Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Unicode C) Create ICP-Brasil Compliant CMS SignatureDemonstrates how to create a .p7s signature that contains a data file, which in this case is a PDF. The .p7s will be compliant with the ICP-Brazil Digital Signature Standard. The .p7s file created by this example can be verified at ICP-Brasil Online Verifier Note: Requires Chilkat v9.5.0.92 or greater. For more information, see http://www.iti.gov.br/images/repositorio/consulta-publica/encerradas/DOC-ICP-15_-_Versao_2.2_VISAO_GERAL_SOBRE_ASSIN_DIG_NA_ICP-BRASIL_xx-xx-2015.pdf
#include <C_CkCrypt2W.h> #include <C_CkBinDataW.h> #include <C_CkCertW.h> #include <C_CkJsonObjectW.h> void ChilkatSample(void) { HCkCrypt2W crypt; const wchar_t *inFile; HCkBinDataW bd; BOOL success; HCkCertW cert; HCkJsonObjectW jsonSigningAttrs; // This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // ------------------------------------------------------------------------------------------------------ // Note: This example creates a CMS signature (.p7s) that contains the PDF. // It is different than signing a PDF. To sign a PDF where the resulting PDF contains the CMS signature, // see this example: Sign PDF for ICP-Brasil // ------------------------------------------------------------------------------------------------------ crypt = CkCrypt2W_Create(); // Any type of file can be signed. It doesn't have to be a PDF. inFile = L"qa_data/pdf/helloWorld.pdf"; bd = CkBinDataW_Create(); success = CkBinDataW_LoadFile(bd,inFile); if (success == FALSE) { wprintf(L"Failed to load %s\n",inFile); CkCrypt2W_Dispose(crypt); CkBinDataW_Dispose(bd); return; } // We'll be using a certificate w/ private key stored on a smartcard for signing. cert = CkCertW_Create(); // If the smartcard or token requires a PIN, we can set it here to avoid the dialog... CkCertW_putSmartCardPin(cert,L"000000"); success = CkCertW_LoadFromSmartcard(cert,L""); if (success != TRUE) { wprintf(L"%s\n",CkCertW_lastErrorText(cert)); CkCrypt2W_Dispose(crypt); CkBinDataW_Dispose(bd); CkCertW_Dispose(cert); return; } // Tell the crypt component to use this cert. success = CkCrypt2W_SetSigningCert(crypt,cert); if (success != TRUE) { wprintf(L"%s\n",CkCrypt2W_lastErrorText(crypt)); CkCrypt2W_Dispose(crypt); CkBinDataW_Dispose(bd); CkCertW_Dispose(cert); return; } // Set properties for signing... CkCrypt2W_putHashAlgorithm(crypt,L"sha256"); jsonSigningAttrs = CkJsonObjectW_Create(); CkJsonObjectW_UpdateInt(jsonSigningAttrs,L"contentType",1); CkJsonObjectW_UpdateInt(jsonSigningAttrs,L"signingTime",1); CkJsonObjectW_UpdateInt(jsonSigningAttrs,L"messageDigest",1); CkJsonObjectW_UpdateBool(jsonSigningAttrs,L"signingCertificateV2",TRUE); // Listed here are the currently existing profiles. (Chilkat will add additional ICP Brasil policy profiles in future versions as new ones are created.) // See https://www.gov.br/iti/pt-br/assuntos/repositorio/artefatos-de-assinatura-digital for more information. // // PA_AD_RA --> 2.16.76.1.7.1.5.1 // PA_AD_RA_v1_1 --> 2.16.76.1.7.1.5.1.1 // PA_AD_RA_v1_2 --> 2.16.76.1.7.1.5.1.2 // PA_AD_RA_v2_0 --> 2.16.76.1.7.1.5.2 // PA_AD_RA_v2_1 --> 2.16.76.1.7.1.5.2.1 // PA_AD_RA_v2_2 --> 2.16.76.1.7.1.5.2.2 // PA_AD_RA_v2_3 --> 2.16.76.1.7.1.5.2.3 // PA_AD_RA_v2_4 --> 2.16.76.1.7.1.5.2.4 // PA_AD_RB --> 2.16.76.1.7.1.1.1 // PA_AD_RB_v1_1 --> 2.16.76.1.7.1.1.1.1 // PA_AD_RB_v2_0 --> 2.16.76.1.7.1.1.2 // PA_AD_RB_v2_1 --> 2.16.76.1.7.1.1.2.1 // PA_AD_RB_v2_2 --> 2.16.76.1.7.1.1.2.2 // PA_AD_RB_v2_3 --> 2.16.76.1.7.1.1.2.3 // PA_AD_RC --> 2.16.76.1.7.1.4.1 // PA_AD_RC_v1_1 --> 2.16.76.1.7.1.4.1.1 // PA_AD_RC_v2_0 --> 2.16.76.1.7.1.4.2 // PA_AD_RC_v2_1 --> 2.16.76.1.7.1.4.2.1 // PA_AD_RC_v2_2 --> 2.16.76.1.7.1.4.2.2 // PA_AD_RC_v2_3 --> 2.16.76.1.7.1.4.2.3 // PA_AD_RT --> 2.16.76.1.7.1.2.1 // PA_AD_RT_v1_1 --> 2.16.76.1.7.1.2.1.1 // PA_AD_RT_v2_0 --> 2.16.76.1.7.1.2.2 // PA_AD_RT_v2_1 --> 2.16.76.1.7.1.2.2.1 // PA_AD_RT_v2_2 --> 2.16.76.1.7.1.2.2.2 // PA_AD_RT_v2_3 --> 2.16.76.1.7.1.2.2.3 // PA_AD_RV --> 2.16.76.1.7.1.3.1 // PA_AD_RV_v1_1 --> 2.16.76.1.7.1.3.1.1 // PA_AD_RV_v2_0 --> 2.16.76.1.7.1.3.2 // PA_AD_RV_v2_1 --> 2.16.76.1.7.1.3.2.1 // PA_AD_RV_v2_2 --> 2.16.76.1.7.1.3.2.2 // PA_AD_RV_v2_3 --> 2.16.76.1.7.1.3.2.3 // Set the policy OID and the profile name CkJsonObjectW_UpdateString(jsonSigningAttrs,L"policyId.id",L"2.16.76.1.7.1.1.2.3"); CkJsonObjectW_UpdateString(jsonSigningAttrs,L"policyId.profile",L"PA_AD_RB_v2_3"); CkCrypt2W_putSigningAttributes(crypt,CkJsonObjectW_emit(jsonSigningAttrs)); // The Brazil government validator requires the ASN.1 data to be in "constructed octets" form.. CkCrypt2W_putUncommonOptions(crypt,L"UseConstructedOctets,OmitAlgorithmIdNull"); CkCrypt2W_putIncludeCertChain(crypt,FALSE); // Sign. success = CkCrypt2W_OpaqueSignBd(crypt,bd); if (success == FALSE) { wprintf(L"%s\n",CkCrypt2W_lastErrorText(crypt)); CkCrypt2W_Dispose(crypt); CkBinDataW_Dispose(bd); CkCertW_Dispose(cert); CkJsonObjectW_Dispose(jsonSigningAttrs); return; } // Save to a .p7s success = CkBinDataW_WriteFile(bd,L"qa_output/helloWorld.pdf.p7s"); wprintf(L"Success\n"); CkCrypt2W_Dispose(crypt); CkBinDataW_Dispose(bd); CkCertW_Dispose(cert); CkJsonObjectW_Dispose(jsonSigningAttrs); } |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.