Find a PFX Certificate by localKeyId

See more PFX/P12 Examples

Demonstrates Pfx.CertByLocalKeyId, which searches for a certificate whose certificate-bag localKeyId attribute matches a given value and copies it into a Cert object.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

#include <C_CkPfx.h>
#include <C_CkCert.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkPfx pfx;
    const char *password;
    HCkCert cert;

    success = FALSE;

    pfx = CkPfx_Create();

    //  The file path is relative to the application's current working directory.  An absolute path
    //  may also be used.  Supply the path appropriate to your own environment.
    //  The PFX password should come from a secure source rather than being hard-coded.
    password = "myPfxPassword";
    success = CkPfx_LoadPfxFile(pfx,"qa_data/identity.pfx",password);
    if (success == FALSE) {
        printf("%s\n",CkPfx_lastErrorText(pfx));
        CkPfx_Dispose(pfx);
        return;
    }

    //  Find a certificate whose certificate-bag localKeyId attribute matches the given value.  The 2nd
    //  argument names the binary representation of the id, such as decimal, base64, or hex.
    cert = CkCert_Create();
    success = CkPfx_CertByLocalKeyId(pfx,"01","hex",cert);
    if (success == FALSE) {
        printf("%s\n",CkPfx_lastErrorText(pfx));
        CkPfx_Dispose(pfx);
        CkCert_Dispose(cert);
        return;
    }

    printf("Found certificate: %s\n",CkCert_subjectCN(cert));


    CkPfx_Dispose(pfx);
    CkCert_Dispose(cert);

    }