(PHP ActiveX) Get ETK Public Key (api-acpt.ehealth.fgov.be)

See more Belgian eHealth Platform Examples

The following URL returns JSON, which contains a PKCS7 signed data:

https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN

This example extracts the signed data, validates it, and then extracts the public key from the certificate (obtained from signed content in the PKCS7)

Note: The URL above uses "12345678901" which is not valid. You should replace it with a valid number.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Http')
$http = new COM("Chilkat.Http");

$jsonStr = $http->quickGetStr('https://api-acpt.ehealth.fgov.be/etee/v1/etks?identifier=12345678901&type=SSIN');
if ($http->LastMethodSuccess == 0) {
    print $http->LastErrorText . "\n";
    exit;
}

print $jsonStr . "\n";

// The JSON contains something like this:

// [
//     {
//         "key": {
//             "applicationIdentifier": "",
//             "ssin": "12345678901"
//         },
//         "value": "MIAGCSq....AAAAAAAA=="
//     }
// ]

// Note: The above is a JSON array (not a JSON object)
// It should be loaded into a Chilkat JSON array.
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonArray')
$jarr = new COM("Chilkat.JsonArray");
$success = $jarr->Load($jsonStr);
if ($success == 0) {
    print 'Failed to load JSON.' . "\n";
    exit;
}

// json is a Chilkat.JsonObject
$json = $jarr->ObjectAt(0);
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.BinData')
$bdPkcs7 = new COM("Chilkat.BinData");
$bdPkcs7->AppendEncoded($json->stringOf('value'),'base64');

// Let's verify the PKCS7, and then examine the signing cert,
// and get the signing cert's public key.
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2')
$crypt = new COM("Chilkat.Crypt2");

// Validate the signedData PKCS7, and replace the contents of bdPkcs7 with the extracted signed content.
$success = $crypt->OpaqueVerifyBd($bdPkcs7);
if ($success == 0) {
    print $crypt->LastErrorText . "\n";
    exit;
}

// The signed content is the DER of a certificate.
// In other words, bdPkcs7 now contains a certificate.
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");
$success = $cert->LoadFromBd($bdPkcs7);
if ($success == 0) {
    print $cert->LastErrorText . "\n";
    exit;
}

// Show some certificate information:
print 'Subject: ' . $cert->SubjectDN . "\n";
print 'Serial: ' . $cert->SerialNumber . "\n";
print 'Issuer: ' . $cert->IssuerDN . "\n";

// Let's get the cert's public key...
// pubKey is a Chilkat.PublicKey
$pubKey = $cert->ExportPublicKey();
if ($cert->LastMethodSuccess == 0) {
    print $cert->LastErrorText . "\n";
    exit;
}

// OK, you now have the public key and can do whatever is needed..
print $pubKey->KeyType . "\n";
print $pubKey->KeySize . "\n";


?>