Visual FoxPro

Authenticode Sign using Smartcard or USB Token

See more Code Signing Examples

Demonstrates how to Authenticode sign an EXE or DLL using a smartcard or USB token, such as a Yubikey.

Note: Chilkat's code signing class was added in v9.5.0.97

Visual FoxPro

LOCAL lnSuccess
LOCAL loJson
LOCAL loCert
LOCAL lcExePath
LOCAL loSigner

lnSuccess = 0

* This example requires the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

* First create the following JSON to specify that SHA256 is to be used,
* and provide timestamp server information.

* {
*   "hashAlg": "sha256",
*   "timestampToken": {
*     "enabled": true,
*     "tsaUrl": "http://timestamp.digicert.com",
*     "requestTsaCert": true,
*     "hashAlg": "sha256"
*   }
* }

loJson = CreateObject('Chilkat.JsonObject')
loJson.UpdateString("hashAlg","sha256")
loJson.UpdateBool("timestampToken.enabled",1)
loJson.UpdateString("timestampToken.tsaUrl","http://timestamp.digicert.com")
loJson.UpdateBool("timestampToken.requestTsaCert",1)
loJson.UpdateString("timestampToken.hashAlg","sha256")

* The only difference in signing with a smartcard or USB token
* is that the cert is loaded from a smartcard or USB token, instead of a PFX or from elsewhere
* such as from the Windows certificate store.
loCert = CreateObject('Chilkat.Cert')

* Yubico YubiKey OTP+FIDO+CCID 0, default PIN = 123456
loCert.SmartCardPin = "123456"

* Assuming you have the Yubikey inserted into the USB on the computer...
* and there is only 1 signing certificate on the Yubikey, then just load from
* the "smartcard".  (assuming you don't have additional smartcards or USB tokens plugged in)
lnSuccess = loCert.LoadFromSmartcard("")
IF (lnSuccess = 0) THEN
    ? loCert.LastErrorText
    RELEASE loJson
    RELEASE loCert
    CANCEL
ENDIF

* If the smartcard/token has several possible certificates that can be used for signing,
* then see the online documentation for the LoadFromSmartcard method,
* and also see the online documentation and examples for Chilkat Pkcs11 and ScMinidriver.
* There are many possible ways to load a Chilkat certificate object with a cert (and associated private key)
* from a variety of sources.  The only coding difference for any signing function in Chilkat,
* whether it be a PDF, XmlDSig, CMS, etc. is in how the cert is loaded.

* You can sign .exe or .dll files.
lcExePath = "C:/someOtherDir/HelloWorld.exe"

loSigner = CreateObject('Chilkat.CodeSign')

* If successful, the following call will apply the signature to the EXE (or DLL).
lnSuccess = loSigner.AddSignature(lcExePath,loCert,loJson)
IF (lnSuccess = 0) THEN
    ? loSigner.LastErrorText
    RELEASE loJson
    RELEASE loCert
    RELEASE loSigner
    CANCEL
ENDIF

? "Successfully applied the Authenticode signature."

RELEASE loJson
RELEASE loCert
RELEASE loSigner