignStringENC("text to sign","SHA-256");
    if (rsa.LastMethodSuccess !== true) {
        console.log(rsa.LastErrorText);
        return;
    }

    console.log("Base64 signature: " + sigBase64);

}

chilkatExample();