PHP

Verify the Timestamp Server Token (if any) while Validating a CMS Signature

Demonstrates how to also validate the timestamp server token (if any) while validating a CMS signature. Chilkat2 PHP

<?php

use Chilkat2\Crypt2;
use Chilkat2\JsonObject;

$crypt = new Crypt2();

// Tell Chilkat to also validate the timestamp token if a timestamp exists in the CMS message's unauthenticated attributes.
$cmsOptions = new JsonObject();
$cmsOptions->UpdateBool('ValidateTimestampTokens', true);
$crypt->CmsOptions = $cmsOptions->Emit();

$outputFile = 'qa_output/original.xml';
$inFile = 'qa_data/p7m/fattura_signature.xml.p7m';

// Verify the signature and extract the contained file, which in this case is XML.
try {
    $crypt->VerifyP7M($inFile, $outputFile);
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

echo "Signature validated.\n";