Objective-C

Duplicate openssl dgst -sha256 -sign private.pem -out sha256.sig in.dat

See more OpenSSL Examples

Demonstrates how to duplicate this OpenSSL command:

openssl dgst -sha256 -sign private.pem -out sha256.sig in.dat

The in.dat file can contain text or binary data of any type. The OpenSSL command does the following:

1. Creates a SHA256 digest of the contents of the input file
2. Signs the SHA256 digest using the private key.

Objective-C

#import <CkoPrivateKey.h>
#import <CkoRsa.h>
#import <CkoBinData.h>

BOOL success = NO;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoPrivateKey *pkey = [[CkoPrivateKey alloc] init];

// Load the private key from an PEM file:
success = [pkey LoadPemFile: @"private.pem"];
if (success == NO) {
    NSLog(@"%@",pkey.LastErrorText);
    return;
}

CkoRsa *rsa = [[CkoRsa alloc] init];

// Import the private key into the RSA component:
success = [rsa UsePrivateKey: pkey];
if (success == NO) {
    NSLog(@"%@",rsa.LastErrorText);
    return;
}

// OpenSSL uses big-endian.
rsa.LittleEndian = NO;

// Load the file to be signed.
CkoBinData *bdFileData = [[CkoBinData alloc] init];
success = [bdFileData LoadFile: @"in.dat"];

CkoBinData *bdSig = [[CkoBinData alloc] init];
success = [rsa SignBd: bdFileData hashAlgorithm: @"sha256" bdSig: bdSig];
if (success == NO) {
    NSLog(@"%@",rsa.LastErrorText);
    return;
}

// Save the binary signature to a file.
success = [bdSig WriteFile: @"signature.sig"];
if (success != YES) {
    NSLog(@"%@",@"Failed to write signature.sig.");
    return;
}

NSLog(@"%@",@"Success.");