Pascal (Lazarus/Delphi)

Export a Certificate's Private Key to Various Formats

See more Certificates Examples

Loads a digital certificate and private key from a PFX file (also known as PKCS#12) and exports the private key to various formats: (1) PKCS8 Encrypted, (2) PKCS8 Encrypted PEM, (3) PKCS8 unencrypted, (4) PKCS8 PEM unencrypted, (5) RSA DER unencrypted, (6) RSA PEM unencrypted, (7) XML. Pascal (Lazarus/Delphi)

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.Cert,
  Chilkat.PrivateKey;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  cert: TCert;
  pfxFilename: string;
  pfxPassword: string;
  privKey: TPrivateKey;
  password: string;
  path: string;

begin
  success := False;

  cert := TCert.Create;

  //  Load from the PFX file
  pfxFilename := '/Users/chilkat/testData/pfx/chilkat_ssl_pwd_is_test.pfx';
  pfxPassword := 'test';

  //  A PFX typically contains certificates in the chain of authentication.
  //  The Chilkat cert object will choose the certificate w/
  //  private key farthest from the root authority cert.
  //  To access all the certificates in a PFX, use the 
  //  Chilkat certificate store object instead.
  success := cert.LoadPfxFile(pfxFilename,pfxPassword);
  if (success = False) then
    begin
      WriteLn(cert.LastErrorText);
      Exit;
    end;

  //  Get the private key...
  privKey := TPrivateKey.Create;
  success := cert.GetPrivateKey(privKey);
  if (success = False) then
    begin
      WriteLn(cert.LastErrorText);
      Exit;
    end;

  //  Export to various formats:

  password := 'secret';

  //  PKCS8 Encrypted DER
  path := '/Users/chilkat/testData/privkeys/chilkat_pkcs8_enc.der';
  success := privKey.SavePkcs8EncryptedFile(password,path);
  if (success = False) then
    begin
      WriteLn(privKey.LastErrorText);
      Exit;
    end;

  //  PKCS8 Encrypted PEM
  path := '/Users/chilkat/testData/privkeys/chilkat_pkcs8_enc.pem';
  success := privKey.SavePkcs8EncryptedPemFile(password,path);
  if (success = False) then
    begin
      WriteLn(privKey.LastErrorText);
      Exit;
    end;

  //  PKCS8 Unencrypted DER
  path := '/Users/chilkat/testData/privkeys/chilkat_pkcs8.der';
  success := privKey.SavePkcs8File(path);
  if (success = False) then
    begin
      WriteLn(privKey.LastErrorText);
      Exit;
    end;

  //  PKCS8 Unencrypted PEM
  path := '/Users/chilkat/testData/privkeys/chilkat_pkcs8.pem';
  success := privKey.SavePkcs8PemFile(path);
  if (success = False) then
    begin
      WriteLn(privKey.LastErrorText);
      Exit;
    end;

  //   RSA DER (unencrypted)
  path := '/Users/chilkat/testData/privkeys/chilkat_rsa.der';
  success := privKey.SavePkcs1File(path);
  if (success = False) then
    begin
      WriteLn(privKey.LastErrorText);
      Exit;
    end;

  //  RSA PEM (unencrypted)
  path := '/Users/chilkat/testData/privkeys/chilkat_rsa.pem';
  success := privKey.SavePemFile(path);
  if (success = False) then
    begin
      WriteLn(privKey.LastErrorText);
      Exit;
    end;

  //  XML (unencrypted)
  path := '/Users/chilkat/testData/privkeys/chilkat.xml';
  success := privKey.SaveXmlFile(path);
  if (success = False) then
    begin
      WriteLn(privKey.LastErrorText);
      Exit;
    end;

  WriteLn('Private key exported to various formats.');


  cert.Free;
  privKey.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.