(Tcl) Get PDF Signer Certs

See more PDF Signatures Examples

This example demonstrates how to validate the signatures in a PDF and also shows how to get each signature's signer certificate.

Note: This example requires Chilkat v9.5.0.87 or greater.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set pdf [new_CkPdf]

# Load a PDF that has cryptographic signatures to be validated
set success [CkPdf_LoadFile $pdf "qa_data/pdf/sign_testing_1/helloSigned2.pdf"]
if {$success == 0} then {
    puts [CkPdf_lastErrorText $pdf]
    delete_CkPdf $pdf
    exit
}

# Each time we verify a signature, information about the signature is written into
# sigInfo (replacing whatever sigInfo previously contained).
set sigInfo [new_CkJsonObject]

# Iterate over each signature and validate each.
set numSignatures [CkPdf_get_NumSignatures $pdf]
set validated 0
set cert [new_CkCert]

set i 0
while {$i < $numSignatures} {
    set validated [CkPdf_VerifySignature $pdf $i $sigInfo]
    puts "Signature $i validated: $validated"

    # The GetSignerCert method was added in Chilkat v9.5.0.87
    # After calling VerifySignature, you can get the signer certificate by calling
    # GetSignerCert with the same index. 
    set success [CkPdf_GetSignerCert $pdf $i $cert]
    if {$success != 0} then {
        puts "PDF signer certificate: [CkCert_subjectDN $cert]"
    }

    set i [expr $i + 1]
}

puts "Finished."

delete_CkPdf $pdf
delete_CkJsonObject $sigInfo
delete_CkCert $cert