C++ Requires Chilkat v10.1.2+

RSA Sign using Private Key of Certificate Type A3 (smart card / token)

Demonstrates RSA signing data using the private key of a certificate type A3 (smart card, token).

Note: This is a Windows-only example.

C++

#include <CkCertStore.h>
#include <CkJsonObject.h>
#include <CkCert.h>
#include <CkRsa.h>
#include <CkByteData.h>
#include <CkFileAccess.h>

void ChilkatSample(void)
    {
    bool success = false;

    //  First get the A3 certificate that was installed on the Windows system.
    CkCertStore certStore;

    const char *thumbprint = "12c1dd8015f3f03f7b1fa619dc24e2493ca8b4b2";

    //  This is specific to Windows because it is opening the Windows Current-User certificate store.
    bool bReadOnly = true;
    success = certStore.OpenCurrentUserStore(bReadOnly);
    if (success != true) {
        std::cout << certStore.lastErrorText() << "\r\n";
        return;
    }

    //  Find the certificate with the desired thumbprint
    //  (There are many ways to locate a certificate.  This example chooses to find by thumbprint.)
    CkJsonObject json;
    json.UpdateString("thumbprint",thumbprint);

    CkCert cert;
    success = certStore.FindCert(json,cert);
    if (success == false) {
        std::cout << "Failed to find the certificate." << "\r\n";
        return;
    }

    std::cout << "Found: " << cert.subjectCN() << "\r\n";

    CkRsa rsa;

    //  Provide the cert's private key
    bool bUsePrivateKey = true;
    success = rsa.SetX509Cert(cert,bUsePrivateKey);
    if (success != true) {
        std::cout << rsa.lastErrorText() << "\r\n";
        return;
    }

    //  Now we're ready to sign..
    CkByteData dataToSign;
    CkByteData sigData;

    //  Get bytes to be signed..
    CkFileAccess fac;
    success = fac.ReadEntireFile("in.dat",dataToSign);

    success = rsa.SignBytes(dataToSign,"SHA-256",sigData);
    if (success != true) {
        std::cout << rsa.lastErrorText() << "\r\n";
        return;
    }

    std::cout << "Signature created." << "\r\n";
    }