Convert a PFX to a Java KeyStore

See more PFX/P12 Examples

Demonstrates Pfx.ToJksObj, which populates a JavaKeyStore with a JKS representation of the PFX, then writes it to a file.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

llSuccess = .F.

loPfx = createobject("CkPfx")

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
lcPassword = "myPfxPassword"
llSuccess = loPfx.LoadPfxFile("qa_data/identity.pfx",lcPassword)
if (llSuccess = .F.) then
    ? loPfx.LastErrorText
    release loPfx
    return
endif

//  Populate a Java KeyStore (JKS) representation of this PFX.  One private-key entry is created for
//  each private key, and the PFX certificates are used to build the certificate chains.  The 1st
//  argument is the alias for the first private-key entry, and the 2nd protects the generated JKS.
//  The JKS password should come from a secure source rather than being hard-coded.
lcJksPassword = "myJksPassword"
loJks = createobject("CkJavaKeyStore")
llSuccess = loPfx.ToJksObj("myalias",lcJksPassword,loJks)
if (llSuccess = .F.) then
    ? loPfx.LastErrorText
    release loPfx
    release loJks
    return
endif

//  The Java KeyStore object can then be written to a .jks file.
llSuccess = loJks.ToFile(lcJksPassword,"qa_output/identity.jks")
if (llSuccess = .F.) then
    ? loJks.LastErrorText
    release loPfx
    release loJks
    return
endif

? "Wrote a Java KeyStore with " + str(loJks.NumPrivateKeys) + " private key(s)."


release loPfx
release loJks