Sign a JWS with a Certificate

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetSigningCert, which sets the certificate whose associated private key is used to create a signature.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

#import <CkoJws.h>
#import <CkoJsonObject.h>
#import <NSString.h>
#import <CkoCert.h>

BOOL success = NO;

CkoJws *jws = [[CkoJws alloc] init];

//  Protected header specifying RSASSA-PKCS1-v1_5 with SHA-256 (RS256).
CkoJsonObject *header = [[CkoJsonObject alloc] init];
[header UpdateString: @"alg" value: @"RS256"];
success = [jws SetProtectedHeader: [NSNumber numberWithInt: 0] json: header];
if (success == NO) {
    NSLog(@"%@",jws.LastErrorText);
    return;
}

BOOL bIncludeBom = NO;
success = [jws SetPayload: @"This is the content to sign." charset: @"utf-8" includeBom: bIncludeBom];
if (success == NO) {
    NSLog(@"%@",jws.LastErrorText);
    return;
}

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
NSString *pfxPassword = @"myPfxPassword";

//  Load a certificate that has an associated private key, then set it as the signing certificate for
//  signature 0.  The certificate's private key is used to create the signature.
CkoCert *cert = [[CkoCert alloc] init];
success = [cert LoadPfxFile: @"qa_data/signer.pfx" password: pfxPassword];
if (success == NO) {
    NSLog(@"%@",cert.LastErrorText);
    return;
}

success = [jws SetSigningCert: [NSNumber numberWithInt: 0] cert: cert];
if (success == NO) {
    NSLog(@"%@",jws.LastErrorText);
    return;
}

NSString *jwsCompact = [jws CreateJws];
if (jws.LastMethodSuccess == NO) {
    NSLog(@"%@",jws.LastErrorText);
    return;
}

NSLog(@"%@",jwsCompact);