(PowerBuilder) Verify Opaque Signature and Retrieve Signing Certificates

Demonstrates how to verify a PCKS7 opaque digital signature (signed data), extract the original file/data, and then extract the certificate(s) that were used to sign.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
integer li_Success
oleobject loo_Crypt
oleobject loo_BinData
oleobject loo_Cert
oleobject loo_CertChain
integer li_NumCerts
integer i

li_Success = 0

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loo_Crypt = create oleobject
li_rc = loo_Crypt.ConnectToNewObject("Chilkat.Crypt2")
if li_rc < 0 then
    destroy loo_Crypt
    MessageBox("Error","Connecting to COM object failed")
    return
end if

// Verify a PKCS7 signed-data (opaque signature) file and extract the original content to a file.
li_Success = loo_Crypt.VerifyP7M("qa_data/p7m/opaqueSig.p7","qa_output/originalData.dat")
if li_Success = 0 then
    Write-Debug loo_Crypt.LastErrorText
    destroy loo_Crypt
    return
end if

// Alternatively, we can do it in memory...
loo_BinData = create oleobject
li_rc = loo_BinData.ConnectToNewObject("Chilkat.BinData")

li_Success = loo_BinData.LoadFile("qa_data/p7m/opaqueSig.p7")
// Your app should check for success, but we'll skip the check for brevity..

// If verified, the signature is unwrapped and binData is replaced with the original data that was signed.
li_Success = loo_Crypt.OpaqueVerifyBd(loo_BinData)
if li_Success = 0 then
    Write-Debug loo_Crypt.LastErrorText
    destroy loo_Crypt
    destroy loo_BinData
    return
end if

// For our testing, we signed some text, so we can get it from the binData..
Write-Debug "Original Data:"
Write-Debug loo_BinData.GetString("utf-8")

// After any method call that verifies a signature, the crypt object will contain the certificate(s)
// that were used for signing (assuming the X.509 certs were available in the signature, which is typically the case).

// Get each signing certificate, and build the certificate chain for each.
loo_Cert = create oleobject
li_rc = loo_Cert.ConnectToNewObject("Chilkat.Cert")

loo_CertChain = create oleobject
li_rc = loo_CertChain.ConnectToNewObject("Chilkat.CertChain")

li_NumCerts = loo_Crypt.NumSignerCerts
i = 0
do while i < li_NumCerts
    loo_Crypt.LastSignerCert(i,loo_Cert)
    Write-Debug loo_Cert.SubjectDN

    li_Success = loo_Cert.BuildCertChain(loo_CertChain)
    if li_Success = 0 then
        Write-Debug loo_Cert.LastErrorText
        destroy loo_Crypt
        destroy loo_BinData
        destroy loo_Cert
        destroy loo_CertChain
        return
    end if

    i = i + 1
loop


destroy loo_Crypt
destroy loo_BinData
destroy loo_Cert
destroy loo_CertChain