(Tcl) Sign a File to Create a .p7s (Detached Signature)

Tcl example to create a detached signature file (.p7s) for any type file. The signature can be verified by calling VerifyP7S and passing the original filename and the .p7s filename.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set crypt [new_CkCrypt2]

# Use a digital certificate and private key from a PFX file (.pfx or .p12).
set signingCertSubject "Acme Inc"
set pfxFilename "/Users/chilkat/testData/pfx/acme.pfx"
set pfxPassword "test123"

set certStore [new_CkCertStore]

set success [CkCertStore_LoadPfxFile $certStore $pfxFilename $pfxPassword]
if {$success != 1} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

# cert is a CkCert
set cert [CkCertStore_FindCertBySubjectCN $certStore $signingCertSubject]
if {[CkCertStore_get_LastMethodSuccess $certStore] == 0} then {
    puts "Failed to find certificate by subject common name."
    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

# Tell the crypt component to use this cert.
set success [CkCrypt2_SetSigningCert $crypt $cert]

# We can sign any type of file, creating a .p7s as output:
set inFile "/Users/chilkat/testData/pdf/sample.pdf"
set sigFile "/Users/chilkat/testData/p7s/sample.p7s"

set success [CkCrypt2_CreateP7S $crypt $inFile $sigFile]
if {$success == 0} then {
    puts [CkCrypt2_lastErrorText $crypt]
    delete_CkCert $cert

    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

set success [CkCrypt2_VerifyP7S $crypt $inFile $sigFile]
if {$success == 0} then {
    puts [CkCrypt2_lastErrorText $crypt]
    delete_CkCert $cert

    delete_CkCrypt2 $crypt
    delete_CkCertStore $certStore
    exit
}

delete_CkCert $cert

puts "Success!"

delete_CkCrypt2 $crypt
delete_CkCertStore $certStore