Sign a JWS with a Certificate

See more JSON Web Signatures (JWS) Examples

Demonstrates Jws.SetSigningCert, which sets the certificate whose associated private key is used to create a signature.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

#include <CkJwsW.h>
#include <CkJsonObjectW.h>
#include <CkCertW.h>

void ChilkatSample(void)
    {
    bool success = false;

    CkJwsW jws;

    //  Protected header specifying RSASSA-PKCS1-v1_5 with SHA-256 (RS256).
    CkJsonObjectW header;
    header.UpdateString(L"alg",L"RS256");
    success = jws.SetProtectedHeader(0,header);
    if (success == false) {
        wprintf(L"%s\n",jws.lastErrorText());
        return;
    }

    bool bIncludeBom = false;
    success = jws.SetPayload(L"This is the content to sign.",L"utf-8",bIncludeBom);
    if (success == false) {
        wprintf(L"%s\n",jws.lastErrorText());
        return;
    }

    //  The file path is relative to the application's current working directory.  An absolute path
    //  may also be used.  Supply the path appropriate to your own environment.
    //  The PFX password should come from a secure source rather than being hard-coded.
    const wchar_t *pfxPassword = L"myPfxPassword";

    //  Load a certificate that has an associated private key, then set it as the signing certificate for
    //  signature 0.  The certificate's private key is used to create the signature.
    CkCertW cert;
    success = cert.LoadPfxFile(L"qa_data/signer.pfx",pfxPassword);
    if (success == false) {
        wprintf(L"%s\n",cert.lastErrorText());
        return;
    }

    success = jws.SetSigningCert(0,cert);
    if (success == false) {
        wprintf(L"%s\n",jws.lastErrorText());
        return;
    }

    const wchar_t *jwsCompact = jws.createJws();
    if (jws.get_LastMethodSuccess() == false) {
        wprintf(L"%s\n",jws.lastErrorText());
        return;
    }

    wprintf(L"%s\n",jwsCompact);
    }