Pascal (Lazarus/Delphi)

CAdES BES Attached (Opaque) Signature

See more Encryption Examples

Demonstrates how to create a CAdES BES attached signature file (.p7m). This is a PKCS7 signature format (known as an opaque, or "attached" signature) where the file data is embedded within the signature file. The signature verification both verifies the signature and extracts the original data.

(A "detached" signature is where the original data is NOT included within the PKCS7 signature format.)

Pascal (Lazarus/Delphi)

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.Cert,
  Chilkat.Crypt2;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  crypt: TCrypt2;
  pfxPath: string;
  pfxPassword: string;
  cert: TCert;
  inFile: string;
  sigFile: string;
  extractedToFilePath: string;

begin
  success := False;

  //  This example assumes the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  crypt := TCrypt2.Create;

  //  Use a digital certificate and private key from a PFX file (.pfx or .p12).
  pfxPath := 'qa_data/pfx/myCertAndPrivateKey.p12';
  pfxPassword := 'password';

  cert := TCert.Create;
  success := cert.LoadPfxFile(pfxPath,pfxPassword);
  if (success <> True) then
    begin
      WriteLn(cert.LastErrorText);
      Exit;
    end;

  //  Tell the crypt component to use this cert.
  success := crypt.SetSigningCert(cert);
  if (success <> True) then
    begin
      WriteLn(crypt.LastErrorText);
      Exit;
    end;

  //  The CadesEnabled property applies to all methods that create PKCS7 signatures. 
  //  To create a CAdES-BES signature, set this property equal to true. 
  crypt.CadesEnabled := True;

  //  To sign with SHA1, set the HashAlgorithm property to "sha1"
  crypt.HashAlgorithm := 'sha1';

  //  To sign with SHA256, set the HashAlgorithm property to "SHA256".
  crypt.HashAlgorithm := 'sha256';

  //  Other hash algorithm choices are "md5", "md2", "sha384", and "sha512"

  //  We can sign any type of file, creating a .p7m as output.
  //  The .p7m contains the signature and also embeds the data of the file that is signed.
  inFile := 'qa_data/json/sample.json';
  sigFile := 'qa_output/signature.p7m';

  //  -----------------------------------------------------------------------------------------
  //  Also see Chilkat's online tool to examine a .p7m and generate code to duplicate the .p7m
  //  -----------------------------------------------------------------------------------------

  //  Create the CAdES-BES attached signature, which contains the original data.
  success := crypt.CreateP7M(inFile,sigFile);
  if (success = False) then
    begin
      WriteLn(crypt.LastErrorText);
      Exit;
    end;

  //  Verify the .p7m file and extract the original file from the .p7m. 
  extractedToFilePath := 'qa_output/sample.json';
  success := crypt.VerifyP7M(sigFile,extractedToFilePath);
  if (success = False) then
    begin
      WriteLn(crypt.LastErrorText);
      Exit;
    end;

  WriteLn('Success!');


  crypt.Free;
  cert.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.