Zig

PKCS7 Sign Text using RSA 2048, SHA256, Base64 Output

See more Digital Signatures Examples

Demonstrates how to sign text using 2048-bit RSA with SHA256, producing PKCS#7 output in Base64. The certificate w/ private key used for signing is loaded from a .p12/.pfx file. Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    const cert = try chilkat.Cert.init();
    defer cert.deinit();

    // Load the cert and private key.  Whatever the private key happens to be,
    // such as RSA or ECC, then Chilkat will use it.  If the private key is
    // a 2048-bit RSA key, then that's what will be used..
    cert.loadPfxFile("qa_data/pfx/myCertAndKey.p12", "password") catch {
        std.debug.print("{s}\n", .{try cert.getLastErrorText(alloc)});
        return;
    };

    const crypt = try chilkat.Crypt2.init();
    defer crypt.deinit();

    crypt.setSigningCert(cert) catch {
        std.debug.print("{s}\n", .{try crypt.getLastErrorText(alloc)});
        return;
    };

    // Use SHA-256
    crypt.setHashAlgorithm("sha256");

    // Hash the utf-8 byte representation of the string
    crypt.setCharset("utf-8");

    // Return the result in base64
    crypt.setEncodingMode("base64");

    // Sign some text..
    const text_to_sign = "This is the text to be hashed and signed.";
    const sig_base64 = crypt.opaqueSignStringENC(alloc, text_to_sign) catch {
        std.debug.print("{s}\n", .{try crypt.getLastErrorText(alloc)});
        return;
    };

    std.debug.print("{s}\n", .{sig_base64});

    // The result:
    // MIIS2wYJKoZIhvcNAQc ... zGeeY4Oxg==
}