DataFlex

Get ETK Public Key (api-acpt.ehealth.fgov.be)

See more Belgian eHealth Platform Examples

The following URL returns JSON, which contains a PKCS7 signed data:

https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN

This example extracts the signed data, validates it, and then extracts the public key from the certificate (obtained from signed content in the PKCS7)

Note: The URL above uses "12345678901" which is not valid. You should replace it with a valid number.

DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoHttp
    String sJsonStr
    Handle hoJarr
    Variant vJson
    Handle hoJson
    Variant vBdPkcs7
    Handle hoBdPkcs7
    Handle hoCrypt
    Handle hoCert
    Variant vPubKey
    Handle hoPubKey
    String sTemp1
    Integer iTemp1
    Boolean bTemp1

    Move False To iSuccess

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatHttp)) To hoHttp
    If (Not(IsComObjectCreated(hoHttp))) Begin
        Send CreateComObject of hoHttp
    End

    Get ComQuickGetStr Of hoHttp "https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN" To sJsonStr
    Get ComLastMethodSuccess Of hoHttp To bTemp1
    If (bTemp1 = False) Begin
        Get ComLastErrorText Of hoHttp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln sJsonStr

    // The JSON contains something like this:

    // [
    //     {
    //         "key": {
    //             "applicationIdentifier": "",
    //             "ssin": "12345678901"
    //         },
    //         "value": "MIAGCSq....AAAAAAAA=="
    //     }
    // ]

    // Note: The above is a JSON array (not a JSON object)
    // It should be loaded into a Chilkat JSON array.
    Get Create (RefClass(cComChilkatJsonArray)) To hoJarr
    If (Not(IsComObjectCreated(hoJarr))) Begin
        Send CreateComObject of hoJarr
    End
    Get ComLoad Of hoJarr sJsonStr To iSuccess
    If (iSuccess = False) Begin
        Showln "Failed to load JSON."
        Procedure_Return
    End

    Get ComObjectAt Of hoJarr 0 To vJson
    If (IsComObject(vJson)) Begin
        Get Create (RefClass(cComChilkatJsonObject)) To hoJson
        Set pvComObject Of hoJson To vJson
    End
    Get Create (RefClass(cComChilkatBinData)) To hoBdPkcs7
    If (Not(IsComObjectCreated(hoBdPkcs7))) Begin
        Send CreateComObject of hoBdPkcs7
    End
    Get ComStringOf Of hoJson "value" To sTemp1
    Get ComAppendEncoded Of hoBdPkcs7 sTemp1 "base64" To iSuccess
    Send Destroy of hoJson

    // Let's verify the PKCS7, and then examine the signing cert,
    // and get the signing cert's public key.
    Get Create (RefClass(cComChilkatCrypt2)) To hoCrypt
    If (Not(IsComObjectCreated(hoCrypt))) Begin
        Send CreateComObject of hoCrypt
    End

    // Validate the signedData PKCS7, and replace the contents of bdPkcs7 with the extracted signed content.
    Get pvComObject of hoBdPkcs7 to vBdPkcs7
    Get ComOpaqueVerifyBd Of hoCrypt vBdPkcs7 To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoCrypt To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // The signed content is the DER of a certificate.
    // In other words, bdPkcs7 now contains a certificate.
    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End
    Get pvComObject of hoBdPkcs7 to vBdPkcs7
    Get ComLoadFromBd Of hoCert vBdPkcs7 To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoCert To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Show some certificate information:
    Get ComSubjectDN Of hoCert To sTemp1
    Showln "Subject: " sTemp1
    Get ComSerialNumber Of hoCert To sTemp1
    Showln "Serial: " sTemp1
    Get ComIssuerDN Of hoCert To sTemp1
    Showln "Issuer: " sTemp1

    // Let's get the cert's public key...
    Get Create (RefClass(cComChilkatPublicKey)) To hoPubKey
    If (Not(IsComObjectCreated(hoPubKey))) Begin
        Send CreateComObject of hoPubKey
    End
    Get pvComObject of hoPubKey to vPubKey
    Get ComGetPublicKey Of hoCert vPubKey To iSuccess

    // OK, you now have the public key and can do whatever is needed..
    Get ComKeyType Of hoPubKey To sTemp1
    Showln sTemp1
    Get ComKeySize Of hoPubKey To iTemp1
    Showln iTemp1


End_Procedure