(PowerBuilder) RSA Sign String using Private Key of Certificate Type A3 (smart card / token)

Demonstrates RSA signing a string using the private key of a certificate type A3 (smart card, token).

Note: This is a Windows-only example.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
oleobject loo_CertStore
string ls_Thumbprint
integer li_BReadOnly
integer li_Success
oleobject loo_Cert
oleobject loo_Rsa
integer li_BUsePrivateKey
string ls_SigBase64

// First get the A3 certificate that was installed on the Windows system.
loo_CertStore = create oleobject
// Use "Chilkat_9_5_0.CertStore" for versions of Chilkat < 10.0.0
li_rc = loo_CertStore.ConnectToNewObject("Chilkat.CertStore")
if li_rc < 0 then
    destroy loo_CertStore
    MessageBox("Error","Connecting to COM object failed")
    return
end if

ls_Thumbprint = "12c1dd8015f3f03f7b1fa619dc24e2493ca8b4b2"

// This is specific to Windows because it is opening the Windows Current-User certificate store.
li_BReadOnly = 1
li_Success = loo_CertStore.OpenCurrentUserStore(li_BReadOnly)
if li_Success <> 1 then
    Write-Debug loo_CertStore.LastErrorText
    destroy loo_CertStore
    return
end if

// Find the certificate with the desired thumbprint
// (There are many ways to locate a certificate.  This example chooses to find by thumbprint.)
loo_Cert = loo_CertStore.FindCertBySha1Thumbprint(ls_Thumbprint)
if loo_CertStore.LastMethodSuccess <> 1 then
    Write-Debug "Failed to find the certificate."
    destroy loo_CertStore
    return
end if

Write-Debug "Found: " + loo_Cert.SubjectCN

loo_Rsa = create oleobject
// Use "Chilkat_9_5_0.Rsa" for versions of Chilkat < 10.0.0
li_rc = loo_Rsa.ConnectToNewObject("Chilkat.Rsa")

// Provide the cert's private key
li_BUsePrivateKey = 1
li_Success = loo_Rsa.SetX509Cert(loo_Cert,li_BUsePrivateKey)
destroy loo_Cert
if li_Success <> 1 then
    Write-Debug loo_Rsa.LastErrorText
    destroy loo_CertStore
    destroy loo_Rsa
    return
end if

// Return the RSA signature in base64 encoded form.
loo_Rsa.EncodingMode = "base64"

// Sign the utf-8 byte representation of the string.
loo_Rsa.Charset = "utf-8"

// You can also choose other hash algorithms, such as SHA-1.
ls_SigBase64 = loo_Rsa.SignStringENC("text to sign","SHA-256")
if loo_Rsa.LastMethodSuccess <> 1 then
    Write-Debug loo_Rsa.LastErrorText
    destroy loo_CertStore
    destroy loo_Rsa
    return
end if

Write-Debug "Base64 signature: " + ls_SigBase64


destroy loo_CertStore
destroy loo_Rsa