(Tcl) RSA Signature with Certificate's Private Key from PFX

See more RSA Examples

Demonstrates how to use a certificate's private key from a PFX file to create an RSA signature.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Create an instance of a certificate store object, load a PFX file,
# locate the certificate we need, and use it for signing.
# (a PFX file may contain more than one certificate.)
set certStore [new_CkCertStore]

# The 1st argument is the filename, the 2nd arg is the 
# PFX file's password:
set success [CkCertStore_LoadPfxFile $certStore "chilkat.pfx" "test"]
if {$success != 1} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkCertStore $certStore
    exit
}

# cert is a CkCert
set cert [CkCertStore_FindCertBySubject $certStore "Chilkat Software, Inc."]
if {[CkCertStore_get_LastMethodSuccess $certStore] == 0} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkCertStore $certStore
    exit
}

# pkey is a CkPrivateKey
set pkey [CkCert_ExportPrivateKey $cert]
if {[CkCert_get_LastMethodSuccess $cert] == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert

    delete_CkCertStore $certStore
    exit
}

delete_CkCert $cert

# Get the private key in XML format:
set pkeyXml [CkPrivateKey_getXml $pkey]

set rsa [new_CkRsa]

# Import the private key into the RSA component:
set success [CkRsa_ImportPrivateKey $rsa $pkeyXml]
if {$success != 1} then {
    puts [CkRsa_lastErrorText $rsa]
    delete_CkPrivateKey $pkey

    delete_CkCertStore $certStore
    delete_CkRsa $rsa
    exit
}

# Encode the signature as a hex string
CkRsa_put_EncodingMode $rsa "hex"

set strData "This is the string to be signed."

# Sign the string using the sha-1 hash algorithm.
# Other valid choices are "sha-256", "md2" and "md5".
set hexSig [CkRsa_signStringENC $rsa $strData "sha-1"]

puts "$hexSig"

delete_CkPrivateKey $pkey

puts "Success!"

delete_CkCertStore $certStore
delete_CkRsa $rsa