Sign a JWS with a Certificate

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetSigningCert, which sets the certificate whose associated private key is used to create a signature.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

IncludeFile "CkCert.pb"
IncludeFile "CkJws.pb"
IncludeFile "CkJsonObject.pb"

Procedure ChilkatExample()

    success.i = 0

    jws.i = CkJws::ckCreate()
    If jws.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ;  Protected header specifying RSASSA-PKCS1-v1_5 with SHA-256 (RS256).
    header.i = CkJsonObject::ckCreate()
    If header.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckUpdateString(header,"alg","RS256")
    success = CkJws::ckSetProtectedHeader(jws,0,header)
    If success = 0
        Debug CkJws::ckLastErrorText(jws)
        CkJws::ckDispose(jws)
        CkJsonObject::ckDispose(header)
        ProcedureReturn
    EndIf

    bIncludeBom.i = 0
    success = CkJws::ckSetPayload(jws,"This is the content to sign.","utf-8",bIncludeBom)
    If success = 0
        Debug CkJws::ckLastErrorText(jws)
        CkJws::ckDispose(jws)
        CkJsonObject::ckDispose(header)
        ProcedureReturn
    EndIf

    ;  The file path is relative to the application's current working directory.  An absolute path
    ;  may also be used.  Supply the path appropriate to your own environment.
    ;  The PFX password should come from a secure source rather than being hard-coded.
    pfxPassword.s = "myPfxPassword"

    ;  Load a certificate that has an associated private key, then set it as the signing certificate for
    ;  signature 0.  The certificate's private key is used to create the signature.
    cert.i = CkCert::ckCreate()
    If cert.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkCert::ckLoadPfxFile(cert,"qa_data/signer.pfx",pfxPassword)
    If success = 0
        Debug CkCert::ckLastErrorText(cert)
        CkJws::ckDispose(jws)
        CkJsonObject::ckDispose(header)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    success = CkJws::ckSetSigningCert(jws,0,cert)
    If success = 0
        Debug CkJws::ckLastErrorText(jws)
        CkJws::ckDispose(jws)
        CkJsonObject::ckDispose(header)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    jwsCompact.s = CkJws::ckCreateJws(jws)
    If CkJws::ckLastMethodSuccess(jws) = 0
        Debug CkJws::ckLastErrorText(jws)
        CkJws::ckDispose(jws)
        CkJsonObject::ckDispose(header)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    Debug jwsCompact


    CkJws::ckDispose(jws)
    CkJsonObject::ckDispose(header)
    CkCert::ckDispose(cert)


    ProcedureReturn
EndProcedure