(PHP ActiveX) Sign a Byte Array to Create an Opaque Signature in a Byte Array

Signs data contained in a byte array to produce an opaque signature (also in a byte array). An opaque signature is a PKCS7 signature (also known as CAdES) that embeds the signed data. Also shows how to verify the signature and extract the original data.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");
$success = $cert->LoadPfxFile('qa_data/pfx/cert_test123.pfx','test123');
if ($success == 0) {
    print $cert->LastErrorText . "\n";
    exit;
}

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.FileAccess')
$fac = new COM("Chilkat.FileAccess");

$fileBytes = $fac->ReadEntireFile('qa_data/pdf/sample.pdf');
if ($fac->LastMethodSuccess != 1) {
    print $fac->LastErrorText . "\n";
    exit;
}

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2')
$crypt = new COM("Chilkat.Crypt2");

$success = $crypt->SetSigningCert($cert);

// We can sign any type of file.

$sigBytes = $crypt->OpaqueSignBytes($fileBytes);
if ($crypt->LastMethodSuccess != 1) {
    print $crypt->LastErrorText . "\n";
    exit;
}

$success = $fac->WriteEntireFile('qa_output/sample.pdf.p7m',$sigBytes);
if ($fac->LastMethodSuccess != 1) {
    print $fac->LastErrorText . "\n";
    exit;
}

// We can verify the opaque signature and extract the original data like this

$originalData = $crypt->OpaqueVerifyBytes($sigBytes);
if ($crypt->LastMethodSuccess != 1) {
    print $crypt->LastErrorText . "\n";
    exit;
}

$success = $fac->WriteEntireFile('qa_output/sample.pdf',$originalData);
if ($fac->LastMethodSuccess != 1) {
    print $fac->LastErrorText . "\n";
    exit;
}

print 'Signature is verified and the original data was extracted.' . "\n";

?>