(Tcl) Create PKCS7 Signed File (.p7m)

Demonstrates how to sign a file to create a .p7m that contains both the file contents and the signature.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set crypt [new_CkCrypt2]

set certStore [new_CkCertStore]

# Load a PFX file into a certificate store object.
set success [CkCertStore_LoadPfxFile $certStore "myPfx.pfx" "pfxPassword"]
if {$success != 1} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

# Get the certificate by subject common name.
# This should be the cert within the PFX that also
# has a private key (also stored within the PFX).
# cert is a CkCert
set cert [CkCertStore_FindCertBySubjectCN $certStore "myCert"]
if {[CkCertStore_get_LastMethodSuccess $certStore] == 0} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

# Tell the crypt object to use the certificate for signing:
set success [CkCrypt2_SetSigningCert $crypt $cert]

# Sign a file, producing a .p7m as output.
# The input file is unchanged, the test.p7m contains the 
# contents of the input file and the signature.
set inFile "test.txt"
set outFile "testp7m"
set success [CkCrypt2_CreateP7M $crypt $inFile $outFile]
if {$success != 1} then {
    puts [CkCrypt2_lastErrorText $crypt]
    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

puts "Success!"

delete_CkCrypt2 $crypt
delete_CkCertStore $certStore