Zig

Sign String to create a CAdES-T Signature, using HTTP Proxy to Access Timestamp Server

This example will sign a string to create a CAdEST-T signature. It will use an HTTP proxy to access the timestamp server. Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    const crypt = try chilkat.Crypt2.init();
    defer crypt.deinit();

    const cert = try chilkat.Cert.init();
    defer cert.deinit();
    cert.setSmartCardPin("123456");
    cert.loadFromSmartcard("") catch {
        std.debug.print("{s}\n", .{try cert.getLastErrorText(alloc)});
        return;
    };

    try crypt.setSigningCert(cert);

    // Use SHA-256 rather than the default of SHA-1
    crypt.setHashAlgorithm("sha256");

    // Create JSON that tells Chilkat what signing attributes to include:
    const attrs = try chilkat.JsonObject.init();
    defer attrs.deinit();
    attrs.updateBool("contentType", true) catch {};
    attrs.updateBool("signingTime", true) catch {};
    attrs.updateBool("messageDigest", true) catch {};
    attrs.updateBool("signingCertificateV2", true) catch {};

    // A CAdES-T signature is one that includes a timestampToken created by an online TSA (time stamping authority).
    // We must include the TSA's URL, as well as a few options to indicate what is desired.
    // Except for the TSA URL, the options shown here are typically what you would need.
    attrs.updateBool("timestampToken.enabled", true) catch {};
    attrs.updateString("timestampToken.tsaUrl", "https://freetsa.org/tsr") catch {};
    attrs.updateBool("timestampToken.addNonce", false) catch {};
    attrs.updateBool("timestampToken.requestTsaCert", true) catch {};
    attrs.updateString("timestampToken.hashAlg", "sha256") catch {};

    crypt.setSigningAttributes(try attrs.emit(alloc));

    const str_to_sign = "Hello World!";

    const bd = try chilkat.BinData.init();
    defer bd.deinit();
    bd.appendString(str_to_sign, "utf-8") catch {};

    // -------------------------------------------------------------------------
    // The purpose of this example is to show how an HTTP object with custom
    // settings can be used to access the Internet when signing.
    // Access to the Internet is needed to communicate with the timestamp server.
    const http = try chilkat.Http.init();
    defer http.deinit();
    // This can be a domain name, hostname, or IP address.
    http.setProxyDomain("172.16.16.56");
    http.setProxyPort(808);
    http.setProxyLogin("myProxyLogin");
    http.setProxyPassword("myProxyPassword");
    crypt.setTsaHttpObj(http);
    // -------------------------------------------------------------------------

    // This creates the CAdES-T signature.  During the signature creation, it
    // communicates with the TSA to get a timestampToken.
    // The contents of bd are signed and replaced with the CAdES-T signature (which embeds the original content).
    crypt.opaqueSignBd(bd) catch {
        std.debug.print("{s}\n", .{try crypt.getLastErrorText(alloc)});
        return;
    };

    // Get the signature in base64 format:
    std.debug.print("{s}\n", .{try bd.getEncoded(alloc, "base64_mime")});

    std.debug.print("Success.\n", .{});
}