Pascal (Lazarus/Delphi)

Get Certificates from .p12 / .pfx

See more PFX/P12 Examples

A PKCS12 (.p12 / .pfx) is a container for holding a certificate, its private key, and the certs in the chain of authentication up to and possibly including the root CA cert. A .p12 is not required to contain certain things. It will contain whatever the creator of the .p12 decided to include. It's possible to contain just a private key, just a cert, many certs without private keys, or many certs with many private keys. Usually, a .p12 contains one certificate, its associated private key, and certificates in the chain of authentication. Pascal (Lazarus/Delphi)

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.Cert,
  Chilkat.Pfx;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  pfx: TPfx;
  cert: TCert;
  numCerts: Integer;
  i: Integer;
  issuer: TCert;

begin
  success := False;

  pfx := TPfx.Create;

  success := pfx.LoadPfxFile('qa_data/pfx/test.pfx','pfx_password');
  if (success = False) then
    begin
      WriteLn(pfx.LastErrorText);
      Exit;
    end;

  //  Iterate over the certs contained in the PFX
  cert := TCert.Create;
  numCerts := pfx.NumCerts;
  i := 0;
  while i < numCerts do
    begin

      pfx.CertAt(i,cert);

      WriteLn('--- ' + i + ' ---');
      WriteLn(cert.SubjectDN);
      //  Is this a root cert, or self-signed?
      WriteLn('Root: ' + cert.IsRoot);
      WriteLn('Self-Signed: ' + cert.SelfSigned);

      //  If this certificate is not the root (self-signed), then get the issuer.
      //  If the issuing certificate is contained in the PFX, then it will be found here..
      if (cert.SelfSigned <> True) then
        begin
          issuer := cert.FindIssuer();
          if (cert.LastMethodSuccess = False) then
            begin
              WriteLn('Issuer not found.');
            end
          else
            begin
              WriteLn('Issuer: ' + issuer.SubjectDN);
              issuer.Free;
            end;
        end;
      i := i + 1;
    end;

  //  Usually, the user certificate is at index 0, its issuer is at index 1, etc. until we get to the root certificate.


  pfx.Free;
  cert.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.