Export Selected PFX Contents as PEM

See more PFX/P12 Examples

Demonstrates Pfx.ToPemEx, which exports selected PFX contents as PEM-formatted text with control over which parts are included and how private keys are encrypted.

local chilkat = require("chilkat")

local pfx = chilkat.Pfx.new()

-- The file path is relative to the application's current working directory.  An absolute path
-- may also be used.  Supply the path appropriate to your own environment.
-- The PFX password should come from a secure source rather than being hard-coded.
local password = "myPfxPassword"
local success = pfx:load_pfx_file("qa_data/identity.pfx", password)
if not success then
    print(pfx.last_error_text)
    return
end

-- Export selected PFX contents as PEM-formatted text.  The boolean arguments control what is
-- included: extended attributes, and whether to omit private keys, certificates, or CA certificates.
local bExtendedAttrs = false
local bNoKeys = false
local bNoCerts = false
local bNoCaCerts = false

-- Encrypt the exported private keys.  Supported algorithms include aes128, aes192, aes256, and 3des;
-- leave the algorithm empty for unencrypted keys.  The key password should come from a secure source.
local keyPassword = "myKeyPassword"
local pem = pfx:to_pem_ex(bExtendedAttrs, bNoKeys, bNoCerts, bNoCaCerts, "aes256", keyPassword)
if not pfx.last_method_success then
    print(pfx.last_error_text)
    return
end

print(pem)