Java Requires Chilkat v11.0.0+

Get the Certificate with Private Key from a Java KeyStore

See more Java KeyStore (JKS) Examples

Load a Chilkat certificate object from a Java KeyStore. Chilkat2 Java

import com.chilkatsoft.chilkat2.Cert;
import com.chilkatsoft.chilkat2.CertChain;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Crypt2;
import com.chilkatsoft.chilkat2.JavaKeyStore;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        // Most of the time a .jks contains one certificate with it's associated private key.
        // (Similar to how a .pfx/.p12 usually contains a particular certificate with private key.)
        // This example demonstrates how to get the certificate with private key such that it can be used
        // by other Chilkat classes wherever a cert w/ private key is needed.
        JavaKeyStore jks = new JavaKeyStore();
        String password = "secret";
        try {
            jks.loadFile(password, "qa_data/jks/test_secret.jks");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Make sure we have a private key.
        if (jks.getNumPrivateKeys() < 1) {
            System.out.println("No private key available.");
            return;
        }

        // -------------------------------------------------------------------------
        // Get the certificate chain associated with the 1st (and probably only) private key in the JKS.

        CertChain chain = new CertChain();
        try {
            jks.certChainAt(0, chain);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        Cert cert = new Cert();
        try {
            chain.certAt(0, cert);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Verify again that this cert has a private key.
        if (!cert.hasPrivateKey()) {
            System.out.println("Certificate has no associated private key.");
            return;
        }

        // We now have the cert object with it's associated private key, and it can be used in other Chilkat classes where needed.
        // For example..

        Crypt2 crypt = new Crypt2();
        try {
            crypt.setSigningCert(cert);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // ...
        // ...
    }
}