Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Unicode C) PKCS11 Sign PDF using Certificate and Private Key on Smart Card / USB TokenSee more PKCS11 ExamplesSample code showing how to use PKCS11 to sign a PDF with a certificate and private key stored on a smart card or USB token. Note: This example requires Chilkat v9.5.0.96 or later.
#include <C_CkPkcs11W.h> #include <C_CkCertW.h> #include <C_CkPdfW.h> #include <C_CkJsonObjectW.h> void ChilkatSample(void) { HCkPkcs11W pkcs11; const wchar_t *pin; int userType; BOOL success; HCkCertW cert; HCkPdfW pdf; HCkJsonObjectW json; int i; // This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems. pkcs11 = CkPkcs11W_Create(); CkPkcs11W_putSharedLibPath(pkcs11,L"C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll"); pin = L"0000"; userType = 1; // Establish a PKCS11 logged-on session using the driver (.so, .dylib, or .dll) as specified in the SharedLibPath above. success = CkPkcs11W_QuickSession(pkcs11,userType,pin); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); CkPkcs11W_Dispose(pkcs11); return; } // Get the certificate (on the smart card) that has a private key. // There are other ways to locate a certificate on the HSM. // This example assumes there is a single certificate w/ private key. cert = CkCertW_Create(); success = CkPkcs11W_FindCert(pkcs11,L"privateKey",L"",cert); if (success == TRUE) { wprintf(L"Cert with private key: %s\n",CkCertW_subjectCN(cert)); } else { wprintf(L"No certificates having a private key were found.\n"); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); return; } // -------------------------------------------------------------------------- // At this point, we have the cert to be used for signing. // Our PDF signing code is the same as for a cert obtained from any other source.. pdf = CkPdfW_Create(); // Load a PDF to be signed. success = CkPdfW_LoadFile(pdf,L"qa_data/pdf/hello.pdf"); if (success == FALSE) { wprintf(L"%s\n",CkPdfW_lastErrorText(pdf)); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkPdfW_Dispose(pdf); return; } json = CkJsonObjectW_Create(); CkJsonObjectW_UpdateInt(json,L"page",1); CkJsonObjectW_UpdateString(json,L"appearance.y",L"top"); CkJsonObjectW_UpdateString(json,L"appearance.x",L"left"); CkJsonObjectW_UpdateString(json,L"appearance.fontScale",L"10.0"); CkJsonObjectW_UpdateString(json,L"signingAlgorithm",L"pss"); CkJsonObjectW_UpdateString(json,L"hashAlgorithm",L"sha256"); i = 0; CkJsonObjectW_putI(json,i); CkJsonObjectW_UpdateString(json,L"appearance.text[i]",L"Digitaly signed by: Xyz Widgets, Inc."); i = i + 1; CkJsonObjectW_putI(json,i); CkJsonObjectW_UpdateString(json,L"appearance.text[i]",L"current_dt"); i = i + 1; CkJsonObjectW_putI(json,i); CkJsonObjectW_UpdateString(json,L"appearance.text[i]",L"blah blah blah"); // The certificate is internally linked to the Pkcs11 object, which is currently in an authenticated session. success = CkPdfW_SetSigningCert(pdf,cert); success = CkPdfW_SignPdf(pdf,json,L"qa_output/out.pdf"); if (success == FALSE) { wprintf(L"%s\n",CkPdfW_lastErrorText(pdf)); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkPdfW_Dispose(pdf); CkJsonObjectW_Dispose(json); return; } // -------------------------------------------------------------------------- // Revert to an unauthenticated session by calling Logout. success = CkPkcs11W_Logout(pkcs11); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkPdfW_Dispose(pdf); CkJsonObjectW_Dispose(json); return; } // When finished, close the session. // It is important to close the session (memory leaks will occur if the session is not properly closed). success = CkPkcs11W_CloseSession(pkcs11); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkPdfW_Dispose(pdf); CkJsonObjectW_Dispose(json); return; } wprintf(L"Success.\n"); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); CkPdfW_Dispose(pdf); CkJsonObjectW_Dispose(json); } |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.