Java

Export a Private Key as PKCS #8 PEM

Demonstrates the Chilkat PrivateKey.GetPkcs8Pem method, which exports the loaded key as unencrypted PKCS #8 PEM (-----BEGIN PRIVATE KEY-----). It takes no arguments.

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: PKCS #8 is the modern, algorithm-independent container — the same PRIVATE KEY PEM wrapper holds RSA, EC, or Ed25519 keys alike, which is why it is the format most current tooling expects. Being unencrypted, the PEM carries the key material in the clear, so treat the output as sensitive. Use GetPkcs8EncryptedPem when the exported key needs a passphrase.

Chilkat Java Downloads

Download Chilkat for Java

Java

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    boolean success = false;

    //  Load a private key to export.
    CkPrivateKey privKey = new CkPrivateKey();
    success = privKey.LoadPemFile("qa_data/private.pem");
    if (success == false) {
        System.out.println(privKey.lastErrorText());
        return;
        }

    //  Export as unencrypted PKCS #8 PEM ("-----BEGIN PRIVATE KEY-----").  PKCS #8 is an
    //  algorithm-independent container that works for RSA, EC, and Ed25519.
    String pem = privKey.getPkcs8Pem();
    if (privKey.get_LastMethodSuccess() == false) {
        System.out.println(privKey.lastErrorText());
        return;
        }

    System.out.println(pem);
  }
}