PHP ActiveX Requires Chilkat v11.0.0+

Get ETK Public Key (api-acpt.ehealth.fgov.be)

See more Belgian eHealth Platform Examples

The following URL returns JSON, which contains a PKCS7 signed data:

https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN

This example extracts the signed data, validates it, and then extracts the public key from the certificate (obtained from signed content in the PKCS7)

Note: The URL above uses "12345678901" which is not valid. You should replace it with a valid number.

PHP ActiveX

<?php

$success = 0;

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

$http = new COM("Chilkat.Http");

$jsonStr = $http->quickGetStr('https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN');
if ($http->LastMethodSuccess == 0) {
    print $http->LastErrorText . "\n";
    exit;
}

print $jsonStr . "\n";

//  The JSON contains something like this:

//  [
//      {
//          "key": {
//              "applicationIdentifier": "",
//              "ssin": "12345678901"
//          },
//          "value": "MIAGCSq....AAAAAAAA=="
//      }
//  ]

//  Note: The above is a JSON array (not a JSON object)
//  It should be loaded into a Chilkat JSON array.
$jarr = new COM("Chilkat.JsonArray");
$success = $jarr->Load($jsonStr);
if ($success == 0) {
    print 'Failed to load JSON.' . "\n";
    exit;
}

// json is a Chilkat.JsonObject
$json = $jarr->ObjectAt(0);
$bdPkcs7 = new COM("Chilkat.BinData");
$bdPkcs7->AppendEncoded($json->stringOf('value'),'base64');

//  Let's verify the PKCS7, and then examine the signing cert,
//  and get the signing cert's public key.
$crypt = new COM("Chilkat.Crypt2");

//  Validate the signedData PKCS7, and replace the contents of bdPkcs7 with the extracted signed content.
$success = $crypt->OpaqueVerifyBd($bdPkcs7);
if ($success == 0) {
    print $crypt->LastErrorText . "\n";
    exit;
}

//  The signed content is the DER of a certificate.
//  In other words, bdPkcs7 now contains a certificate.
$cert = new COM("Chilkat.Cert");
$success = $cert->LoadFromBd($bdPkcs7);
if ($success == 0) {
    print $cert->LastErrorText . "\n";
    exit;
}

//  Show some certificate information:
print 'Subject: ' . $cert->SubjectDN . "\n";
print 'Serial: ' . $cert->SerialNumber . "\n";
print 'Issuer: ' . $cert->IssuerDN . "\n";

//  Let's get the cert's public key...
$pubKey = new COM("Chilkat.PublicKey");
$cert->GetPublicKey($pubKey);

//  OK, you now have the public key and can do whatever is needed..
print $pubKey->KeyType . "\n";
print $pubKey->KeySize . "\n";

?>