UJP Eracuni - B2B

$ openssl pkcs12 -in matmul.pfx -nocerts -nodes -out matmul.key
$ openssl rsa -in matmul.key -out matmul_private.key
$ openssl rsa -in matmul.key -pubout -out matmul_public.key
$ openssl pkcs8 -topk8 -inform PEM -in matmul_private.key -outform PEM -nocrypt

matmul_private_pkcs8.key

$serviceUri = "https://betaeracuni.ujp.gov.si/b2b/service.svc";
$singleWsdl = "{$serviceUri}?singlewsdl";
$localCert  = "matmul_public.key";
$localKey   = "matmul_private_pkcs8.key";

$soapClient = new \SoapClient($singleWsdl);

$soapClient = new \SoapClient($singleWsdl, [
    'local_cert' => $localCert,
    'passphrase' => '',
]);

$context = stream_context_create([
    "ssl" => [
        "local_cert" => $localCert,
        "local_pk"   => $localKey,
    ]
]);

$soapClient = new \SoapClient($singleWsdl, ["context" => $context]);

$opts = [
    'ssl' => [
        'ciphers' => 'RC4-SHA',
        'verify_peer' => false,
        'verify_peer_name' => false,
    ]
];
// SOAP 1.2 client
$params = [
    'encoding' => 'UTF-8',
    'verifypeer' => false,
    'verifyhost' => false,
    'soap_version' => SOAP_1_1,
    'trace' => 1,
    'exceptions' => 1,
    "connection_timeout" => 180,
    'stream_context' => stream_context_create($opts),
    'local_cert' => $localCert,
    'passphrase' => '',
];

$soapClient = new \SoapClient($singleWsdl, $params);

$soapClient = new \SoapClient($singleWsdl, [
    'soap_version' => 'SOAP_1_2',
    'location' => $serviceUri,
    'local_cert' => $localCert,
]);

$contextOptions = [
    'ssl' => [
        'local_cert' => $localCert,
        'local_pk' =>  $localKey,
        'SNI_enabled' => true,
        'peer_name' => $wsdl,
    ]
];

$options = [
    "soap_version" => SOAP_1_2,
    "features" => SOAP_SINGLE_ELEMENT_ARRAYS,
    "stream_context" => stream_context_create($contextOptions),
];

$soapClient = new \SoapClient($singleWsdl, $options);

SoapFault exception: [WSDL] SOAP-ERROR: Parsing WSDL: Couldn't load from 'https://betaeracuni.ujp.gov.si/b2b/service.svc?singlewsdl' : failed to load external entity "https://betaeracuni.ujp.gov.si/b2b/service.svc?singlewsdl" in C:\laragon\www\ujp\private\test.php:27 Stack trace: #0 C:\laragon\www\ujp\private\test.php(27): SoapClient->__construct('https://betaera...') #1 {main}

Spura je 22. jan 2021 ob 14:23 izjavil:

Zakaj imas za SSL sifro nastavljeno RC4-SHA? To je anticno sifriranje ki ga zlomi vsak kdor hoce in verjetno UJP ne pusti takega cipher suita.

$ cd certificate/folder
$ openssl pkcs12 -in osebno_potrdilo.pfx -out javni_kljuc.pem -clcerts

<?php

$serviceUri = "https://betaeracuni.ujp.gov.si/b2b/service.svc";
$singleWsdl = "{$serviceUri}?singlewsdl";

/* Certificate creation:
    openssl pkcs12 -in osebno_potrdilo.pfx -out javni_kljuc.pem -clcerts
        here you have to type your password once, and then the new password twice (set+confirm)
        make sure the new password is different than your password, since everybody with access to code will see it.
 */
$params = [
    'local_cert' => 'javni_kljuc.pem',
    'passphrase' => "new_password", // change accordingly
    'trace' => 1,
    'exceptions' => 0
];

$soapClient = new \SoapClient("https://betaeracuni.ujp.gov.si/b2b/service.svc?singlewsdl", $params);

var_dump($soapClient->__getFunctions());