(Chilkat2-Python) Verify the Timestamp Server Token (if any) while Validating a CMS Signature

Demonstrates how to also validate the timestamp server token (if any) while validating a CMS signature.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS

import sys
import chilkat2

crypt = chilkat2.Crypt2()

# Tell Chilkat to also validate the timestamp token if a timestamp exists in the CMS message's unauthenticated attributes.
cmsOptions = chilkat2.JsonObject()
cmsOptions.UpdateBool("ValidateTimestampTokens",True)
crypt.CmsOptions = cmsOptions.Emit()

outputFile = "qa_output/original.xml"
inFile = "qa_data/p7m/fattura_signature.xml.p7m"

# Verify the signature and extract the contained file, which in this case is XML.
success = crypt.VerifyP7M(inFile,outputFile)
if (success == False):
    print(crypt.LastErrorText)
    sys.exit()

print("Signature validated.")