Convert a PFX to a Java KeyStore

See more PFX/P12 Examples

Demonstrates Pfx.ToJksObj, which populates a JavaKeyStore with a JKS representation of the PFX, then writes it to a file.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

#import <CkoPfx.h>
#import <NSString.h>
#import <CkoJavaKeyStore.h>

BOOL success = NO;

CkoPfx *pfx = [[CkoPfx alloc] init];

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
NSString *password = @"myPfxPassword";
success = [pfx LoadPfxFile: @"qa_data/identity.pfx" password: password];
if (success == NO) {
    NSLog(@"%@",pfx.LastErrorText);
    return;
}

//  Populate a Java KeyStore (JKS) representation of this PFX.  One private-key entry is created for
//  each private key, and the PFX certificates are used to build the certificate chains.  The 1st
//  argument is the alias for the first private-key entry, and the 2nd protects the generated JKS.
//  The JKS password should come from a secure source rather than being hard-coded.
NSString *jksPassword = @"myJksPassword";
CkoJavaKeyStore *jks = [[CkoJavaKeyStore alloc] init];
success = [pfx ToJksObj: @"myalias" password: jksPassword jksObj: jks];
if (success == NO) {
    NSLog(@"%@",pfx.LastErrorText);
    return;
}

//  The Java KeyStore object can then be written to a .jks file.
success = [jks ToFile: jksPassword path: @"qa_output/identity.jks"];
if (success == NO) {
    NSLog(@"%@",jks.LastErrorText);
    return;
}

NSLog(@"%@%d%@",@"Wrote a Java KeyStore with ",[jks.NumPrivateKeys intValue],@" private key(s).");