Lua Requires Chilkat v9.5.0.97+

Authenticode Sign using Smartcard or USB Token

See more Code Signing Examples

Demonstrates how to Authenticode sign an EXE or DLL using a smartcard or USB token, such as a Yubikey. Lua

local chilkat = require("chilkat")

-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

-- First create the following JSON to specify that SHA256 is to be used,
-- and provide timestamp server information.

-- {
--   "hashAlg": "sha256",
--   "timestampToken": {
--     "enabled": true,
--     "tsaUrl": "http://timestamp.digicert.com",
--     "requestTsaCert": true,
--     "hashAlg": "sha256"
--   }
-- }

local json = chilkat.JsonObject.new()
json:update_string("hashAlg", "sha256")
json:update_bool("timestampToken.enabled", true)
json:update_string("timestampToken.tsaUrl", "http://timestamp.digicert.com")
json:update_bool("timestampToken.requestTsaCert", true)
json:update_string("timestampToken.hashAlg", "sha256")

-- The only difference in signing with a smartcard or USB token
-- is that the cert is loaded from a smartcard or USB token, instead of a PFX or from elsewhere
-- such as from the Windows certificate store.
local cert = chilkat.Cert.new()

-- Yubico YubiKey OTP+FIDO+CCID 0, default PIN = 123456
cert.smart_card_pin = "123456"

-- Assuming you have the Yubikey inserted into the USB on the computer...
-- and there is only 1 signing certificate on the Yubikey, then just load from
-- the "smartcard".  (assuming you don't have additional smartcards or USB tokens plugged in)
local success = cert:load_from_smartcard("")
if not success then
    print(cert.last_error_text)
    return
end

-- If the smartcard/token has several possible certificates that can be used for signing,
-- then see the online documentation for the LoadFromSmartcard method,
-- and also see the online documentation and examples for Chilkat Pkcs11 and ScMinidriver.
-- There are many possible ways to load a Chilkat certificate object with a cert (and associated private key)
-- from a variety of sources.  The only coding difference for any signing function in Chilkat,
-- whether it be a PDF, XmlDSig, CMS, etc. is in how the cert is loaded.

-- You can sign .exe or .dll files.
local exePath = "C:/someOtherDir/HelloWorld.exe"

local signer = chilkat.CodeSign.new()

-- If successful, the following call will apply the signature to the EXE (or DLL).
success = signer:add_signature(exePath, cert, json)
if not success then
    print(signer.last_error_text)
    return
end

print("Successfully applied the Authenticode signature.")