(Perl) Get ETK Public Key (api-acpt.ehealth.fgov.be)

See more Belgian eHealth Platform Examples

The following URL returns JSON, which contains a PKCS7 signed data:

https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN

This example extracts the signed data, validates it, and then extracts the public key from the certificate (obtained from signed content in the PKCS7)

Note: The URL above uses "12345678901" which is not valid. You should replace it with a valid number.

Chilkat Perl Downloads Perl Module for Windows, MacOS, Linux, Alpine Linux, Solaris

use chilkat();

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$http = chilkat::CkHttp->new();

$jsonStr = $http->quickGetStr("https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN");
if ($http->get_LastMethodSuccess() == 0) {
    print $http->lastErrorText() . "\r\n";
    exit;
}

print $jsonStr . "\r\n";

# The JSON contains something like this:

# [
#     {
#         "key": {
#             "applicationIdentifier": "",
#             "ssin": "12345678901"
#         },
#         "value": "MIAGCSq....AAAAAAAA=="
#     }
# ]

# Note: The above is a JSON array (not a JSON object)
# It should be loaded into a Chilkat JSON array.
$jarr = chilkat::CkJsonArray->new();
$success = $jarr->Load($jsonStr);
if ($success == 0) {
    print "Failed to load JSON." . "\r\n";
    exit;
}

# json is a JsonObject
$json = $jarr->ObjectAt(0);
$bdPkcs7 = chilkat::CkBinData->new();
$bdPkcs7->AppendEncoded($json->stringOf("value"),"base64");

# Let's verify the PKCS7, and then examine the signing cert,
# and get the signing cert's public key.
$crypt = chilkat::CkCrypt2->new();

# Validate the signedData PKCS7, and replace the contents of bdPkcs7 with the extracted signed content.
$success = $crypt->OpaqueVerifyBd($bdPkcs7);
if ($success == 0) {
    print $crypt->lastErrorText() . "\r\n";
    exit;
}

# The signed content is the DER of a certificate.
# In other words, bdPkcs7 now contains a certificate.
$cert = chilkat::CkCert->new();
$success = $cert->LoadFromBd($bdPkcs7);
if ($success == 0) {
    print $cert->lastErrorText() . "\r\n";
    exit;
}

# Show some certificate information:
print "Subject: " . $cert->subjectDN() . "\r\n";
print "Serial: " . $cert->serialNumber() . "\r\n";
print "Issuer: " . $cert->issuerDN() . "\r\n";

# Let's get the cert's public key...
# pubKey is a PublicKey
$pubKey = $cert->ExportPublicKey();
if ($cert->get_LastMethodSuccess() == 0) {
    print $cert->lastErrorText() . "\r\n";
    exit;
}

# OK, you now have the public key and can do whatever is needed..
print $pubKey->keyType() . "\r\n";
print $pubKey->get_KeySize() . "\r\n";