React Native Requires Chilkat v11.7.0+

Encrypt a PDF for a Certificate Instead of a Password

See more PDF Protection Examples

Demonstrates certificate security, where a PDF is encrypted for one or more recipients and each opens it with their own certificate and private key. No password is involved. Only the public certificate of a recipient is needed to encrypt. Each recipient has its own permissions, and the changeSecurity permission gives a recipient owner rights. PreLoadCheck tells an application that a file is certificate-encrypted and which certificates can open it. A PDF that cannot be opened, because no matching certificate and private key were provided, fails to load. React Native

import { Cert, JsonObject, Pdf } from '@chilkat/react-native'

function chilkatExample() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  // The PDF used in this example is available at two_page_memo.pdf

  // The recipient's certificate.  Only the public certificate is needed to encrypt.
  const recipient = new Cert();
  try {
    recipient.loadFromFile('qa_data/certs/recipient.cer');
  } catch {
    console.log(recipient.lastErrorText);
    return;
  }

  const pdf = new Pdf();
  try {
    pdf.loadFile('qa_data/pdf/two_page_memo.pdf');
  } catch {
    console.log(pdf.lastErrorText);
    return;
  }

  // Call AddEncryptCert once for each recipient.
  try {
    pdf.addEncryptCert(recipient);
  } catch {
    console.log(pdf.lastErrorText);
    return;
  }

  // recipientPermissions[0] belongs to the first certificate added.  changeSecurity gives that
  // recipient owner rights, so the file can be managed later.
  const json = new JsonObject();
  json.updateString('method', 'certificate');
  json.updateBool('recipientPermissions[0].changeSecurity', true);

  const jsonOut = new JsonObject();
  try {
    pdf.protection('encrypt', json, jsonOut);
  } catch {
    console.log(pdf.lastErrorText);
    return;
  }

  console.log(`method: ${jsonOut.stringOf('pending.method')}`);
  console.log(`algorithm: ${jsonOut.stringOf('pending.algorithm')}`);
  console.log(`recipients: ${jsonOut.sizeOfArray('pending.recipients')}`);

  try {
    pdf.writeFile('qa_output/memo_for_recipient.pdf');
  } catch {
    console.log(pdf.lastErrorText);
    return;
  }

  // PreLoadCheck says how the file is protected, without loading it.
  const reader = new Pdf();
  const info = new JsonObject();
  try {
    reader.preLoadCheck('qa_output/memo_for_recipient.pdf', info);
  } catch {
    console.log(reader.lastErrorText);
    return;
  }

  console.log(`saved file, method: ${info.stringOf('method')}`);
  console.log(`saved file, recipients: ${info.sizeOfArray('recipients')}`);

  // The recipient opens it with the certificate and its private key, here from a .pfx file.
  // (On Windows, a certificate that is installed in the Windows certificate store with its private
  // key is found automatically when the PDF is loaded, and SetDecryptCert is not needed for it.)
  const myCert = new Cert();
  try {
    myCert.loadPfxFile('qa_data/pfx/recipient.pfx', 'pfx-password');
  } catch {
    console.log(myCert.lastErrorText);
    return;
  }

  try {
    reader.setDecryptCert(myCert);
  } catch {
    console.log(reader.lastErrorText);
    return;
  }

  try {
    reader.loadFile('qa_output/memo_for_recipient.pdf');
  } catch {
    console.log(reader.lastErrorText);
    return;
  }

  const empty = new JsonObject();
  const loadedInfo = new JsonObject();
  try {
    reader.protection('getInfo', empty, loadedInfo);
  } catch {
    console.log(reader.lastErrorText);
    return;
  }

  console.log(`opened with: ${loadedInfo.stringOf('loaded.openedWith')}`);
  console.log(`pages: ${reader.numPages}`);

  // Sample output:

  // method: certificate
  // algorithm: aes-256
  // recipients: 1
  // saved file, method: certificate
  // saved file, recipients: 1
  // opened with: certificate
  // pages: 2
}