Swift

Sign JSON to Create CAdES P7S Bytes

See more CAdES Examples

Demonstrates how to sign JSON using a certificate + private key from a .p12/.pfx to create a CAdES P7S byte array. Swift

func chilkatTest() {
    var success: Bool = false

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    let crypt = CkoCrypt2()!

    let cert = CkoCert()!
    success = cert.loadPfxFile(path: "qa_data/pfx/cert_test123.pfx", password: "test123")
    if success != true {
        print("\(cert.lastErrorText!)")
        return
    }

    // Tell the crypt component to use this cert.
    success = crypt.setSigningCert(cert: cert)
    if success != true {
        print("\(crypt.lastErrorText!)")
        return
    }

    // The CadesEnabled property applies to all methods that create PKCS7 signatures. 
    // To create a CAdES-BES signature, set this property equal to true. 
    crypt.cadesEnabled = true

    crypt.hashAlgorithm = "sha256"

    let jsonSigningAttrs = CkoJsonObject()!
    jsonSigningAttrs.updateInt(jsonPath: "contentType", value: 1)
    jsonSigningAttrs.updateInt(jsonPath: "signingTime", value: 1)
    jsonSigningAttrs.updateInt(jsonPath: "messageDigest", value: 1)
    jsonSigningAttrs.updateInt(jsonPath: "signingCertificateV2", value: 1)
    crypt.signingAttributes = jsonSigningAttrs.emit()

    // By default, all the certs in the chain of authentication are included in the signature.
    // If desired, we can choose to only include the signing certificate:
    crypt.includeCertChain = false

    // Create the CAdES-BES attached signature, which contains the original data.
    crypt.charset = "utf-8"
    var cadesP7s: NSData
    cadesP7s = crypt.opaqueSignString(str: "{ \"abc\": 123}")
    if crypt.lastMethodSuccess == false {
        print("\(crypt.lastErrorText!)")
        return
    }

    // Verify the signature and extract the original JSON:
    var originalJson: String? = crypt.opaqueVerifyString(p7m: cadesP7s)
    if crypt.lastMethodSuccess == false {
        print("\(crypt.lastErrorText!)")
        return
    }

    print("Original JSON: \(originalJson!)")

    print("Success!")

}