(PHP Extension) Verify XML Digital Signature

Verifies XML signatures in an XML file.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$sbXml = new CkStringBuilder();
$success = $sbXml->LoadFile('qa_data/xml_dsig_verify/csioz_sample.xml','utf-8');
if ($success != true) {
    print 'Failed to load XML file.' . "\n";
    exit;
}

$dsig = new CkXmlDSig();

// First load the XML containing the signatures to be verified.
$success = $dsig->LoadSignatureSb($sbXml);
if ($success != true) {
    print $dsig->lastErrorText() . "\n";
    exit;
}

// It's possible that an XML document can contain multiple signatures.
// Each can be verified as follows:
$i = 0;
while ($i < $dsig->get_NumSignatures()) {
    // Select the Nth signature by setting the Selector property.
    $dsig->put_Selector($i);

    // The bVerifyReferenceDigests argument determines if we want
    // to also verify each reference digest.  If set to false,
    // then only the SignedInfo part of the Signature is verified.
    $bVerifyReferenceDigests = true;
    $bVerified = $dsig->VerifySignature($bVerifyReferenceDigests);
    print 'Signature ' . ($i + 1) . ' verified = ' . $bVerified . "\n";

    $i = $i + 1;
}


?>