Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Unicode C) Sign String to create a CAdES-T SignatureThis example will sign a string to create a CAdEST-T signature. Note: This example requires Chilkat v9.5.0.78 or greater.
#include <C_CkCrypt2W.h> #include <C_CkCertW.h> #include <C_CkJsonObjectW.h> #include <C_CkBinDataW.h> void ChilkatSample(void) { HCkCrypt2W crypt; HCkCertW cert; BOOL success; HCkJsonObjectW attrs; const wchar_t *strToSign; HCkBinDataW bd; // This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. crypt = CkCrypt2W_Create(); // This example will use the certificate + private key currently inserted into a smartcard reader. cert = CkCertW_Create(); // If we wish to provide the smartcard PIN (otherwise the user will be prompted by the operating system). CkCertW_putSmartCardPin(cert,L"000000"); success = CkCertW_LoadFromSmartcard(cert,L""); if (success != TRUE) { wprintf(L"%s\n",CkCertW_lastErrorText(cert)); CkCrypt2W_Dispose(crypt); CkCertW_Dispose(cert); return; } // Note: It is also possible to use certs from .pfx/.p12, .pem, or other sources such as // pre-installed Windows certificates. success = CkCrypt2W_SetSigningCert(crypt,cert); // Use SHA-256 rather than the default of SHA-1 CkCrypt2W_putHashAlgorithm(crypt,L"sha256"); // Create JSON that tells Chilkat what signing attributes to include: attrs = CkJsonObjectW_Create(); CkJsonObjectW_UpdateBool(attrs,L"contentType",TRUE); CkJsonObjectW_UpdateBool(attrs,L"signingTime",TRUE); CkJsonObjectW_UpdateBool(attrs,L"messageDigest",TRUE); CkJsonObjectW_UpdateBool(attrs,L"signingCertificateV2",TRUE); // A CAdES-T signature is one that includes a timestampToken created by an online TSA (time stamping authority). // We must include the TSA's URL, as well as a few options to indicate what is desired. // Except for the TSA URL, the options shown here are typically what you would need. CkJsonObjectW_UpdateBool(attrs,L"timestampToken.enabled",TRUE); CkJsonObjectW_UpdateString(attrs,L"timestampToken.tsaUrl",L"https://freetsa.org/tsr"); CkJsonObjectW_UpdateBool(attrs,L"timestampToken.addNonce",FALSE); CkJsonObjectW_UpdateBool(attrs,L"timestampToken.requestTsaCert",TRUE); CkJsonObjectW_UpdateString(attrs,L"timestampToken.hashAlg",L"sha256"); CkCrypt2W_putSigningAttributes(crypt,CkJsonObjectW_emit(attrs)); strToSign = L"THIS IS MY ID"; bd = CkBinDataW_Create(); CkBinDataW_AppendString(bd,strToSign,L"utf-8"); // This creates the CAdES-T signature. During the signature creation, it // communicates with the TSA to get a timestampToken. // The contents of bd are signed and replaced with the CAdES-T signature (which embeds the original content). success = CkCrypt2W_OpaqueSignBd(crypt,bd); if (success != TRUE) { wprintf(L"%s\n",CkCrypt2W_lastErrorText(crypt)); CkCrypt2W_Dispose(crypt); CkCertW_Dispose(cert); CkJsonObjectW_Dispose(attrs); CkBinDataW_Dispose(bd); return; } // Get the signature in base64 format: wprintf(L"%s\n",CkBinDataW_getEncoded(bd,L"base64_mime")); // Or save the signature to a file. CkBinDataW_WriteFile(bd,L"qa_output/cades-t_sample.p7m"); wprintf(L"Success.\n"); CkCrypt2W_Dispose(crypt); CkCertW_Dispose(cert); CkJsonObjectW_Dispose(attrs); CkBinDataW_Dispose(bd); } |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.