(AutoIt) Sign JSON (or any Text) to Create a Detached PKCS7 Signature

Demonstrates how to sign JSON or any string using a certificate + private key from a .p12/.pfx to create a detached PKCS7 signature. (A detached signature is one that does not embed the original signed data.)

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

; This example assumes the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

$oCrypt = ObjCreate("Chilkat_9_5_0.Crypt2")

$oCert = ObjCreate("Chilkat_9_5_0.Cert")
Local $bSuccess = $oCert.LoadPfxFile("qa_data/pfx/cert_test123.pfx","test123")
If ($bSuccess <> True) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    Exit
EndIf

; Tell the crypt component to use this cert.
$bSuccess = $oCrypt.SetSigningCert($oCert)
If ($bSuccess <> True) Then
    ConsoleWrite($oCrypt.LastErrorText & @CRLF)
    Exit
EndIf

$oCrypt.HashAlgorithm = "sha256"

; By default, all the certs in the chain of authentication are included in the signature.
; If desired, we can choose to only include the signing certificate:
$oCrypt.IncludeCertChain = False

; Create the detached signature, which does NOT contain the original data.
; To create a PKCS7 signature that contains the original data, see CAdES Sign JSON
$oCrypt.Charset = "utf-8"
Local $oDetachedSig
Local $stringToSign = "{ ""abc"": 123}"
$oDetachedSig = $oCrypt.SignString($stringToSign)
If ($oCrypt.LastMethodSuccess = False) Then
    ConsoleWrite($oCrypt.LastErrorText & @CRLF)
    Exit
EndIf

; Verify the signature against the original data.
Local $bVerified = $oCrypt.VerifyString($stringToSign,$oDetachedSig)
If ($bVerified = False) Then
    ConsoleWrite($oCrypt.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite("Success!" & @CRLF)