(Tcl) Sign a File to Create a .p7m File (using a PFX)

Tcl example to sign a file creating a .p7m file as output. The .p7m contains the signed contents of the original file. It can be verified and restored by calling VerifyP7M.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set crypt [new_CkCrypt2]

# Use a digital certificate and private key from a PFX file (.pfx or .p12).
set signingCertSubject "Acme Inc"
set pfxFilename "/Users/chilkat/testData/pfx/acme.pfx"
set pfxPassword "test123"

set certStore [new_CkCertStore]

set success [CkCertStore_LoadPfxFile $certStore $pfxFilename $pfxPassword]
if {[expr $success != 1]} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

# cert is a CkCert

set cert [CkCertStore_FindCertBySubjectCN $certStore $signingCertSubject]
if {[expr [CkCertStore_get_LastMethodSuccess $certStore] == 0]} then {
    puts "Failed to find certificate by subject common name."
    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

# Tell the crypt component to use this cert.
set success [CkCrypt2_SetSigningCert $crypt $cert]

# We can sign any type of file, creating a .p7m as output:
set inFile "/Users/chilkat/testData/pdf/sample.pdf"
set outputFile "/Users/chilkat/testData/p7m/sample.pdf.p7m"
set success [CkCrypt2_CreateP7M $crypt $inFile $outputFile]
if {[expr $success == 0]} then {
    puts [CkCrypt2_lastErrorText $crypt]
    delete_CkCert $cert

    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

# Verify and restore the original file:
set success [CkCrypt2_SetVerifyCert $crypt $cert]

set inFile $outputFile
set outputFile "/Users/chilkat/testData/pdf/restored.pdf"

set success [CkCrypt2_VerifyP7M $crypt $inFile $outputFile]
if {[expr $success == 0]} then {
    puts [CkCrypt2_lastErrorText $crypt]
    delete_CkCert $cert

    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

delete_CkCert $cert

puts "Success!"

delete_CkCrypt2 $crypt
delete_CkCertStore $certStore