(PowerShell) CAdES BES Detached Signature

Demonstrates how to create a CAdES BES detached signature file (.p7s).

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$crypt = New-Object Chilkat.Crypt2

# Use a digital certificate and private key from a PFX file (.pfx or .p12).
$pfxPath = "/Users/chilkat/testData/pfx/acme.pfx"
$pfxPassword = "test123"

$cert = New-Object Chilkat.Cert
$success = $cert.LoadPfxFile($pfxPath,$pfxPassword)
if ($success -ne $true) {
    $($cert.LastErrorText)
    exit
}

# Tell the crypt component to use this cert.
$success = $crypt.SetSigningCert($cert)
if ($success -ne $true) {
    $($crypt.LastErrorText)
    exit
}

# The CadesEnabled property applies to all methods that create PKCS7 signatures. 
# To create a CAdES-BES signature, set this property equal to true. 
$crypt.CadesEnabled = $true

# We can sign any type of file, creating a .p7s as output:
$inFile = "/Users/chilkat/testData/pdf/sample.pdf"
$sigFile = "/Users/chilkat/testData/p7s/sample.p7s"

# Create the detached CAdES-BES signature:
$success = $crypt.CreateP7S($inFile,$sigFile)
if ($success -eq $false) {
    $($crypt.LastErrorText)
    exit
}

$success = $crypt.VerifyP7S($inFile,$sigFile)
if ($success -eq $false) {
    $($crypt.LastErrorText)
    exit
}

$("Success!")