CkPython

RSA Signature with Certificate's Private Key from PFX

See more RSA Examples

Demonstrates how to use a certificate's private key from a PFX file to create an RSA signature. CkPython

import sys
import chilkat

success = False

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Create an instance of a certificate store object, load a PFX file,
# locate the certificate we need, and use it for signing.
# (a PFX file may contain more than one certificate.)
certStore = chilkat.CkCertStore()

# The 1st argument is the filename, the 2nd arg is the 
# PFX file's password:
success = certStore.LoadPfxFile("chilkat.pfx","test")
if (success == False):
    print(certStore.lastErrorText())
    sys.exit()

# Find the certificate by the subject common name:
jsonCN = chilkat.CkJsonObject()
jsonCN.UpdateString("CN","cert common name")

cert = chilkat.CkCert()
success = certStore.FindCert(jsonCN,cert)
if (success == False):
    print(certStore.lastErrorText())
    sys.exit()

privKey = chilkat.CkPrivateKey()
success = cert.GetPrivateKey(privKey)
if (success == False):
    print(cert.lastErrorText())
    sys.exit()

rsa = chilkat.CkRsa()

success = rsa.UsePrivateKey(privKey)
if (success == False):
    print(rsa.lastErrorText())
    sys.exit()

# Encode the signature as a hex string
rsa.put_EncodingMode("hex")

strData = "This is the string to be signed."

# Sign the string using the sha-1 hash algorithm.
# Other valid choices are "sha-256", "md2" and "md5".
hexSig = rsa.signStringENC(strData,"sha-1")

print(hexSig)

print("Success!")