(PowerShell) Sign a File to Create a .p7m File (using a PFX)

PowerShell example to sign a file creating a .p7m file as output. The .p7m contains the signed contents of the original file. It can be verified and restored by calling VerifyP7M.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$crypt = New-Object Chilkat.Crypt2

# Use a digital certificate and private key from a PFX file (.pfx or .p12).
$signingCertSubject = "Acme Inc"
$pfxFilename = "/Users/chilkat/testData/pfx/acme.pfx"
$pfxPassword = "test123"

$certStore = New-Object Chilkat.CertStore
$success = $certStore.LoadPfxFile($pfxFilename,$pfxPassword)
if ($success -ne $true) {
    $($certStore.LastErrorText)
    exit
}

$cert = $certStore.FindCertBySubjectCN($signingCertSubject)
if ($certStore.LastMethodSuccess -eq $false) {
    $("Failed to find certificate by subject common name.")
    exit
}

# Tell the crypt component to use this cert.
$success = $crypt.SetSigningCert($cert)

# We can sign any type of file, creating a .p7m as output:
$inFile = "/Users/chilkat/testData/pdf/sample.pdf"
$outputFile = "/Users/chilkat/testData/p7m/sample.pdf.p7m"
$success = $crypt.CreateP7M($inFile,$outputFile)
if ($success -eq $false) {
    $($crypt.LastErrorText)

    exit
}

# Verify and restore the original file:
$success = $crypt.SetVerifyCert($cert)

$inFile = $outputFile
$outputFile = "/Users/chilkat/testData/pdf/restored.pdf"

$success = $crypt.VerifyP7M($inFile,$outputFile)
if ($success -eq $false) {
    $($crypt.LastErrorText)

    exit
}

$("Success!")