(PHP ActiveX) Examine KeyInfo Certificate in XML Signature

This example loads signed XML and gets the signing certificate, assuming the certificate is contained in X509Certificate within the KeyInfo.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.XmlDSig')
$dsig = new COM("Chilkat.XmlDSig");
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.StringBuilder')
$sbXml = new COM("Chilkat.StringBuilder");

$success = $sbXml->LoadFile('c:/aaworkarea/elias/3/face_f09006808443a699d1b.xml','utf-8');
if ($success != 1) {
    print 'Failed to load XML file.' . "\n";
    exit;
}

$success = $dsig->LoadSignatureSb($sbXml);
if ($success != 1) {
    print $dsig->LastErrorText . "\n";
    exit;
}

// Get the KeyInfo XML.
// xmlKeyInfo is a Chilkat.Xml
$xmlKeyInfo = $dsig->GetKeyInfo();
if ($dsig->LastMethodSuccess != 1) {
    print $dsig->LastErrorText . "\n";
    exit;
}

print $xmlKeyInfo->getXml() . "\n";
print '----' . "\n";

// Assuming the X509Certificate is in the KeyInfo, it will look like this:

//   <ds:KeyInfo Id="...">
//     <ds:KeyValue>
//     ...  
//     <ds:X509Data>
//       <ds:X509Certificate>MIIHAz...</ds:X509Certificate>
//     </ds:X509Data>
//   </ds:KeyInfo>
$certBase64 = $xmlKeyInfo->getChildContent('*:X509Data|*:X509Certificate');
if ($xmlKeyInfo->LastMethodSuccess != 1) {
    print 'No X509Certificate found in the KeyInfo.' . "\n";
    exit;
}

// Load a certificate object w/ the base64.
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");
$success = $cert->LoadFromBase64($certBase64);
if ($success != 1) {
    print $cert->LastErrorText . "\n";
    exit;
}

// Examine the cert..
print 'SubjectDN: ' . $cert->SubjectDN . "\n";
print 'IssuerDN: ' . $cert->IssuerDN . "\n";
print 'SerialNumber as Decimal: ' . $cert->SerialDecimal . "\n";


?>