(CkPython) Sign a Byte Array to Create a Detached Signature in a Byte Array

Signs data contained in a byte array to produce a detached signature (also in a byte array). Also shows how to verify the signature.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

cert = chilkat.CkCert()
success = cert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123")
if (success == False):
    print(cert.lastErrorText())
    sys.exit()

fac = chilkat.CkFileAccess()

fileBytes = chilkat.CkByteData()
success = fac.ReadEntireFile("qa_data/pdf/sample.pdf",fileBytes)
if (fac.get_LastMethodSuccess() != True):
    print(fac.lastErrorText())
    sys.exit()

crypt = chilkat.CkCrypt2()

success = crypt.SetSigningCert(cert)

# We can sign any type of file.
# The result is a detached signature (a signature that does not contain the data being signed).

sigBytes = chilkat.CkByteData()
success = crypt.SignBytes(fileBytes,sigBytes)
if (crypt.get_LastMethodSuccess() != True):
    print(crypt.lastErrorText())
    sys.exit()

success = fac.WriteEntireFile("qa_output/sample.pdf.p7s",sigBytes)
if (fac.get_LastMethodSuccess() != True):
    print(fac.lastErrorText())
    sys.exit()

# We can verify the detached signature like this
verified = crypt.VerifyBytes(fileBytes,sigBytes)
if (crypt.get_LastMethodSuccess() != True):
    print(crypt.lastErrorText())
    sys.exit()

print("Verified = " + str(verified))