Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(PHP ActiveX) A3/A4 Certificate to Create and Verify an Opaque PKCS7/CMS SignatureDemonstrates how to use an A3 or A4 certificate w/ private key on a smartcard or token to create a PKCS7 opaque signature, and also how to verify an opaque signature. An opaque signature is different than a detached PKCS7 signature in that it contains the original data. Verifying an opaque signature retrieves the original content.
<?php // This example assumes the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2') $crypt = new COM("Chilkat.Crypt2"); // A certificate and private key is needed to create a signature. // Chilkat provides many different ways to load a certificate and private key, such // as from a smartcards and hardware tokens, PFX/.p12, Java keystore, JWK, Windows registry-based certificate stores, and other sources. // This example will load the default certificate from the smartcard that is currently in // the smartcard reader. // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert') $cert = new COM("Chilkat.Cert"); // If the smartcard or token requires a PIN, we can set it here to avoid the dialog... $cert->SmartCardPin = '000000'; $success = $cert->LoadFromSmartcard(''); if ($success != 1) { print $cert->LastErrorText . "\n"; exit; } // Tell it to use the cert and private key we've loaded. $success = $crypt->SetSigningCert($cert); if ($success != 1) { print $crypt->LastErrorText . "\n"; exit; } // Indicate we want the opaque signature in base64 format: $crypt->EncodingMode = 'base64'; // Sign the string using the "utf-8" byte representation: $crypt->Charset = 'utf-8'; // Create the opaque signature: $originalData = 'This is the string to be signed.'; $opaqueSig = $crypt->opaqueSignStringENC($originalData); if ($crypt->LastMethodSuccess != 1) { print $crypt->LastErrorText . "\n"; exit; } print $opaqueSig . "\n"; // The output looks like this: // MIIPgQYJKoZIhvcNAQcCoIIPcjCCD24CAQExCzAJBgUrDgMCGgUAMC8GCSqGSIb3DQEHAaAiBCBUaGlzIGlzIHRoZSBzdHJpbmcgdG8gYmUgc... // ---------------------------------------------------------------------------------------------- // Now let's verify the signature and retrieve the original data. // We'll use a new Crypt2 object to keep things completely separate... // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2') $vCrypt = new COM("Chilkat.Crypt2"); // We only need the certificate to verify a signature (and extract the data from // an opaque signature). The public key is always embedded within a certificate. $success = $vCrypt->SetVerifyCert($cert); if ($success != 1) { print $vCrypt->LastErrorText . "\n"; exit; } $vCrypt->EncodingMode = 'base64'; $vCrypt->Charset = 'utf-8'; $extractedData = $vCrypt->opaqueVerifyStringENC($opaqueSig); if ($vCrypt->LastMethodSuccess != 1) { print $vCrypt->LastErrorText . "\n"; exit; } print 'The extracted data: ' . $extractedData . "\n"; // The output is: // The extracted data: This is the string to be signed. ?> |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.