Convert a PFX to a Java KeyStore

See more PFX/P12 Examples

Demonstrates Pfx.ToJksObj, which populates a JavaKeyStore with a JKS representation of the PFX, then writes it to a file.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

var
success: Integer;
pfx: TChilkatPfx;
password: WideString;
jksPassword: WideString;
jks: TChilkatJavaKeyStore;

begin
success := 0;

pfx := TChilkatPfx.Create(Self);

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
password := 'myPfxPassword';
success := pfx.LoadPfxFile('qa_data/identity.pfx',password);
if (success = 0) then
  begin
    Memo1.Lines.Add(pfx.LastErrorText);
    Exit;
  end;

//  Populate a Java KeyStore (JKS) representation of this PFX.  One private-key entry is created for
//  each private key, and the PFX certificates are used to build the certificate chains.  The 1st
//  argument is the alias for the first private-key entry, and the 2nd protects the generated JKS.
//  The JKS password should come from a secure source rather than being hard-coded.
jksPassword := 'myJksPassword';
jks := TChilkatJavaKeyStore.Create(Self);
success := pfx.ToJksObj('myalias',jksPassword,jks.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(pfx.LastErrorText);
    Exit;
  end;

//  The Java KeyStore object can then be written to a .jks file.
success := jks.ToFile(jksPassword,'qa_output/identity.jks');
if (success = 0) then
  begin
    Memo1.Lines.Add(jks.LastErrorText);
    Exit;
  end;
Memo1.Lines.Add('Wrote a Java KeyStore with ' + IntToStr(jks.NumPrivateKeys) + ' private key(s).');