(PHP ActiveX) PKCS7 Sign Text using RSA 2048, SHA256, Base64 Output

Demonstrates how to sign text using 2048-bit RSA with SHA256, producing PKCS#7 output in Base64. The certificate w/ private key used for signing is loaded from a .p12/.pfx file.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");

// Load the cert and private key.  Whatever the private key happens to be,
// such as RSA or ECC, then Chilkat will use it.  If the private key is 
// a 2048-bit RSA key, then that's what will be used..
$success = $cert->LoadPfxFile('qa_data/pfx/myCertAndKey.p12','password');
if ($success != 1) {
    print $cert->LastErrorText . "\n";
    exit;
}

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2')
$crypt = new COM("Chilkat.Crypt2");

$success = $crypt->SetSigningCert($cert);
if ($success != 1) {
    print $crypt->LastErrorText . "\n";
    exit;
}

// Use SHA-256
$crypt->HashAlgorithm = 'sha256';

// Hash the utf-8 byte representation of the string
$crypt->Charset = 'utf-8';

// Return the result in base64
$crypt->EncodingMode = 'base64';

// Sign some text..
$textToSign = 'This is the text to be hashed and signed.';
$sigBase64 = $crypt->opaqueSignStringENC($textToSign);
if ($crypt->LastMethodSuccess != 1) {
    print $crypt->LastErrorText . "\n";
    exit;
}

print $sigBase64 . "\n";

// The result:
// MIIS2wYJKoZIhvcNAQc ... zGeeY4Oxg==

?>