(Ruby) Sign a Byte Array to Create an Opaque Signature in a Byte Array

Signs data contained in a byte array to produce an opaque signature (also in a byte array). An opaque signature is a PKCS7 signature (also known as CAdES) that embeds the signed data. Also shows how to verify the signature and extract the original data.

Chilkat Ruby Downloads install from rubygems.org gem install chilkat or download... Ruby Library for Windows, MacOS, Linux, Alpine Linux

require 'chilkat'

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

cert = Chilkat::CkCert.new()
success = cert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123")
if (success == false)
    print cert.lastErrorText() + "\n";
    exit
end

fac = Chilkat::CkFileAccess.new()

fileBytes = Chilkat::CkByteData.new()
success = fac.ReadEntireFile("qa_data/pdf/sample.pdf",fileBytes)
if (fac.get_LastMethodSuccess() != true)
    print fac.lastErrorText() + "\n";
    exit
end

crypt = Chilkat::CkCrypt2.new()

success = crypt.SetSigningCert(cert)

# We can sign any type of file.

sigBytes = Chilkat::CkByteData.new()
success = crypt.OpaqueSignBytes(fileBytes,sigBytes)
if (crypt.get_LastMethodSuccess() != true)
    print crypt.lastErrorText() + "\n";
    exit
end

success = fac.WriteEntireFile("qa_output/sample.pdf.p7m",sigBytes)
if (fac.get_LastMethodSuccess() != true)
    print fac.lastErrorText() + "\n";
    exit
end

# We can verify the opaque signature and extract the original data like this
originalData = Chilkat::CkByteData.new()
success = crypt.OpaqueVerifyBytes(sigBytes,originalData)
if (crypt.get_LastMethodSuccess() != true)
    print crypt.lastErrorText() + "\n";
    exit
end

success = fac.WriteEntireFile("qa_output/sample.pdf",originalData)
if (fac.get_LastMethodSuccess() != true)
    print fac.lastErrorText() + "\n";
    exit
end

print "Signature is verified and the original data was extracted." + "\n";