DokuWiki

CeRTNA formatted XML transactions contain PRIA_DOCUMENT nodes that contain TIFF documents that are formatted as Base64 character strings.

The ValidateBase64DocumentChecksum is intended to be used by a client (agent and/or county) to verify that a document-level checksum calculated locally matches the document-level checksum that was supplied by the alternate party.

A ‘soft-token’ is required to call the ValidateBase64DocumentChecksum web service. Please refer to the Login web service documentation for additional details.

Request Endpoint

Request Body

This endpoint accepts request body parameters using an application/json format.

Request Headers

JSON Request Parameters

See comments for example of how to calculate a SHA3 checksum and convert it to a Base64 string. |

JSON Response Parameters

As noted, any exception condition, for example, missing soft-token, invalid parameters, etc, will result in a JSON formatted response with a code and message property populated. Successful queries will result in either true or false being returned. True means the checksum supplied matches the checksum on file for the requested document.

Sample Request

Endpoint:

https://apex-prd.certna.org/ValidateBase64DocumentChecksum

Headers:

Content-Type: application/json
access_token: 2fb25264-2739-4db5-895e-db4369256a4a (sample)

Body:

{
  "transaction_type" : "Request",
  "submitter_id" : "99",
  "primary_reference" : "SAMPLE-20180816-001",
  "document_order_index" : "3",
  "checksum_algorithm" : "SHA384",
  "checksum_value" : "be+gn1NM+AZQ+8yC1RBpRuiHOZOGYPBSiDHzZw9OFzonaVNOHzob2n6GxArCaojs"
}

Sample Response:

Status Code: 200

or

Status Code: 500 (When an error occurs.)

{
    "result": true
}

or (example 1)

{
    "Exception": {
        "Code": "DatabaseError",
        "Message": "No transaction found"
    }
}

or (example 2)

{
    "Exception": {
        "Code": "InvalidTransactionStatus",
        "Message": "Invalid transaction type. Alowed values are - Request,Response"
    }
}

Additional Comments

Comments and sample code are provided for reference purposes only and are not intended to show all exception handling conditions and/or completed code blocks.

Comment 1:

The ValidateBase64DocumentChecksum web service requires a Base64 encoded SHA384 checksum to be provided as one of the parameters. Following is a C# / .NET sample code snippet that shows how to generate a SHA3 checksum and convert the hash to a Base64 string:

// The following strBase64DocValue value is retrieved from the DOCUMENT child node of the EMBEDDED_FILE node in the XML document.
 
string strBase64DocValue = " SUkqALLnAAAtVZDKI+R4jhk…";  // Get your Base64 string from the XML doc.
 
string strBase64HashValue = getBase64Hash(strBase64DocValue);  // Use this value in your web service call
 
public static string getBase64Hash(string strB64Source)
{
Encoding u8 = Encoding.UTF8; // We use UTF8 encoding
 
byte[] b64Bytes = u8.GetBytes(strB64Source); // Put the Document B64 string into a byte array
 
byte[] b64HashBytes = SHA384.Create().ComputeHash(b64Bytes);  // Compute the SHA384 hash
 
//Convert the SHA384 hash to a Base64 string
 
string strB64Value = System.Convert.ToBase64String(b64HashBytes, 0, b64HashBytes.Length); 
 
return strB64Value;
}

Comment 2:

Following is a C# / .NET sample code snippet that shows how to call the ValidateBase64DocumentChecksum web service. Your code will supply the values for the various parameters based on the following:

Public static void ValidateBase64DocumentChecksumExample()
{
string strTransactionType = "Request";
string strSubmitterID = "99";
string strPrimaryRef = "SAMPLE-20180816-001";
string strDocIndex = "3";
string strAlgorithm = cbAlgorithm.Text;
string strChecksumValue = tbB64Value.Text;
 
// The following value was obtained from your call to the Login web service.
 
string token = "ab34xyz3...";
 
strURL = null;
client = null;
request = null;
response = null;
 
strURL = "https://apex-prd.certna.org/APEX/Service/APEXPublicServer.svc/ValidateBase64DocumentChecksum";
 
client = new RestClient(strURL);
request = new RestRequest(Method.POST);
 
string strParms = "{\n\t\"transaction_type\" : \"";
strParms += strTransactionType;
strParms += "\",\n\t\"submitter_id\" : \"";
strParms += strSubmitterID;
strParms += "\",\n\t\"primary_reference\" : \"";
strParms += strPrimaryRef;
strParms += "\",\n\t\"document_order_index\" : \"";
strParms += strDocIndex;
strParms += "\",\n\t\"checksum_algorithm\" : \"";
strParms += strAlgorithm;
strParms += "\",\n\t\"checksum_value\" : \"";
strParms += strChecksumValue;
strParms += "\"\n}";
 
request.AddHeader("Cache-Control", "no-cache");
request.AddHeader("Content-Type", "application/json");
request.AddHeader("access_token", token);
request.AddParameter("ValidateBase64DocumentChecksum", strParms, ParameterType.RequestBody);
 
response = client.Execute(request);
 
if (response.IsSuccessful)
{
var jsonResult2 = JsonConvert.DeserializeObject<dynamic>(response.Content);
string strResult = jsonResult2.result;
 
// Do something with the result.
 
}
else
{
var jsonResult2 = JsonConvert.DeserializeObject<dynamic>(response.Content);
string str_ErrorCode = jsonResult2.ToString();
 
// Do something with the error result
}
}

Comment 3:

Please note that before calling the CeRTNA web services you must establish the SecurityProtocol in your ServicePointManager. An example is shown below. The currently recommended protocol is Tls12.

public MainWindow()
{
            InitializeComponent();
            System.Net.ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls |
                                                  SecurityProtocolType.Tls11 |
                                                  SecurityProtocolType.Tls12 |
                                                  SecurityProtocolType.Ssl3;
}

Comment 4:

CeRTNA has posted a simple Visual Studio 2015 WPF/C# project the CeRTNA Wiki that demonstrates how to look up values in an XML file and how to use the Login & ValidateBase64DocumentChecksum web services. The project can be downloaded from the Wiki. As stated earlier, the purpose of the code samples is not to demonstrate well structured code, but rather to provide a very simple, functional sample, that you can use for reference in adding CeRTNA web service calls to your existing application. The code sample is provided as is, however, your production code would be expected to contain more extensive error handling, etc.

Comment 5:

A nice utility for experimenting with web service calls is POSTMAN. You can download a free version of POSTMAN from the following URL: https://www.getpostman.com/apps