Export Selected PFX Contents as PEM

See more PFX/P12 Examples

Demonstrates Pfx.ToPemEx, which exports selected PFX contents as PEM-formatted text with control over which parts are included and how private keys are encrypted.

#include <C_CkPfx.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkPfx pfx;
    const char *password;
    BOOL bExtendedAttrs;
    BOOL bNoKeys;
    BOOL bNoCerts;
    BOOL bNoCaCerts;
    const char *keyPassword;
    const char *pem;

    success = FALSE;

    pfx = CkPfx_Create();

    //  The file path is relative to the application's current working directory.  An absolute path
    //  may also be used.  Supply the path appropriate to your own environment.
    //  The PFX password should come from a secure source rather than being hard-coded.
    password = "myPfxPassword";
    success = CkPfx_LoadPfxFile(pfx,"qa_data/identity.pfx",password);
    if (success == FALSE) {
        printf("%s\n",CkPfx_lastErrorText(pfx));
        CkPfx_Dispose(pfx);
        return;
    }

    //  Export selected PFX contents as PEM-formatted text.  The boolean arguments control what is
    //  included: extended attributes, and whether to omit private keys, certificates, or CA certificates.
    bExtendedAttrs = FALSE;
    bNoKeys = FALSE;
    bNoCerts = FALSE;
    bNoCaCerts = FALSE;

    //  Encrypt the exported private keys.  Supported algorithms include aes128, aes192, aes256, and 3des;
    //  leave the algorithm empty for unencrypted keys.  The key password should come from a secure source.
    keyPassword = "myKeyPassword";
    pem = CkPfx_toPemEx(pfx,bExtendedAttrs,bNoKeys,bNoCerts,bNoCaCerts,"aes256",keyPassword);
    if (CkPfx_getLastMethodSuccess(pfx) == FALSE) {
        printf("%s\n",CkPfx_lastErrorText(pfx));
        CkPfx_Dispose(pfx);
        return;
    }

    printf("%s\n",pem);


    CkPfx_Dispose(pfx);

    }