Load Certificate from PFX (PKCS#12)

Loads a digital certificate (and private key, if available) from a PFX file.(also known as PKCS#12)

 Chilkat Perl Module Downloads for Windows, Linux, and MAC OS X

use chilkat();

$cert = new chilkat::CkCert();

#  Load from the PFX file
$pfxFilename = "/Users/chilkat/testData/pfx/chilkat_ssl_pwd_is_test.pfx";
$pfxPassword = "test";

#  A PFX typically contains certificates in the chain of authentication.
#  The Chilkat cert object will choose the certificate w/
#  private key farthest from the root authority cert.
#  To access all the certificates in a PFX, use the
#  Chilkat certificate store object instead.
$success = $cert->LoadPfxFile($pfxFilename,$pfxPassword);
if ($success != 1) {
    print $cert->lastErrorText() . "\r\n";
    exit;
}

#  Get some information about the digital certificate,
#  then get the private key...

#  DN = "Distinguished Name"
print "SubjectDN:" . $cert->subjectDN() . "\r\n";

print "Common Name:" . $cert->subjectCN() . "\r\n";
print "Issuer Common Name:" . $cert->issuerCN() . "\r\n";

print "Serial Number:" . $cert->serialNumber() . "\r\n";

#  Now for the private key...

# privKey is a CkPrivateKey
$privKey = $cert->ExportPrivateKey();
if ($privKey eq null ) {
    print $cert->lastErrorText() . "\r\n";
    exit;
}

#  The private key object may be used in any Chilkat methods
#  (in other objects/classes) that expect a private key argument.

#  In this case, save the private key to a PKCS8 Encrypted PEM format file:
$pemPassword = "secret";
$pemPath = "/Users/chilkat/testData/pem/chilkat_privKey.pem";
$success = $privKey->SavePkcs8EncryptedPemFile($pemPassword,$pemPath);
if ($success != 1) {
    print $privKey->lastErrorText() . "\r\n";

    exit;
}

print "Private key saved to PKCS8 Encrypted PEM..." . "\r\n";