Convert a PFX to a Java KeyStore

See more PFX/P12 Examples

Demonstrates Pfx.ToJksObj, which populates a JavaKeyStore with a JKS representation of the PFX, then writes it to a file.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoPfx
    String sPassword
    String sJksPassword
    Variant vJks
    Handle hoJks
    String sTemp1
    Integer iTemp1

    Move False To iSuccess

    Get Create (RefClass(cComChilkatPfx)) To hoPfx
    If (Not(IsComObjectCreated(hoPfx))) Begin
        Send CreateComObject of hoPfx
    End

    //  The file path is relative to the application's current working directory.  An absolute path
    //  may also be used.  Supply the path appropriate to your own environment.
    //  The PFX password should come from a secure source rather than being hard-coded.
    Move "myPfxPassword" To sPassword
    Get ComLoadPfxFile Of hoPfx "qa_data/identity.pfx" sPassword To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoPfx To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    //  Populate a Java KeyStore (JKS) representation of this PFX.  One private-key entry is created for
    //  each private key, and the PFX certificates are used to build the certificate chains.  The 1st
    //  argument is the alias for the first private-key entry, and the 2nd protects the generated JKS.
    //  The JKS password should come from a secure source rather than being hard-coded.
    Move "myJksPassword" To sJksPassword
    Get Create (RefClass(cComChilkatJavaKeyStore)) To hoJks
    If (Not(IsComObjectCreated(hoJks))) Begin
        Send CreateComObject of hoJks
    End
    Get pvComObject of hoJks to vJks
    Get ComToJksObj Of hoPfx "myalias" sJksPassword vJks To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoPfx To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    //  The Java KeyStore object can then be written to a .jks file.
    Get ComToFile Of hoJks sJksPassword "qa_output/identity.jks" To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoJks To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComNumPrivateKeys Of hoJks To iTemp1
    Showln "Wrote a Java KeyStore with " iTemp1 " private key(s)."


End_Procedure