(Unicode C) Extract PKCS7 Signature Digest

Demonstrates how to extract a signature digest from a PKCS7 signature.

Chilkat C/C++ Library Downloads
MS Visual C/C++ Linux/CentOS C/C++ Alpine Linux C/C++ MAC OS X C/C++	armhf/aarch64 C/C++ C++ Builder iOS C/C++ Android C/C++	Solaris C/C++ MinGW C/C++

#include <C_CkCrypt2W.h>
#include <C_CkBinDataW.h>
#include <C_CkStringBuilderW.h>

void ChilkatSample(void)
    {
    HCkCrypt2W crypt;
    const wchar_t *p7mFile;
    const wchar_t *outPath;
    BOOL verified;
    HCkBinDataW pkcs7Data;
    HCkStringBuilderW sbBase64;
    const wchar_t *hexStr;
    BOOL bHaveBase64;
    int i;
    const wchar_t *digest;

    // This example requires the Chilkat Crypt API to have been previously unlocked.
    // See Unlock Chilkat Crypt for sample code.

    crypt = CkCrypt2W_Create();

    p7mFile = L"qa_data/p7m/test.pdf.p7m";
    outPath = L"qa_output/test.pdf";

    // First let's see if this .p7m signature can be verified, and the original file extracted.
    verified = CkCrypt2W_VerifyP7M(crypt,p7mFile,outPath);
    if (verified != TRUE) {
        wprintf(L"%s\n",CkCrypt2W_lastErrorText(crypt));
        CkCrypt2W_Dispose(crypt);
        return;
    }

    // How many signers?
    // (The NumSignerCerts property is set whenever a signature is verified.)
    wprintf(L"Num Signers: %d\n",CkCrypt2W_getNumSignerCerts(crypt));

    // Load the .p7m into memory...
    pkcs7Data = CkBinDataW_Create();
    CkBinDataW_LoadFile(pkcs7Data,p7mFile);

    // Check to see if this .p7m contains the binary bytes, or if it's
    // already base64 encoded.  Get the 1st two bytes.  If the first two 
    // bytes are the us-ascii values "MI", then we have base64.
    sbBase64 = CkStringBuilderW_Create();
    hexStr = CkBinDataW_getEncodedChunk(pkcs7Data,0,2,L"hex");
    CkStringBuilderW_Append(sbBase64,hexStr);

    bHaveBase64 = FALSE;
    if (CkStringBuilderW_ContentsEqual(sbBase64,L"4D49",TRUE) == TRUE) {
        bHaveBase64 = TRUE;
        CkStringBuilderW_Clear(sbBase64);
        CkStringBuilderW_AppendBd(sbBase64,pkcs7Data,L"utf-8",0,0);
    }

    // Get each signer's signature digest.
    CkCrypt2W_putEncodingMode(crypt,L"base64");
    i = 0;

    while (i < CkCrypt2W_getNumSignerCerts(crypt)) {
        if (bHaveBase64) {
            digest = CkCrypt2W_pkcs7ExtractDigest(crypt,i,CkStringBuilderW_getAsString(sbBase64));
        }
        else {
            digest = CkCrypt2W_pkcs7ExtractDigest(crypt,i,CkBinDataW_getEncoded(pkcs7Data,L"base64"));
        }

        if (CkCrypt2W_getLastMethodSuccess(crypt) != TRUE) {
            wprintf(L"%s\n",CkCrypt2W_lastErrorText(crypt));
            CkCrypt2W_Dispose(crypt);
            CkBinDataW_Dispose(pkcs7Data);
            CkStringBuilderW_Dispose(sbBase64);
            return;
        }

        wprintf(L"Signer %d digest = %s\n",i + 1,digest);
        i = i + 1;
    }



    CkCrypt2W_Dispose(crypt);
    CkBinDataW_Dispose(pkcs7Data);
    CkStringBuilderW_Dispose(sbBase64);

    }