Sign a JWS with a Certificate

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetSigningCert, which sets the certificate whose associated private key is used to create a signature.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

<?php

include("chilkat.php");

$success = false;

$jws = new CkJws();

//  Protected header specifying RSASSA-PKCS1-v1_5 with SHA-256 (RS256).
$header = new CkJsonObject();
$header->UpdateString('alg','RS256');
$success = $jws->SetProtectedHeader(0,$header);
if ($success == false) {
    print $jws->lastErrorText() . "\n";
    exit;
}

$bIncludeBom = false;
$success = $jws->SetPayload('This is the content to sign.','utf-8',$bIncludeBom);
if ($success == false) {
    print $jws->lastErrorText() . "\n";
    exit;
}

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
$pfxPassword = 'myPfxPassword';

//  Load a certificate that has an associated private key, then set it as the signing certificate for
//  signature 0.  The certificate's private key is used to create the signature.
$cert = new CkCert();
$success = $cert->LoadPfxFile('qa_data/signer.pfx',$pfxPassword);
if ($success == false) {
    print $cert->lastErrorText() . "\n";
    exit;
}

$success = $jws->SetSigningCert(0,$cert);
if ($success == false) {
    print $jws->lastErrorText() . "\n";
    exit;
}

$jwsCompact = $jws->createJws();
if ($jws->get_LastMethodSuccess() == false) {
    print $jws->lastErrorText() . "\n";
    exit;
}

print $jwsCompact . "\n";

?>