Delphi ActiveX

Find a Certificate by it's SHA-1 Thumbprint

See more Cert Store Examples

Finds a certificate by it's SHA-1 hex thumbprint.

Note: This example requires Chilkat v10.1.2 or later.

Delphi ActiveX

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Integer;
certStore: TChilkatCertStore;
thumbprint: WideString;
bReadOnly: Integer;
json: TChilkatJsonObject;
cert: TChilkatCert;
certStorePem: TChilkatCertStore;

begin
success := 0;

certStore := TChilkatCertStore.Create(Self);

thumbprint := '12c1dd8015f3f03f7b1fa619dc24e2493ca8b4b2';

// This opens the Current User certificate store on Windows,
// On MacOS and iOS it opens the default Keychain.
bReadOnly := 1;
success := certStore.OpenCurrentUserStore(bReadOnly);
if (success = 0) then
  begin
    Memo1.Lines.Add(certStore.LastErrorText);
    Exit;
  end;

// Find the certificate having a specific SHA1 thumbprint.
json := TChilkatJsonObject.Create(Self);
json.UpdateString('thumbprint',thumbprint);

cert := TChilkatCert.Create(Self);
success := certStore.FindCert(json.ControlInterface,cert.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add('Failed to find the certificate.');
    Exit;
  end;

Memo1.Lines.Add('Found: ' + cert.SubjectCN);

// -------------------------------------------------------------------------------------
// Alternatively, one could load a certificate store object with certs from a PEM file,
// and do the same thing..
certStorePem := TChilkatCertStore.Create(Self);

success := certStorePem.LoadPemFile('pemFiles/certificates.pem');
if (success = 0) then
  begin
    Memo1.Lines.Add(certStorePem.LastErrorText);
    Exit;
  end;

success := certStore.FindCert(json.ControlInterface,cert.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add('Failed to find the certificate.');
    Exit;
  end;

Memo1.Lines.Add('Found: ' + cert.SubjectCN);
end;