Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(PowerShell) PKCS11 Sign PDF with Smart Card with 2 PINsSee more PKCS11 ExamplesShows how to sign a PDF using a smart card that has one pin for USER, and a 2nd PIN for signing. Note: This example requires Chilkat v9.5.0.96 or later.
Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll" # This example requires the Chilkat API to have been previously unlocked. # See Global Unlock Sample for sample code. # Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems. $pkcs11 = New-Object Chilkat.Pkcs11 $pkcs11.SharedLibPath = "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll" # -------------------------- # Provide the user PIN here. # -------------------------- $user_pin = "0000" $userType = 1 # Establish a PKCS11 logged-on session using the driver (.so, .dylib, or .dll) as specified in the SharedLibPath above. $success = $pkcs11.QuickSession($userType,$user_pin) if ($success -eq $false) { $($pkcs11.LastErrorText) exit } # ----------------------------------------------------------- # Also indicate the context-specific PIN required for signing. # This is a new feature added in Chilkat v9.5.0.97 # ----------------------------------------------------------- $pkcs11.SigContextPin = "1234" # Get the certificate (on the smart card) that has a private key. # There are other ways to locate a certificate on the HSM. # This example assumes there is a single certificate w/ private key. $cert = New-Object Chilkat.Cert $success = $pkcs11.FindCert("privateKey","",$cert) if ($success -eq $true) { $("Cert with private key: " + $cert.SubjectCN) } else { $("No certificates having a private key were found.") $success = $pkcs11.CloseSession() exit } # -------------------------------------------------------------------------- # At this point, we have the cert to be used for signing. # Our PDF signing code is the same as for a cert obtained from any other source.. $pdf = New-Object Chilkat.Pdf # Load a PDF to be signed. $success = $pdf.LoadFile("qa_data/pdf/hello.pdf") if ($success -eq $false) { $($pdf.LastErrorText) $success = $pkcs11.CloseSession() exit } $json = New-Object Chilkat.JsonObject $json.UpdateInt("page",1) $json.UpdateString("appearance.y","top") $json.UpdateString("appearance.x","left") $json.UpdateString("appearance.fontScale","10.0") $json.UpdateString("signingAlgorithm","pss") $json.UpdateString("hashAlgorithm","sha256") $i = 0 $json.I = $i $json.UpdateString("appearance.text[i]","Digitaly signed by: Xyz Widgets, Inc.") $i = $i + 1 $json.I = $i $json.UpdateString("appearance.text[i]","current_dt") $i = $i + 1 $json.I = $i $json.UpdateString("appearance.text[i]","blah blah blah") # The certificate is internally linked to the Pkcs11 object, which is currently in an authenticated session. $success = $pdf.SetSigningCert($cert) $success = $pdf.SignPdf($json,"qa_output/out.pdf") if ($success -eq $false) { $($pdf.LastErrorText) $success = $pkcs11.CloseSession() exit } # -------------------------------------------------------------------------- # Revert to an unauthenticated session by calling Logout. $success = $pkcs11.Logout() if ($success -eq $false) { $($pkcs11.LastErrorText) $success = $pkcs11.CloseSession() exit } # When finished, close the session. # It is important to close the session (memory leaks will occur if the session is not properly closed). $success = $pkcs11.CloseSession() if ($success -eq $false) { $($pkcs11.LastErrorText) exit } $("Success.") |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.