Sign a Hash to create PKCS7 Output

Uses a digital certificate to sign a SHA-1 hash to produce PKCS7 output.

 Chilkat Python Module Downloads for Windows, Linux, and MAC OS X

import sys
import chilkat

crypt = chilkat.CkCrypt2()

#  Any string argument automatically begins the 30-day trial.
success = crypt.UnlockComponent("30-day trial")
if (success != True):
    print crypt.lastErrorText()
    sys.exit()

#  First, create an SHA-1 hash to be signed:
toBeHashed = "This is a test"

hash = chilkat.CkByteData()
crypt.put_HashAlgorithm("sha1")

success = crypt.HashString(toBeHashed,hash)
if (success != True):
    print crypt.lastErrorText()
    sys.exit()

#  Locate a digital certificate from the registry-based
#  Current User certificate store.
ccs = chilkat.CkCreateCS()

# certStore is a CkCertStore
certStore = ccs.OpenCurrentUserStore()

# cert is a CkCert
cert = certStore.FindCertBySubjectCN("Chilkat Software, Inc.")
if (cert == None ):
    print cert.lastErrorText()

    sys.exit()

#  Tell the encryption component to use this cert.
crypt.SetSigningCert(cert)

#  Tell the encryption component to use public-key encryption:
crypt.put_CryptAlgorithm("pki")

pkcs7 = chilkat.CkByteData()

success = crypt.SignBytes(hash,pkcs7)
if (success == False):
    print crypt.lastErrorText()

    sys.exit()

#  Save the PKCS7 signature to a file.
success = pkcs7.saveFile("out_pkcs7.p7s")
if (success == False):
    print "Failed to save output file."
else:
    print "Success."