Rust

PKCS7 Sign Text using RSA 2048, SHA256, Base64 Output

See more Digital Signatures Examples

Demonstrates how to sign text using 2048-bit RSA with SHA256, producing PKCS#7 output in Base64. The certificate w/ private key used for signing is loaded from a .p12/.pfx file. Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

let cert = chilkat::Cert::new();

// Load the cert and private key.  Whatever the private key happens to be,
// such as RSA or ECC, then Chilkat will use it.  If the private key is 
// a 2048-bit RSA key, then that's what will be used..
if cert.load_pfx_file("qa_data/pfx/myCertAndKey.p12", "password").is_err() {
    println!("{}", cert.last_error_text());
    return;
}

let crypt = chilkat::Crypt2::new();

if crypt.set_signing_cert(&cert).is_err() {
    println!("{}", crypt.last_error_text());
    return;
}

// Use SHA-256
crypt.set_hash_algorithm("sha256");

// Hash the utf-8 byte representation of the string
crypt.set_charset("utf-8");

// Return the result in base64
crypt.set_encoding_mode("base64");

// Sign some text..
let text_to_sign = "This is the text to be hashed and signed.".to_string();
let Ok(sig_base64) = crypt.opaque_sign_string_enc(&text_to_sign) else {
    println!("{}", crypt.last_error_text());
    return;
};

println!("{}", sig_base64);

// The result:
// MIIS2wYJKoZIhvcNAQc ... zGeeY4Oxg==