Java Requires Chilkat v11.0.0+

Get ETK Public Key (api-acpt.ehealth.fgov.be)

See more Belgian eHealth Platform Examples

The following URL returns JSON, which contains a PKCS7 signed data:

https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN

This example extracts the signed data, validates it, and then extracts the public key from the certificate (obtained from signed content in the PKCS7)

Note: The URL above uses "12345678901" which is not valid. You should replace it with a valid number.

Chilkat2 Java

import com.chilkatsoft.chilkat2.BinData;
import com.chilkatsoft.chilkat2.Cert;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Crypt2;
import com.chilkatsoft.chilkat2.Http;
import com.chilkatsoft.chilkat2.JsonArray;
import com.chilkatsoft.chilkat2.JsonObject;
import com.chilkatsoft.chilkat2.PublicKey;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        Http http = new Http();

        String jsonStr;
        try {
            jsonStr = http.quickGetStr("https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        System.out.println(jsonStr);

        // The JSON contains something like this:

        // [
        //     {
        //         "key": {
        //             "applicationIdentifier": "",
        //             "ssin": "12345678901"
        //         },
        //         "value": "MIAGCSq....AAAAAAAA=="
        //     }
        // ]

        // Note: The above is a JSON array (not a JSON object)
        // It should be loaded into a Chilkat JSON array.
        JsonArray jarr = new JsonArray();
        try {
            jarr.load(jsonStr);
        } catch (ChilkatException e) {
            System.out.println("Failed to load JSON.");
            return;
        }

        JsonObject json = jarr.objectAt(0);
        BinData bdPkcs7 = new BinData();
        bdPkcs7.appendEncoded(json.stringOf("value"), "base64");
        json.close();

        // Let's verify the PKCS7, and then examine the signing cert,
        // and get the signing cert's public key.
        Crypt2 crypt = new Crypt2();

        // Validate the signedData PKCS7, and replace the contents of bdPkcs7 with the extracted signed content.
        try {
            crypt.opaqueVerifyBd(bdPkcs7);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // The signed content is the DER of a certificate.
        // In other words, bdPkcs7 now contains a certificate.
        Cert cert = new Cert();
        try {
            cert.loadFromBd(bdPkcs7);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Show some certificate information:
        System.out.println("Subject: " + cert.getSubjectDN());
        System.out.println("Serial: " + cert.getSerialNumber());
        System.out.println("Issuer: " + cert.getIssuerDN());

        // Let's get the cert's public key...
        PublicKey pubKey = new PublicKey();
        cert.getPublicKey(pubKey);

        // OK, you now have the public key and can do whatever is needed..
        System.out.println(pubKey.getKeyType());
        System.out.println(pubKey.getKeySize());
    }
}