Tcl

Duplicate openssl dgst -sha256 -verify pubKey.pem -signature signature.sig in.dat

See more OpenSSL Examples

Demonstrates how to duplicate this OpenSSL command:

openssl dgst -sha256 -verify pubKey.pem -signature signature.sig in.dat

The in.dat file contains the original data that was signed, and can contain text or binary data of any type. The above OpenSSL command does the following:

1. Creates a SHA256 digest of the contents of the input file.
2. Verifies the SHA256 digest using the public key.

Tcl

load ./chilkat.dll

set success 0

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set pubKey [new_CkPublicKey]

# Load the public key from an PEM file:
set success [CkPublicKey_LoadFromFile $pubKey "pubKey.pem"]
if {$success == 0} then {
    puts [CkPublicKey_lastErrorText $pubKey]
    delete_CkPublicKey $pubKey
    exit
}

# Load the data of the original file that was signed.
set bdFileData [new_CkBinData]

set success [CkBinData_LoadFile $bdFileData "in.dat"]

# Load the signature.
set bdSig [new_CkBinData]

set success [CkBinData_LoadFile $bdSig "signature.sig"]

set rsa [new_CkRsa]

# Import the public key into the RSA component:
set success [CkRsa_UsePublicKey $rsa $pubKey]
if {$success == 0} then {
    puts [CkRsa_lastErrorText $rsa]
    delete_CkPublicKey $pubKey
    delete_CkBinData $bdFileData
    delete_CkBinData $bdSig
    delete_CkRsa $rsa
    exit
}

# OpenSSL uses big-endian.
CkRsa_put_LittleEndian $rsa 0

set success [CkRsa_VerifyBd $rsa $bdFileData "sha256" $bdSig]
if {$success != 1} then {
    puts [CkRsa_lastErrorText $rsa]
    puts "The signature was invalid."
    delete_CkPublicKey $pubKey
    delete_CkBinData $bdFileData
    delete_CkBinData $bdSig
    delete_CkRsa $rsa
    exit
}

puts "The signature was verified."

delete_CkPublicKey $pubKey
delete_CkBinData $bdFileData
delete_CkBinData $bdSig
delete_CkRsa $rsa