(PowerBuilder) Get PDF DSS (Document Security Store)

See more PDF Signatures Examples

This example demonstrates how to extract the information from a PDF's DSS (Document Security Store), if a /DSS exists. (Just because a PDF is signed does not mean a /DSS will exists. In fact, the /DSS is typically created at the point of adding the 2nd or greater signature because the /DSS contains LTV (long term validation) information about the previous signature at the time of adding an additional signature.)

Note: This example requires Chilkat v9.5.0.85 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
oleobject loo_Pdf
integer li_Success
oleobject loo_Json
oleobject loo_ResponseDateTime
oleobject loo_ThisUpdate
oleobject loo_NextUpdate
string ls_Serial
string ls_ValidFrom
string ls_ValidTo
integer li_Expired
string ls_SubjectCN
string ls_SubjectO
string ls_IssuerCN
string ls_IssuerO
string ls_KeyType
string ls_KeySize
string ls_Der
string ls_SubjectOU
string ls_SubjectC
string ls_IssuerOU
string ls_IssuerC
integer li_ResponseStatus
string ls_ResponseTypeOid
string ls_ResponseTypeName
string ls_ResponseResponderIdChoice
string ls_ResponseResponderKeyHash
integer j
integer li_Count_j
string ls_HashOid
string ls_HashAlg
string ls_IssuerNameHash
string ls_IssuerKeyHash
string ls_SerialNumber
integer li_Status
integer i
integer li_Count_i

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loo_Pdf = create oleobject
// Use "Chilkat_9_5_0.Pdf" for versions of Chilkat < 10.0.0
li_rc = loo_Pdf.ConnectToNewObject("Chilkat.Pdf")
if li_rc < 0 then
    destroy loo_Pdf
    MessageBox("Error","Connecting to COM object failed")
    return
end if

li_Success = loo_Pdf.LoadFile("qa_data/pdf/sign_testing_1/helloSigned2.pdf")
if li_Success = 0 then
    Write-Debug loo_Pdf.LastErrorText
    destroy loo_Pdf
    return
end if

loo_Json = create oleobject
// Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
li_rc = loo_Json.ConnectToNewObject("Chilkat.JsonObject")

loo_Json.EmitCompact = 0

li_Success = loo_Pdf.GetDss(loo_Json)
Write-Debug loo_Json.Emit()

// The document security store contains certificates, OCSP responses, and CRLs.
// The following JSON is a sample of what the /DSS can contain.
// Unfortunately, our sample contains /Certs and /OCSPs, but no /CRLs.
// It's no problem because whatever JSON you get back, you can use the
// following online tool to generate code to parse.
// Generate Parsing Code from JSON

// The code generated by the online tool for this JSON is shown below..

// {
//   "/VRI": {
//     "/EC5BB34CC1F8A0C5FE674427E16E313A08C80808": {}
//   },
//   "/Certs": [
//     {
//       "serial": "02",
//       "validFrom": "2011-08-07T19:00:00-05:00",
//       "validTo": "2021-08-10T23:59:59-05:00",
//       "expired": false,
//       "subject": {
//         "CN": "XYZ Corporation",
//         "O": "XYZ"
//       },
//       "issuer": {
//         "CN": "XYZ Corporation",
//         "O": "XYZ"
//       },
//       "keyType": "RSA",
//       "keySize": "2048",
//       "der": "MIIDz...Q4Zt"
//     },
//     {
//       "serial": "01",
//       "validFrom": "2011-08-07T19:00:00-05:00",
//       "validTo": "2021-08-10T23:59:59-05:00",
//       "expired": false,
//       "subject": {
//         "CN": "XYZ Corporation",
//         "O": "XYZ"
//       },
//       "issuer": {
//         "CN": "XYZ Corporation",
//         "O": "XYZ"
//       },
//       "keyType": "RSA",
//       "keySize": "2048",
//       "der": "MIID...jXYFc="
//     },
//     {
//       "serial": "0AA125D6D6321B7E41E405DA3697C215",
//       "validFrom": "2016-01-07T06:00:00-06:00",
//       "validTo": "2031-01-07T12:00:00-06:00",
//       "expired": false,
//       "subject": {
//         "CN": "DigiCert SHA2 Assured ID Timestamping CA",
//         "OU": "www.digicert.com",
//         "O": "DigiCert Inc",
//         "C": "US"
//       },
//       "issuer": {
//         "CN": "DigiCert Assured ID Root CA",
//         "OU": "www.digicert.com",
//         "O": "DigiCert Inc",
//         "C": "US"
//       },
//       "keyType": "RSA",
//       "keySize": "2048",
//       "der": "MIIF...OUg=="
//     },
//     {
//       "serial": "04CD3F8568AE76C61BB0FE7160CCA76D",
//       "validFrom": "2019-09-30T19:00:00-05:00",
//       "validTo": "2030-10-17T00:00:00-05:00",
//       "expired": false,
//       "subject": {
//         "CN": "TIMESTAMP-SHA256-2019-10-15",
//         "O": "DigiCert, Inc.",
//         "C": "US"
//       },
//       "issuer": {
//         "CN": "DigiCert SHA2 Assured ID Timestamping CA",
//         "OU": "www.digicert.com",
//         "O": "DigiCert Inc",
//         "C": "US"
//       },
//       "keyType": "RSA",
//       "keySize": "2048",
//       "der": "MIIG...MJtPc="
//     },
//     {
//       "serial": "0CE7E0E517D846FE8FE560FC1BF03039",
//       "validFrom": "2006-11-09T18:00:00-06:00",
//       "validTo": "2031-11-10T00:00:00-06:00",
//       "expired": false,
//       "subject": {
//         "CN": "DigiCert Assured ID Root CA",
//         "OU": "www.digicert.com",
//         "O": "DigiCert Inc",
//         "C": "US"
//       },
//       "issuer": {
//         "CN": "DigiCert Assured ID Root CA",
//         "OU": "www.digicert.com",
//         "O": "DigiCert Inc",
//         "C": "US"
//       },
//       "keyType": "RSA",
//       "keySize": "2048",
//       "der": "MIIDt...FL6Lw8g=="
//     },
//     {
//       "serial": "E4D34D01798BE686424AF7F6F0C3BF41",
//       "validFrom": "2015-03-24T10:58:16-05:00",
//       "validTo": "2039-12-31T23:59:59-06:00",
//       "expired": false,
//       "subject": {
//         "CN": "www.xyz.com"
//       },
//       "issuer": {
//         "CN": "www.xyz.com"
//       },
//       "keyType": "RSA",
//       "keySize": "1024",
//       "der": "MIIB9DCCAWG...UR10lz"
//     }
//   ],
//   "/OCSPs": [
//     {
//       "responseStatus": 0,
//       "responseTypeOid": "1.3.6.1.5.5.7.48.1.1",
//       "responseTypeName": "ocspBasic",
//       "response": {
//         "responderIdChoice": "KeyHash",
//         "responderKeyHash": "Reuir/SSy4IxLVGLp6chnfNtyA8=",
//         "dateTime": "20201005173921Z",
//         "cert": [
//           {
//             "hashOid": "1.3.14.3.2.26",
//             "hashAlg": "SHA-1",
//             "issuerNameHash": "98S+C0C1w0QzPT+uuU1uONr67FE=",
//             "issuerKeyHash": "Reuir/SSy4IxLVGLp6chnfNtyA8=",
//             "serialNumber": "0AA125D6D6321B7E41E405DA3697C215",
//             "status": 0,
//             "thisUpdate": "20201005173921Z",
//             "nextUpdate": "20201012173921Z"
//           }
//         ]
//       }
//     },
//     {
//       "responseStatus": 0,
//       "responseTypeOid": "1.3.6.1.5.5.7.48.1.1",
//       "responseTypeName": "ocspBasic",
//       "response": {
//         "responderIdChoice": "KeyHash",
//         "responderKeyHash": "9LbhIB3+Ka7S5GGlsqIlssgXNW4=",
//         "dateTime": "20201006114501Z",
//         "cert": [
//           {
//             "hashOid": "1.3.14.3.2.26",
//             "hashAlg": "SHA-1",
//             "issuerNameHash": "+YYA+KSr7NIxRSxCjUNQo25SyD0=",
//             "issuerKeyHash": "9LbhIB3+Ka7S5GGlsqIlssgXNW4=",
//             "serialNumber": "04CD3F8568AE76C61BB0FE7160CCA76D",
//             "status": 0,
//             "thisUpdate": "20201006114501Z",
//             "nextUpdate": "20201013110001Z"
//           }
//         ]
//       }
//     }
//   ]
// }

loo_ResponseDateTime = create oleobject
// Use "Chilkat_9_5_0.DtObj" for versions of Chilkat < 10.0.0
li_rc = loo_ResponseDateTime.ConnectToNewObject("Chilkat.DtObj")

loo_ThisUpdate = create oleobject
// Use "Chilkat_9_5_0.DtObj" for versions of Chilkat < 10.0.0
li_rc = loo_ThisUpdate.ConnectToNewObject("Chilkat.DtObj")

loo_NextUpdate = create oleobject
// Use "Chilkat_9_5_0.DtObj" for versions of Chilkat < 10.0.0
li_rc = loo_NextUpdate.ConnectToNewObject("Chilkat.DtObj")

i = 0
li_Count_i = loo_Json.SizeOfArray("/Certs")
do while i < li_Count_i
    loo_Json.I = i
    ls_Serial = loo_Json.StringOf("/Certs[i].serial")
    ls_ValidFrom = loo_Json.StringOf("/Certs[i].validFrom")
    ls_ValidTo = loo_Json.StringOf("/Certs[i].validTo")
    li_Expired = loo_Json.BoolOf("/Certs[i].expired")
    ls_SubjectCN = loo_Json.StringOf("/Certs[i].subject.CN")
    ls_SubjectO = loo_Json.StringOf("/Certs[i].subject.O")
    ls_IssuerCN = loo_Json.StringOf("/Certs[i].issuer.CN")
    ls_IssuerO = loo_Json.StringOf("/Certs[i].issuer.O")
    ls_KeyType = loo_Json.StringOf("/Certs[i].keyType")
    ls_KeySize = loo_Json.StringOf("/Certs[i].keySize")
    ls_Der = loo_Json.StringOf("/Certs[i].der")
    ls_SubjectOU = loo_Json.StringOf("/Certs[i].subject.OU")
    ls_SubjectC = loo_Json.StringOf("/Certs[i].subject.C")
    ls_IssuerOU = loo_Json.StringOf("/Certs[i].issuer.OU")
    ls_IssuerC = loo_Json.StringOf("/Certs[i].issuer.C")
    i = i + 1
loop
i = 0
li_Count_i = loo_Json.SizeOfArray("/OCSPs")
do while i < li_Count_i
    loo_Json.I = i
    li_ResponseStatus = loo_Json.IntOf("/OCSPs[i].responseStatus")
    ls_ResponseTypeOid = loo_Json.StringOf("/OCSPs[i].responseTypeOid")
    ls_ResponseTypeName = loo_Json.StringOf("/OCSPs[i].responseTypeName")
    ls_ResponseResponderIdChoice = loo_Json.StringOf("/OCSPs[i].response.responderIdChoice")
    ls_ResponseResponderKeyHash = loo_Json.StringOf("/OCSPs[i].response.responderKeyHash")
    loo_Json.DtOf("/OCSPs[i].response.dateTime",0,loo_ResponseDateTime)
    j = 0
    li_Count_j = loo_Json.SizeOfArray("/OCSPs[i].response.cert")
    do while j < li_Count_j
        loo_Json.J = j
        ls_HashOid = loo_Json.StringOf("/OCSPs[i].response.cert[j].hashOid")
        ls_HashAlg = loo_Json.StringOf("/OCSPs[i].response.cert[j].hashAlg")
        ls_IssuerNameHash = loo_Json.StringOf("/OCSPs[i].response.cert[j].issuerNameHash")
        ls_IssuerKeyHash = loo_Json.StringOf("/OCSPs[i].response.cert[j].issuerKeyHash")
        ls_SerialNumber = loo_Json.StringOf("/OCSPs[i].response.cert[j].serialNumber")
        li_Status = loo_Json.IntOf("/OCSPs[i].response.cert[j].status")
        loo_Json.DtOf("/OCSPs[i].response.cert[j].thisUpdate",0,loo_ThisUpdate)
        loo_Json.DtOf("/OCSPs[i].response.cert[j].nextUpdate",0,loo_NextUpdate)
        j = j + 1
    loop
    i = i + 1
loop


destroy loo_Pdf
destroy loo_Json
destroy loo_ResponseDateTime
destroy loo_ThisUpdate
destroy loo_NextUpdate