(Visual FoxPro) Get ETK Public Key (api-acpt.ehealth.fgov.be)

See more Belgian eHealth Platform Examples

The following URL returns JSON, which contains a PKCS7 signed data:

https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN

This example extracts the signed data, validates it, and then extracts the public key from the certificate (obtained from signed content in the PKCS7)

Note: The URL above uses "12345678901" which is not valid. You should replace it with a valid number.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL loHttp
LOCAL lcJsonStr
LOCAL loJarr
LOCAL lnSuccess
LOCAL loJson
LOCAL loBdPkcs7
LOCAL loCrypt
LOCAL loCert
LOCAL loPubKey

* This example requires the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Http')
loHttp = CreateObject('Chilkat.Http')

lcJsonStr = loHttp.QuickGetStr("https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN")
IF (loHttp.LastMethodSuccess = 0) THEN
    ? loHttp.LastErrorText
    RELEASE loHttp
    CANCEL
ENDIF

? lcJsonStr

* The JSON contains something like this:

* [
*     {
*         "key": {
*             "applicationIdentifier": "",
*             "ssin": "12345678901"
*         },
*         "value": "MIAGCSq....AAAAAAAA=="
*     }
* ]

* Note: The above is a JSON array (not a JSON object)
* It should be loaded into a Chilkat JSON array.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.JsonArray')
loJarr = CreateObject('Chilkat.JsonArray')
lnSuccess = loJarr.Load(lcJsonStr)
IF (lnSuccess = 0) THEN
    ? "Failed to load JSON."
    RELEASE loHttp
    RELEASE loJarr
    CANCEL
ENDIF

loJson = loJarr.ObjectAt(0)
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.BinData')
loBdPkcs7 = CreateObject('Chilkat.BinData')
loBdPkcs7.AppendEncoded(loJson.StringOf("value"),"base64")
RELEASE loJson

* Let's verify the PKCS7, and then examine the signing cert,
* and get the signing cert's public key.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Crypt2')
loCrypt = CreateObject('Chilkat.Crypt2')

* Validate the signedData PKCS7, and replace the contents of bdPkcs7 with the extracted signed content.
lnSuccess = loCrypt.OpaqueVerifyBd(loBdPkcs7)
IF (lnSuccess = 0) THEN
    ? loCrypt.LastErrorText
    RELEASE loHttp
    RELEASE loJarr
    RELEASE loBdPkcs7
    RELEASE loCrypt
    CANCEL
ENDIF

* The signed content is the DER of a certificate.
* In other words, bdPkcs7 now contains a certificate.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Cert')
loCert = CreateObject('Chilkat.Cert')
lnSuccess = loCert.LoadFromBd(loBdPkcs7)
IF (lnSuccess = 0) THEN
    ? loCert.LastErrorText
    RELEASE loHttp
    RELEASE loJarr
    RELEASE loBdPkcs7
    RELEASE loCrypt
    RELEASE loCert
    CANCEL
ENDIF

* Show some certificate information:
? "Subject: " + loCert.SubjectDN
? "Serial: " + loCert.SerialNumber
? "Issuer: " + loCert.IssuerDN

* Let's get the cert's public key...
loPubKey = loCert.ExportPublicKey()
IF (loCert.LastMethodSuccess = 0) THEN
    ? loCert.LastErrorText
    RELEASE loHttp
    RELEASE loJarr
    RELEASE loBdPkcs7
    RELEASE loCrypt
    RELEASE loCert
    CANCEL
ENDIF

* OK, you now have the public key and can do whatever is needed..
? loPubKey.KeyType
? STR(loPubKey.KeySize)

RELEASE loPubKey

RELEASE loHttp
RELEASE loJarr
RELEASE loBdPkcs7
RELEASE loCrypt
RELEASE loCert