Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(PowerShell) Create CAdES p7m using AWS KMS to Sign in the CloudSee more Signing in the Cloud ExamplesDemonstrates how to create a CAdES p7m, using AWS KMS. The signing of the hash happens in the Cloud on AWS KMS. Everything else regarding the creation of CAdES happens locally within Chilkat. Note: This example requires Chilkat v9.5.0.96 or greater.
Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll" # This example assumes the Chilkat API to have been previously unlocked. # See Global Unlock Sample for sample code. # Load the certificate used for signing. The certificate's private key is stored in # the Azure Key Vault. # However, we still need the certificate locally (without private key). $cert = New-Object Chilkat.Cert $success = $cert.LoadFromFile("qa_data/certs/myCert.cer") if ($success -eq $false) { $($cert.LastErrorText) exit } # Here's a screenshot showing the key ID of a private key in AWS KMS: # To sign using AWS KMS, # add the following lines of code to specify your AWS authentication credentials, # and the ID of the KMS private key. $jsonAwsKms = New-Object Chilkat.JsonObject # Set the "service" equal to "aws_kms" to tell Chilkat to use AWS KMS for signing. $jsonAwsKms.UpdateString("service","aws_kms") $jsonAwsKms.UpdateString("access_key","ACCESS_KEY") $jsonAwsKms.UpdateString("secret_key","SECRET_KEY") # Make sure to specify the correct region for your case. $jsonAwsKms.UpdateString("region","us-west-2") # In the above screenshot, our key ID is "187012e8-008f-4fc7-b100-5efe6146dff2". You will use your key ID. $jsonAwsKms.UpdateString("key_id","187012e8-008f-4fc7-b100-5efe6146dff2") $success = $cert.SetCloudSigner($jsonAwsKms) $crypt = New-Object Chilkat.Crypt2 $success = $crypt.SetSigningCert($cert) if ($success -eq $false) { $($crypt.LastErrorText) exit } # The CadesEnabled property applies to all methods that create PKCS7 signatures. # To create a CAdES-BES signature, set this property equal to true. $crypt.CadesEnabled = $true $crypt.HashAlgorithm = "sha256" $signedAttrs = New-Object Chilkat.JsonObject $signedAttrs.UpdateInt("contentType",1) $signedAttrs.UpdateInt("signingTime",1) $signedAttrs.UpdateInt("messageDigest",1) $signedAttrs.UpdateInt("signingCertificateV2",1) $crypt.SigningAttributes = $signedAttrs.Emit() # You can sign any type of file.. $inputXmlPath = "qa_data/e-Invoice.xml" $outputP7mPath = "qa_output/signed.p7m" # Create the CAdES-BES attached signature, which contains the original data. # Chilkat will build the .p7m locally, but will (internally) use ARSS # to do the RSA signing remotely. $success = $crypt.CreateP7M($inputXmlPath,$outputP7mPath) if ($success -eq $false) { $($crypt.LastErrorText) exit } $("Success.") |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.