Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Unicode C) Create and Verify an Opaque PKCS7/CMS SignatureDemonstrates how to create a PKCS7 opaque signature, and also how to verify an opaque signature. An opaque signature is different than a detached PKCS7 signature in that it contains the original data. Verifying an opaque signature retrieves the original content.
#include <C_CkCrypt2W.h> #include <C_CkCertW.h> #include <C_CkPrivateKeyW.h> void ChilkatSample(void) { HCkCrypt2W crypt; HCkCertW cert; BOOL success; HCkPrivateKeyW privKey; const wchar_t *password; const wchar_t *originalData; const wchar_t *opaqueSig; HCkCrypt2W vCrypt; const wchar_t *extractedData; // This example assumes the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. crypt = CkCrypt2W_Create(); // A certificate and private key is needed to create a signature. // Chilkat provides many different ways to load a certificate and private key, such // as from a PFX/.p12, Java keystore, JWK, Windows registry-based certificate stores, and other sources. // This example will load the certificate from a .crt and the private key from a .key file cert = CkCertW_Create(); // The LoadFromFile method will automatically detect the format and load it. success = CkCertW_LoadFromFile(cert,L"qa_data/certs/test_12345678a.cer"); if (success != TRUE) { wprintf(L"%s\n",CkCertW_lastErrorText(cert)); CkCrypt2W_Dispose(crypt); CkCertW_Dispose(cert); return; } // Our private key is in an encrypted PKCS8 format. // If you don't know the format of your key, but you do know it's encrypted, // and requires a password, then just call any of the Chilkat methods that load // a private key w/ a password argument. Chilkat will auto-detect the format // and load it correctly even if it's not the format indicated by the method name.. privKey = CkPrivateKeyW_Create(); password = L"12345678a"; success = CkPrivateKeyW_LoadPkcs8EncryptedFile(privKey,L"qa_data/certs/test_12345678a.key",password); if (success != TRUE) { wprintf(L"%s\n",CkPrivateKeyW_lastErrorText(privKey)); CkCrypt2W_Dispose(crypt); CkCertW_Dispose(cert); CkPrivateKeyW_Dispose(privKey); return; } // Set properties required for signing. // Tell it to use the cert and private key we've loaded. success = CkCrypt2W_SetSigningCert2(crypt,cert,privKey); if (success != TRUE) { wprintf(L"%s\n",CkCrypt2W_lastErrorText(crypt)); CkCrypt2W_Dispose(crypt); CkCertW_Dispose(cert); CkPrivateKeyW_Dispose(privKey); return; } // Indicate we want the opaque signature in base64 format: CkCrypt2W_putEncodingMode(crypt,L"base64"); // Sign the string using the "utf-8" byte representation: CkCrypt2W_putCharset(crypt,L"utf-8"); // Create the opaque signature: originalData = L"This is the string to be signed."; opaqueSig = CkCrypt2W_opaqueSignStringENC(crypt,originalData); if (CkCrypt2W_getLastMethodSuccess(crypt) != TRUE) { wprintf(L"%s\n",CkCrypt2W_lastErrorText(crypt)); CkCrypt2W_Dispose(crypt); CkCertW_Dispose(cert); CkPrivateKeyW_Dispose(privKey); return; } wprintf(L"%s\n",opaqueSig); // The output looks like this: // MIIPgQYJKoZIhvcNAQcCoIIPcjCCD24CAQExCzAJBgUrDgMCGgUAMC8GCSqGSIb3DQEHAaAiBCBUaGlzIGlzIHRoZSBzdHJpbmcgdG8gYmUgc... // ---------------------------------------------------------------------------------------------- // Now let's verify the signature and retrieve the original data. // We'll use a new Crypt2 object to keep things completely separate... vCrypt = CkCrypt2W_Create(); CkCrypt2W_putEncodingMode(vCrypt,L"base64"); CkCrypt2W_putCharset(vCrypt,L"utf-8"); extractedData = CkCrypt2W_opaqueVerifyStringENC(vCrypt,opaqueSig); if (CkCrypt2W_getLastMethodSuccess(vCrypt) != TRUE) { wprintf(L"%s\n",CkCrypt2W_lastErrorText(vCrypt)); CkCrypt2W_Dispose(crypt); CkCertW_Dispose(cert); CkPrivateKeyW_Dispose(privKey); CkCrypt2W_Dispose(vCrypt); return; } wprintf(L"The extracted data: %s\n",extractedData); // The output is: // The extracted data: This is the string to be signed. CkCrypt2W_Dispose(crypt); CkCertW_Dispose(cert); CkPrivateKeyW_Dispose(privKey); CkCrypt2W_Dispose(vCrypt); } |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.