C

Import a PFX/P12 into the Windows Certificate Stores

See more Certificates Examples

Demonstrates how to import the certificates contained in a .pfx/.p12 to the Windows certificate stores. C

#include <C_CkPfx.h>
#include <C_CkJsonObject.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkPfx pfx;
    BOOL exportable;
    BOOL userProtected;
    BOOL machineKeyset;
    BOOL allowOverwriteKey;
    BOOL allowExport;
    const char *leafStore;
    const char *intermediateStore;
    const char *rootStore;
    HCkJsonObject json;

    success = FALSE;

    pfx = CkPfx_Create();

    success = CkPfx_LoadPfxFile(pfx,"qa_data/pfx/example.p12","p12Password");
    if (success == FALSE) {
        printf("%s\n",CkPfx_lastErrorText(pfx));
        CkPfx_Dispose(pfx);
        return;
    }

    //  See the online reference documentation for more information about the ImportToWindows method.

    //  Mark imported privae keys as exportable.
    exportable = TRUE;

    //  If userProtected is TRUE, the user is to be notified through a dialog box or other method when certain attempts to use this key are made. 
    userProtected = FALSE;

    //  If machineKeyset is TRUE, the private keys are stored under the local computer and not under the current user. 
    machineKeyset = FALSE;

    //  If allowOverwriteKey is TRUE, allow overwrite of the existing key. 
    allowOverwriteKey = FALSE;

    //  If allowExport is TRUE, then the imported key can later be exported back to a PFX.
    //  (It also allows for applications to directly access the private key material.)
    allowExport = TRUE;

    //  Indicate where to import types of certs.
    leafStore = "My";
    intermediateStore = "CertificationAuthority";
    rootStore = "AuthRoot";

    success = CkPfx_ImportToWindows(pfx,exportable,userProtected,machineKeyset,allowOverwriteKey,allowExport,leafStore,intermediateStore,rootStore,"");
    if (success == FALSE) {
        printf("%s\n",CkPfx_lastErrorText(pfx));
        CkPfx_Dispose(pfx);
        return;
    }

    //  Show information about the certificates imported
    json = CkJsonObject_Create();
    CkPfx_GetLastJsonData(pfx,json);

    CkJsonObject_putEmitCompact(json,FALSE);
    printf("%s\n",CkJsonObject_emit(json));

    //  Sample of the last JSON data:

    //  {
    //    "exportable": true,
    //    "userProtected": false,
    //    "machineKeyset": false,
    //    "allowOverwriteKey": false,
    //    "allowExport": true,
    //    "key": [
    //      {
    //        "name": "{F09B755A-1E90-444D-9851-02B86CA14961}",
    //        "storageProvider": "Microsoft Software Key Storage Provider"
    //      }
    //    ],
    //    "cert": [
    //      {
    //        "DN": "...",
    //        "type": "intermediate",
    //        "storeName": "CertificationAuthority",
    //        "imported": true
    //      },
    //      {
    //        "DN": "...",
    //        "type": "root",
    //        "storeName": "AuthRoot",
    //        "imported": true
    //      },
    //      {
    //        "DN": "....",
    //        "type": "leaf",
    //        "storeName": "My",
    //        "keyContainer": "{345D4EAD-B8DD-4150-9A1F-4BC6437E77A2}",
    //        "machineKeyset": true,
    //        "imported": true
    //      }
    //    ]
    //  }

    printf("Success.\n");


    CkPfx_Dispose(pfx);
    CkJsonObject_Dispose(json);

    }