MIME S/MIME Signing Algorithm Properties

See more MIME Examples

Demonstrates the properties that control S/MIME signing: SigningAlg (the RSA signature scheme, PKCS1-V1_5 or RSASSA-PSS), SigningHashAlg (the message-digest algorithm), Micalg and Protocol (the micalg and protocol parameters of a multipart/signed Content-Type), and UseXPkcs7 (whether historical x-pkcs7 media-type names are used). The properties are configured before creating a detached signature.

llSuccess = .F.

loMime = createobject("CkMime")
llSuccess = loMime.SetBodyFromPlainText("This message will be signed.")
if (llSuccess = .F.) then
    ? loMime.LastErrorText
    release loMime
    return
endif

//  SigningAlg is the RSA signature scheme.  The default is PKCS1-V1_5; set RSASSA-PSS (or pss) for
//  RSASSA-PSS.
loMime.SigningAlg = "PKCS1-V1_5"

//  SigningHashAlg is the message-digest algorithm.  The default is sha256.
loMime.SigningHashAlg = "sha256"

//  Micalg and Protocol are the micalg and protocol parameters written into a multipart/signed
//  Content-Type header field.  They are normally set automatically, but can be controlled here.
loMime.Micalg = "sha-256"
loMime.Protocol = "application/pkcs7-signature"

//  UseXPkcs7 controls whether newly created S/MIME media types use the historical x-pkcs7 names.
loMime.UseXPkcs7 = .F.

//  Load a signing certificate (with private key access) from a PFX.  The PFX password should come
//  from a secure source rather than being hard-coded.
lcPfxPassword = "myPfxPassword"
loCert = createobject("CkCert")
llSuccess = loCert.LoadPfxFile("qa_data/signer.pfx",lcPfxPassword)
if (llSuccess = .F.) then
    ? loCert.LastErrorText
    release loMime
    release loCert
    return
endif

//  Create the detached signature using the algorithms configured above.
llSuccess = loMime.AddDetachedSignature(loCert)
if (llSuccess = .F.) then
    ? loMime.LastErrorText
    release loMime
    release loCert
    return
endif

? "Signed with SigningAlg=" + loMime.SigningAlg + " SigningHashAlg=" + loMime.SigningHashAlg


release loMime
release loCert