(CkPython) Verify the Timestamp Server Token (if any) while Validating a CMS Signature

Demonstrates how to also validate the timestamp server token (if any) while validating a CMS signature.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux

import sys
import chilkat

crypt = chilkat.CkCrypt2()

# Tell Chilkat to also validate the timestamp token if a timestamp exists in the CMS message's unauthenticated attributes.
cmsOptions = chilkat.CkJsonObject()
cmsOptions.UpdateBool("ValidateTimestampTokens",True)
crypt.put_CmsOptions(cmsOptions.emit())

outputFile = "qa_output/original.xml"
inFile = "qa_data/p7m/fattura_signature.xml.p7m"

# Verify the signature and extract the contained file, which in this case is XML.
success = crypt.VerifyP7M(inFile,outputFile)
if (success == False):
    print(crypt.lastErrorText())
    sys.exit()

print("Signature validated.")