(Delphi DLL) Base64url Encoding

Base64url encoding is identical to base64 encoding except it uses non-reserved URL characters (e.g. '–' is used instead of '+', and '_' is used instead of '/') and it omits the padding characters. Chilkat adds support for "base64url" in version 9.5.0.56. (To be released Q1 2016.) The list of binary encodings supported by Chilkat are documented at Chilkat Binary Encodings For any supported encoding, such as base64, hex, url, quoted-printable, modbase64, base64url, etc., the encoding name may be used in any "EncodingMode" property or in any method argument that specifies a binary encoding. (Please note that a "binary encoding" is different than a "character encoding". Character encodings supported by Chilkat are listed at Chilkat Character Encodings.) This example demonstrates using base64url encoding by setting the RSA object's EncodingMode property equal to "base64url".

Note: This example requires Chilkat v10.1.2 or greater.

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, PrivateKey, Rsa, Cert, CertStore, JsonObject;

...

procedure TForm1.Button1Click(Sender: TObject);
var
certStore: HCkCertStore;
success: Boolean;
jsonCN: HCkJsonObject;
cert: HCkCert;
pkey: HCkPrivateKey;
pkeyXml: PWideChar;
rsa: HCkRsa;
strData: PWideChar;
strSig: PWideChar;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Create an instance of a certificate store object, load a PFX file,
// locate the certificate we need, and use it for signing.
// (a PFX file may contain more than one certificate.)
certStore := CkCertStore_Create();

// The 1st argument is the filename, the 2nd arg is the 
// PFX file's password:
success := CkCertStore_LoadPfxFile(certStore,'chilkat.pfx','test');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCertStore__lastErrorText(certStore));
    Exit;
  end;

jsonCN := CkJsonObject_Create();
CkJsonObject_UpdateString(jsonCN,'CN','Chilkat Software, Inc.');
cert := CkCert_Create();
success := CkCertStore_FindCert(certStore,jsonCN,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCertStore__lastErrorText(certStore));
    Exit;
  end;

pkey := CkCert_ExportPrivateKey(cert);
if (CkCert_getLastMethodSuccess(cert) = False) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(cert));
    Exit;
  end;

// Get the private key in XML format:
pkeyXml := CkPrivateKey__getXml(pkey);

rsa := CkRsa_Create();

// Import the private key into the RSA component:
success := CkRsa_ImportPrivateKey(rsa,pkeyXml);
if (success <> True) then
  begin
    Memo1.Lines.Add(CkRsa__lastErrorText(rsa));
    CkPrivateKey_Dispose(pkey);
    Exit;
  end;

// This example will sign a string, and receive the signature
// as a base64url encoded string.  Therefore, set the encoding mode
// to "base64url":
CkRsa_putEncodingMode(rsa,'base64url');
CkRsa_putLittleEndian(rsa,False);

strData := 'This is the string to be signed.';
strSig := CkRsa__signStringENC(rsa,strData,'sha256');

CkPrivateKey_Dispose(pkey);

Memo1.Lines.Add(strSig);

CkCertStore_Dispose(certStore);
CkJsonObject_Dispose(jsonCN);
CkCert_Dispose(cert);
CkRsa_Dispose(rsa);

end;