(PHP ActiveX) Verify the Timestamp Server Token (if any) while Validating a CMS Signature

Demonstrates how to also validate the timestamp server token (if any) while validating a CMS signature.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

$crypt = new COM("Chilkat.Crypt2");

// Tell Chilkat to also validate the timestamp token if a timestamp exists in the CMS message's unauthenticated attributes.
$cmsOptions = new COM("Chilkat.JsonObject");
$cmsOptions->UpdateBool('ValidateTimestampTokens',1);
$crypt->CmsOptions = $cmsOptions->emit();

$outputFile = 'qa_output/original.xml';
$inFile = 'qa_data/p7m/fattura_signature.xml.p7m';

// Verify the signature and extract the contained file, which in this case is XML.
$success = $crypt->VerifyP7M($inFile,$outputFile);
if ($success == 0) {
    print $crypt->LastErrorText . "\n";
    exit;
}

print 'Signature validated.' . "\n";

?>