Java Requires Chilkat v11.0.0+

Working with PEM Encrypted Private Keys

See more PEM Examples

Demonstrates how to load and save PEM encrypted private keys. Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.FileAccess;
import com.chilkatsoft.chilkat2.Pem;
import com.chilkatsoft.chilkat2.PrivateKey;

public class ChilkatExample {

    public static void main(String[] args) {
        boolean success = false;

        // This example assumes the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        success = false;

        Pem pem = new Pem();

        String pemPassword = "secret";

        // To load a PEM file containing encrypted private keys, simply
        // provide the password.
        try {
            pem.loadPemFile("/Users/chilkat/testData/pem/pemContainingEncryptedPrivateKeys.pem", pemPassword);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        FileAccess fac = new FileAccess();
        String pemText = fac.readEntireTextFile("/Users/chilkat/testData/pem/pemContainingEncryptedPrivateKeys.pem", "utf-8");

        // To load a PEM from a string, call LoadPem instead of LoadPemFile:
        try {
            pem.loadPem(pemText, pemPassword);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // A few notes:
        // The PEM may contain both private keys and certificates (or anything else).
        // The password is utilized for whatever content in the PEM is encrypted.
        // It is OK to have both encrypted and non-encrypted content within a given PEM.

        // PEM private keys can be encrypted in different formats.  The LoadPem and LoadPemFile
        // methods automatically handle the different formats.
        // One format is PKCS8 and is indicated by this delimiter within the PEM:

        // -----BEGIN ENCRYPTED PRIVATE KEY-----
        // MIICoTAbBgkqhkiG9w0BBQMwDgQIfdD0zv24lgkCAggABIICgE0PdHJmRbNs6cBX
        // ...

        // Another format, we'll call "passphrase" looks like this in the PEM:
        // -----BEGIN RSA PRIVATE KEY-----
        // Proc-Type: 4,ENCRYPTED
        // DEK-Info: DES-EDE3-CBC,A4215544D11C5D0C
        //
        // paqy9XRexcSjurHfG0xhCaUD0HrvIdhuC0CbRxxxeMlkLaV6+uT80rBxt2AaibWG
        // ...

        // Show the bit length of each private key:
        int numPrivateKeys = pem.getNumPrivateKeys();
        if (numPrivateKeys == 0) {
            System.out.println(("Error: Expected the PEM to contain private keys."));
            return;
        }

        PrivateKey privKey = new PrivateKey();
        for (int i = 1; i <= numPrivateKeys; i++) {
            pem.privateKeyAt(i - 1, privKey);
            System.out.println(i + ": " + privKey.getBitLength() + " bits");
        }
    }
}