Sign a JWS with a Certificate

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetSigningCert, which sets the certificate whose associated private key is used to create a signature.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

load ./chilkat.dll

set success 0

set jws [new_CkJws]

#  Protected header specifying RSASSA-PKCS1-v1_5 with SHA-256 (RS256).
set header [new_CkJsonObject]

CkJsonObject_UpdateString $header "alg" "RS256"
set success [CkJws_SetProtectedHeader $jws 0 $header]
if {$success == 0} then {
    puts [CkJws_lastErrorText $jws]
    delete_CkJws $jws
    delete_CkJsonObject $header
    exit
}

set bIncludeBom 0
set success [CkJws_SetPayload $jws "This is the content to sign." "utf-8" $bIncludeBom]
if {$success == 0} then {
    puts [CkJws_lastErrorText $jws]
    delete_CkJws $jws
    delete_CkJsonObject $header
    exit
}

#  The file path is relative to the application's current working directory.  An absolute path
#  may also be used.  Supply the path appropriate to your own environment.
#  The PFX password should come from a secure source rather than being hard-coded.
set pfxPassword "myPfxPassword"

#  Load a certificate that has an associated private key, then set it as the signing certificate for
#  signature 0.  The certificate's private key is used to create the signature.
set cert [new_CkCert]

set success [CkCert_LoadPfxFile $cert "qa_data/signer.pfx" $pfxPassword]
if {$success == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkJws $jws
    delete_CkJsonObject $header
    delete_CkCert $cert
    exit
}

set success [CkJws_SetSigningCert $jws 0 $cert]
if {$success == 0} then {
    puts [CkJws_lastErrorText $jws]
    delete_CkJws $jws
    delete_CkJsonObject $header
    delete_CkCert $cert
    exit
}

set jwsCompact [CkJws_createJws $jws]
if {[CkJws_get_LastMethodSuccess $jws] == 0} then {
    puts [CkJws_lastErrorText $jws]
    delete_CkJws $jws
    delete_CkJsonObject $header
    delete_CkCert $cert
    exit
}

puts "$jwsCompact"

delete_CkJws $jws
delete_CkJsonObject $header
delete_CkCert $cert