Pascal (Lazarus/Delphi)
Pascal (Lazarus/Delphi)
Export an Encrypted PKCS #8 Private Key as Encoded Text
See more Private Key Examples
Demonstrates the Chilkat PrivateKey.GetPkcs8EncryptedENC method, which exports the key as password-protected PKCS #8 DER and encodes the encrypted DER as text. The first argument names the binary encoding and the second is the password. The cipher is selected by Pkcs8EncryptAlg.
Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.
Background: This combines encryption with text encoding: the key is protected by a passphrase and returned as a string, ideal for storing an encrypted key in a text-only medium such as JSON or an environment variable. It is the encrypted counterpart to
GetPkcs8ENC. Source the password securely.Chilkat Pascal (Lazarus/Delphi) Downloads
program ChilkatDemo;
// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.
{$IFDEF FPC}
{$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}
uses
{$IFDEF UNIX}
cthreads,
{$ENDIF}
SysUtils,
CkDllLoader,
Chilkat.PrivateKey;
// ---------------------------------------------------------------------------
procedure RunDemo;
var
success: Boolean;
privKey: TPrivateKey;
password: string;
encoded: string;
begin
success := False;
// Load a private key to export.
privKey := TPrivateKey.Create;
success := privKey.LoadPemFile('qa_data/private.pem');
if (success = False) then
begin
WriteLn(privKey.LastErrorText);
Exit;
end;
// The key password is not hard-coded in a real application; obtain it from an interactive
// prompt, environment variable, or a secrets vault.
password := 'myKeyPassword';
// Export as password-protected PKCS #8 DER, then encode the encrypted DER as text. The 1st
// argument names the binary encoding and the 2nd is the password. The cipher is selected by the
// Pkcs8EncryptAlg property.
encoded := privKey.GetPkcs8EncryptedENC('base64',password);
if (privKey.LastMethodSuccess = False) then
begin
WriteLn(privKey.LastErrorText);
Exit;
end;
WriteLn(encoded);
privKey.Free;
end;
// ---------------------------------------------------------------------------
begin
try
RunDemo;
except
on E: Exception do
WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
end;
WriteLn;
{$IFDEF MSWINDOWS}
WriteLn('Press Enter to exit...');
ReadLn;
{$ENDIF}
end.