Sign a JWS with a Certificate

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetSigningCert, which sets the certificate whose associated private key is used to create a signature.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

func chilkatTest() {
    var success: Bool = false

    let jws = CkoJws()!

    //  Protected header specifying RSASSA-PKCS1-v1_5 with SHA-256 (RS256).
    let header = CkoJsonObject()!
    header.updateString(jsonPath: "alg", value: "RS256")
    success = jws.setProtectedHeader(index: 0, json: header)
    if success == false {
        print("\(jws.lastErrorText!)")
        return
    }

    var bIncludeBom: Bool = false
    success = jws.setPayload(payload: "This is the content to sign.", charset: "utf-8", includeBom: bIncludeBom)
    if success == false {
        print("\(jws.lastErrorText!)")
        return
    }

    //  The file path is relative to the application's current working directory.  An absolute path
    //  may also be used.  Supply the path appropriate to your own environment.
    //  The PFX password should come from a secure source rather than being hard-coded.
    var pfxPassword: String? = "myPfxPassword"

    //  Load a certificate that has an associated private key, then set it as the signing certificate for
    //  signature 0.  The certificate's private key is used to create the signature.
    let cert = CkoCert()!
    success = cert.loadPfxFile(path: "qa_data/signer.pfx", password: pfxPassword)
    if success == false {
        print("\(cert.lastErrorText!)")
        return
    }

    success = jws.setSigningCert(index: 0, cert: cert)
    if success == false {
        print("\(jws.lastErrorText!)")
        return
    }

    var jwsCompact: String? = jws.create()
    if jws.lastMethodSuccess == false {
        print("\(jws.lastErrorText!)")
        return
    }

    print("\(jwsCompact!)")

}