React Native Requires Chilkat v11.0.0+

Duplicate OpensSSL to Sign File and Output Binary DER

See more OpenSSL Examples

This example duplicates the following:

openssl smime -sign -in INPUT.xml -signer SIGN.PEM -passin pass:MYPASS -outform der -binary -nodetach -out SIGNED.P7M

Note: Although "smime" is the OpenSSL command, it's not actually producing S/MIME. The arguments "-outform der -binary" indicates that the output is binary DER (i.e. the PKCS7 binary signature). The input can be any type of file: XML, PDF, JPG, ... *anything*...

React Native

import { Cert, Crypt2, Pem, PrivateKey } from '@chilkat/react-native'

async function chilkatExample() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  const crypt = new Crypt2();

  // Load the PEM containing cert + private key.
  const pem = new Pem();
  try {
    pem.loadPemFile('qa_data/pem/myPem.pem', 'password');
  } catch {
    console.log(pem.lastErrorText);
    return;
  }

  const privkey = new PrivateKey();
  try {
    pem.privateKeyAt(0, privkey);
  } catch {
    console.log(pem.lastErrorText);
    return;
  }

  const cert = new Cert();
  try {
    pem.certAt(0, cert);
  } catch {
    console.log(pem.lastErrorText);
    return;
  }

  try {
    crypt.setSigningCert2(cert, privkey);
  } catch {
    console.log(crypt.lastErrorText);
    return;
  }

  // Alternatively, we could use a .pfx/.p12 file.
  // (Chilkat also supports other formats/sources for cert/private keys...)
  const certFromP12 = new Cert();
  try {
    certFromP12.loadPfxFile('qa_data/p12/myP12.p12', 'password');
  } catch {
    console.log(certFromP12.lastErrorText);
    return;
  }

  // The certificate, when loaded from a .pfx/.p12, will automatically 
  // include the associated private key, assuming it's present in the .p12.
  // We don't have to explicitly provide the private key as in the
  // lines of code above that use the PEM file.
  try {
    crypt.setSigningCert(certFromP12);
  } catch {
    console.log(crypt.lastErrorText);
    return;
  }

  // Create the opaque signature (PKCS7 binary DER that contains both the signature and original file data).
  try {
    await crypt.createP7MAsync('qa_data/infile.anything', 'qa_output/outfile.p7m');
  } catch {
    console.log(crypt.lastErrorText);
    return;
  }

  console.log('Success.');
}