Pascal (Lazarus/Delphi)

Create P7M Using Pre-Installed Windows Certificate

See more Digital Signatures Examples

Demonstrates how to sign a file creating a .p7m file as output. The .p7m contains the signed contents of the original file. It can be verified and restored by calling VerifyP7M.

This example is for Windows only. It automatically searches and locates the desired certificate in the Current User or Local Machine certificate stores. (The certificate must have been pre-installed on the Windows machine, and it must have the private key available. The private key can be located on a USB Authentication Token / Smart Card. If so, then Chilkat *should* automatically use the private key located on the device.)

Pascal (Lazarus/Delphi)

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.Cert,
  Chilkat.Crypt2;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  crypt: TCrypt2;
  certSubjectCN: string;
  cert: TCert;
  inFile: string;
  outputFile: string;

begin
  success := False;

  //  This example assumes the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  crypt := TCrypt2.Create;

  certSubjectCN := 'Matt';

  cert := TCert.Create;

  //  Locate and load the certificate by the common name (subject CN).
  //  This searches the Windows registry-based Current User and Local Machine
  //  certificate stores for the certificate.  
  success := cert.LoadByCommonName(certSubjectCN);
  if (success <> True) then
    begin
      WriteLn('Failed to find certificate.');
      Exit;
    end;

  //  Make sure a private key is available.
  if (cert.HasPrivateKey() <> True) then
    begin
      WriteLn('This certificate does not have a private key located in the Windows protected store, or on a USB device.');
      Exit;
    end;

  //  Specify the cert (and implicitly the private key) to be used for signing.
  success := crypt.SetSigningCert(cert);

  //  -----------------------------------------------------------------------------------------
  //  Also see Chilkat's online tool to examine a .p7m and generate code to duplicate the .p7m
  //  -----------------------------------------------------------------------------------------

  //  We can sign any type of file, creating a .p7m as output:
  inFile := 'qa_data/pdf/fishing.pdf';
  outputFile := 'qa_output/fishing.pdf.p7m';
  success := crypt.CreateP7M(inFile,outputFile);
  if (success <> True) then
    begin
      WriteLn(crypt.LastErrorText);
      Exit;
    end;

  //  Verify and restore the original file:
  success := crypt.SetVerifyCert(cert);

  inFile := outputFile;
  outputFile := 'qa_output/restored.pdf';

  success := crypt.VerifyP7M(inFile,outputFile);
  if (success = False) then
    begin
      WriteLn(crypt.LastErrorText);
      Exit;
    end;

  WriteLn('Success!');


  crypt.Free;
  cert.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.