Delphi ActiveX

Export a PKCS #8 Private Key as Encoded Text

Demonstrates the Chilkat PrivateKey.GetPkcs8ENC method, which exports the key as unencrypted PKCS #8 DER and encodes the DER bytes as text. The only argument names the binary encoding, such as base64 or hex.

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: DER is the compact binary form of a key; this method hands it back as encoded text so it can travel through channels that expect a string — a JSON field, a database column, a config value. It is the string-returning alternative to writing raw DER bytes, and choosing base64 versus hex is just a matter of what the consumer expects. The DER itself is unencrypted, so the encoded text is still sensitive.

Chilkat Delphi ActiveX Downloads

Download Chilkat for Delphi ActiveX

Delphi ActiveX

var
success: Integer;
privKey: TPrivateKey;
encoded: WideString;

begin
success := 0;

//  Load a private key to export.
privKey := TPrivateKey.Create(Self);
success := privKey.LoadPemFile('qa_data/private.pem');
if (success = 0) then
  begin
    Memo1.Lines.Add(privKey.LastErrorText);
    Exit;
  end;

//  Export as unencrypted PKCS #8 DER, then encode the DER bytes as text.  The only argument names
//  the binary encoding, such as "base64" or "hex".
encoded := privKey.GetPkcs8ENC('base64');
if (privKey.LastMethodSuccess = 0) then
  begin
    Memo1.Lines.Add(privKey.LastErrorText);
    Exit;
  end;
Memo1.Lines.Add(encoded);