(CkPython) CAdES BES Detached Signature

Demonstrates how to create a CAdES BES detached signature file (.p7s).

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

crypt = chilkat.CkCrypt2()

# Use a digital certificate and private key from a PFX file (.pfx or .p12).
pfxPath = "/Users/chilkat/testData/pfx/acme.pfx"
pfxPassword = "test123"

cert = chilkat.CkCert()
success = cert.LoadPfxFile(pfxPath,pfxPassword)
if (success != True):
    print(cert.lastErrorText())
    sys.exit()

# Tell the crypt component to use this cert.
success = crypt.SetSigningCert(cert)
if (success != True):
    print(crypt.lastErrorText())
    sys.exit()

# The CadesEnabled property applies to all methods that create PKCS7 signatures. 
# To create a CAdES-BES signature, set this property equal to true. 
crypt.put_CadesEnabled(True)

# We can sign any type of file, creating a .p7s as output:
inFile = "/Users/chilkat/testData/pdf/sample.pdf"
sigFile = "/Users/chilkat/testData/p7s/sample.p7s"

# Create the detached CAdES-BES signature:
success = crypt.CreateP7S(inFile,sigFile)
if (success == False):
    print(crypt.lastErrorText())
    sys.exit()

success = crypt.VerifyP7S(inFile,sigFile)
if (success == False):
    print(crypt.lastErrorText())
    sys.exit()

print("Success!")