Delphi ActiveX

Export a Private Key as PKCS #8 PEM

Demonstrates the Chilkat PrivateKey.GetPkcs8Pem method, which exports the loaded key as unencrypted PKCS #8 PEM (-----BEGIN PRIVATE KEY-----). It takes no arguments.

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: PKCS #8 is the modern, algorithm-independent container — the same PRIVATE KEY PEM wrapper holds RSA, EC, or Ed25519 keys alike, which is why it is the format most current tooling expects. Being unencrypted, the PEM carries the key material in the clear, so treat the output as sensitive. Use GetPkcs8EncryptedPem when the exported key needs a passphrase.

Chilkat Delphi ActiveX Downloads

Download Chilkat for Delphi ActiveX

Delphi ActiveX

var
success: Integer;
privKey: TPrivateKey;
pem: WideString;

begin
success := 0;

//  Load a private key to export.
privKey := TPrivateKey.Create(Self);
success := privKey.LoadPemFile('qa_data/private.pem');
if (success = 0) then
  begin
    Memo1.Lines.Add(privKey.LastErrorText);
    Exit;
  end;

//  Export as unencrypted PKCS #8 PEM ("-----BEGIN PRIVATE KEY-----").  PKCS #8 is an
//  algorithm-independent container that works for RSA, EC, and Ed25519.
pem := privKey.GetPkcs8Pem();
if (privKey.LastMethodSuccess = 0) then
  begin
    Memo1.Lines.Add(privKey.LastErrorText);
    Exit;
  end;
Memo1.Lines.Add(pem);