(PHP ActiveX) Get Certificates within XML Signature

Demonstrates how to get the certificates contained within an XML signature.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.StringBuilder')
$sbXml = new COM("Chilkat.StringBuilder");

// Load XML containing one or more signatures.
$success = $sbXml->LoadFile('qa_data/xml_dsig_valid_samples/multipleSigners/sp.pdf.XAdES.xml','utf-8');
if ($success == 0) {
    print 'Failed to load the XML file..' . "\n";
    exit;
}

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.XmlDSig')
$dsig = new COM("Chilkat.XmlDSig");

// First load the XML containing the signatures to be verified.
// Note that this particular Signature already contains the RSA public key that will be used
// for verification.
$success = $dsig->LoadSignatureSb($sbXml);
if ($success != 1) {
    print $dsig->LastErrorText . "\n";
    exit;
}

// For each signature, verify and also get the certificate(s) contained within each Signature.
$i = 0;
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.StringArray')
$saCerts = new COM("Chilkat.StringArray");
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");

print 'numSignatures = ' . $dsig->NumSignatures . "\n";

while ($i < $dsig->NumSignatures) {
    // Select the Nth signature by setting the Selector property.
    $dsig->Selector = $i;

    $bVerifyReferenceDigests = 1;
    $bVerified = $dsig->VerifySignature($bVerifyReferenceDigests);
    print 'Signature ' . ($i + 1) . ' verified = ' . $bVerified . "\n";

    // Get the certificates embedded in this signature.
    $saCerts->Clear();
    $success = $dsig->GetCerts($saCerts);
    if ($success == 1) {
        $j = 0;
        while ($j < $saCerts->Count) {
            $success = $cert->LoadFromBase64($saCerts->getString($j));
            if ($success == 1) {
                print '    ' . $cert->SubjectDN . "\n";
            }

            $j = $j + 1;
        }

    }

    $i = $i + 1;
}


?>