(PHP Extension) Verify the Timestamp Server Token (if any) while Validating a CMS Signature

Demonstrates how to also validate the timestamp server token (if any) while validating a CMS signature.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux

<?php

include("chilkat.php");

$crypt = new CkCrypt2();

// Tell Chilkat to also validate the timestamp token if a timestamp exists in the CMS message's unauthenticated attributes.
$cmsOptions = new CkJsonObject();
$cmsOptions->UpdateBool('ValidateTimestampTokens',true);
$crypt->put_CmsOptions($cmsOptions->emit());

$outputFile = 'qa_output/original.xml';
$inFile = 'qa_data/p7m/fattura_signature.xml.p7m';

// Verify the signature and extract the contained file, which in this case is XML.
$success = $crypt->VerifyP7M($inFile,$outputFile);
if ($success == false) {
    print $crypt->lastErrorText() . "\n";
    exit;
}

print 'Signature validated.' . "\n";

?>