(PHP ActiveX) Sign PDF in the Cloud using Azure Key Vault

See more Signing in the Cloud Examples

Note: This example requires Chilkat v9.5.0.96 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Pdf')
$pdf = new COM("Chilkat.Pdf");

// Load a PDF to be signed.
$success = $pdf->LoadFile('qa_data/pdf/helloWorld.pdf');
if ($success == 0) {
    print $pdf->LastErrorText . "\n";
    exit;
}

// Options for signing are specified in JSON.
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject')
$json = new COM("Chilkat.JsonObject");

// Optionally create an LTV-enabled signature
$json->UpdateBool('ltvOcsp',1);

// Define the appearance of the signature.
$json->UpdateInt('page',1);
$json->UpdateString('appearance.y','top');
$json->UpdateString('appearance.x','left');
$json->UpdateString('appearance.fontScale','10.0');
$json->UpdateString('appearance.text[0]','Digitally signed by: cert_cn');
$json->UpdateString('appearance.text[1]','current_dt');
$json->UpdateString('appearance.text[2]','This is an LTV-enabled signature.');

// Load the certificate used for signing.  The certificate's private key is stored in 
// the Azure Key Vault.
// However, we still need the certificate locally (without private key).
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");
$success = $cert->LoadFromFile('qa_data/certs/myCert.cer');
if ($success == 0) {
    print $cert->LastErrorText . "\n";
    exit;
}

// Here's a screenshot of our certificate with private key on Azure Key Vault:


// To sign using the Azure Key Vault, 
// add the following lines of code to specify your authentication credentials,
// and the name of the certificate w/ private key on the Azure server to be used.
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject')
$jsonAzure = new COM("Chilkat.JsonObject");
// Set the "service" equal to "azure_keyvault" to tell Chilkat to use Azure Key Vault for signing.
$jsonAzure->UpdateString('service','azure_keyvault');
$jsonAzure->UpdateString('client_id','APP_ID');
$jsonAzure->UpdateString('client_secret','APP_PASSWORD');
$jsonAzure->UpdateString('tenant_id','TENANT_ID');
// In the above screenshot, our vault name is "kvchilkat".  You will use your vault name.
$jsonAzure->UpdateString('vault_name','VAULT_NAME');
// In the above screenshot, our cert name is "ChilkatTest1".  You will use your cert name.
$jsonAzure->UpdateString('cert_name','CERT_NAME');
// In the above screenshot, our cert version is "63b94a23389546ecbc8eb6208a1bef37".  You will use your cert version.
$jsonAzure->UpdateString('cert_version','CERT_VERSION');
$success = $cert->SetCloudSigner($jsonAzure);

// Tell the pdf object to use the certificate for signing (and for Azure Key Vault to do the actual signing of the hash).
$success = $pdf->SetSigningCert($cert);
if ($success == 0) {
    print $pdf->LastErrorText . "\n";
    exit;
}

// Chilkat will build the signed PDF locally, but will (internally) use Azure Key Vault
// to do the RSA (or EC) sign hash operation.
$success = $pdf->SignPdf($json,'qa_output/hello_ltv_signed.pdf');
if ($success == 0) {
    print $pdf->LastErrorText . "\n";
    exit;
}

print 'PDF Cloud Signing using Azure Key Vault Successful.' . "\n";

?>