(VB.NET UWP/WinRT) Create .p7s Compliant with ICP-Brazil Digital Signature Standard

Demonstrates how to create a .p7s signature that contains a data file, which in this case is a PDF. The .p7s will be compliant with the ICP-Brazil Digital Signature Standard.

Important: This example requires Chilkat v9.5.0.83 or later.

Chilkat Universal Windows Platform (UWP) / WinRT Downloads Chilkat for the Universal Windows Platform (UWP)

' This example requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

Dim crypt As New Chilkat.Crypt2

' Any type of file can be signed.  It doesn't have to be a PDF.
Dim inFile As String = "qa_data/pdf/helloWorld.pdf"

Dim bd As New Chilkat.BinData
Dim success As Boolean = bd.LoadFile(inFile)
If (success = False) Then
    Debug.WriteLine("Failed to load " & inFile)
    Exit Sub
End If


' Get the certificate we'll be using to sign.
Dim cert As New Chilkat.Cert
success = cert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123")
If (success = False) Then
    Debug.WriteLine(cert.LastErrorText)
    Exit Sub
End If


success = crypt.SetSigningCert(cert)
If (success = False) Then
    Debug.WriteLine(crypt.LastErrorText)
    Exit Sub
End If


' Set properties for signing...
crypt.HashAlgorithm = "sha256"

Dim jsonSigningAttrs As New Chilkat.JsonObject
jsonSigningAttrs.UpdateInt("contentType",1)
jsonSigningAttrs.UpdateInt("signingTime",1)
jsonSigningAttrs.UpdateInt("messageDigest",1)
jsonSigningAttrs.UpdateInt("signingCertificateV2",1)

jsonSigningAttrs.UpdateString("policyId.id","2.16.76.1.7.1.1.2.3")
jsonSigningAttrs.UpdateString("policyId.hash","sW6Iu/dzIqZ5lbeQeHeO09DqfIhYe29tUYtxXo92o9U=")
jsonSigningAttrs.UpdateString("policyId.uri","http://politicas.icpbrasil.gov.br/PA_AD_RB_v2_3.der")
jsonSigningAttrs.UpdateString("policyId.hashAlg","SHA256")

' Don't forget to change "helloWorld.pdf" to the name of the file you desire. (it can be any type of file, it doesn't have to be a PDF)
jsonSigningAttrs.UpdateString("contentHint.text","Content-Type: application/octet-stream" & vbCrLf & "Content-Disposition: attachment;filename=""helloWorld.pdf""")
jsonSigningAttrs.UpdateString("contentHint.oid","1.2.840.113549.1.7.1")

crypt.SigningAttributes = jsonSigningAttrs.Emit()

' The Brazil government validator requires the ASN.1 data to be in "constructed octets" form..
crypt.UncommonOptions = "UseConstructedOctets,OmitAlgorithmIdNull"
crypt.IncludeCertChain = False

' Sign. 
success = Await crypt.OpaqueSignBdAsync(bd)
If (success = False) Then
    Debug.WriteLine(crypt.LastErrorText)
    Exit Sub
End If


' Save to a .p7s
success = bd.WriteFile("qa_output/helloWorld.pdf.p7s")

Debug.WriteLine("Success")