(CkPython) Create PKCS7 Signed File (.p7m)

Demonstrates how to sign a file to create a .p7m that contains both the file contents and the signature.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

crypt = chilkat.CkCrypt2()

certStore = chilkat.CkCertStore()

# Load a PFX file into a certificate store object.
success = certStore.LoadPfxFile("myPfx.pfx","pfxPassword")
if (success != True):
    print(certStore.lastErrorText())
    sys.exit()

# Get the certificate by subject common name.
# This should be the cert within the PFX that also
# has a private key (also stored within the PFX).
# cert is a CkCert
cert = certStore.FindCertBySubjectCN("myCert")
if (certStore.get_LastMethodSuccess() == False):
    print(certStore.lastErrorText())
    sys.exit()

# Tell the crypt object to use the certificate for signing:
success = crypt.SetSigningCert(cert)

# Sign a file, producing a .p7m as output.
# The input file is unchanged, the test.p7m contains the 
# contents of the input file and the signature.
inFile = "test.txt"
outFile = "testp7m"
success = crypt.CreateP7M(inFile,outFile)
if (success != True):
    print(crypt.lastErrorText())
    sys.exit()

print("Success!")