Pascal (Lazarus/Delphi)

Load Certs from Java KeyStore into Trusted CA Roots

See more Java KeyStore (JKS) Examples

Demonstrates how to load a Java KeyStore containing CA root certificates that are to be trusted by the application. This can be done once at the beginning of an application, and then the trusted roots can be activated so that only these root CA certs are trusted by the application for any TLS connections. Pascal (Lazarus/Delphi)

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.TrustedRoots,
  Chilkat.JavaKeyStore,
  Chilkat.Cert;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  jks: TJavaKeyStore;
  password: string;
  troots: TTrustedRoots;
  i: Integer;
  numCerts: Integer;
  cacert: TCert;

begin
  success := False;

  //  This requires the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  jks := TJavaKeyStore.Create;
  jks.VerboseLogging := True;

  password := 'myPassword';
  success := jks.LoadFile(password,'qa_data/jks/entrust_caCerts.jks');
  if (success <> True) then
    begin
      WriteLn(jks.LastErrorText);
      Exit;
    end;

  troots := TTrustedRoots.Create;
  troots.VerboseLogging := True;

  success := troots.AddJavaKeyStore(jks);
  if (success <> True) then
    begin
      WriteLn(troots.LastErrorText);
      Exit;
    end;

  i := 0;
  numCerts := troots.NumCerts;
  while (i < numCerts) do
    begin
      cacert := troots.GetCert(i);
      WriteLn(i + ': ' + cacert.SubjectDN);
      cacert.Free;
      i := i + 1;
    end;

  //  Activate this specific set of trusted roots.
  success := troots.Activate();
  if (success <> True) then
    begin
      WriteLn(troots.LastErrorText);
      Exit;
    end;

  //  Output:

  //  0: C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
  //  1: O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
  //  2: C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority


  jks.Free;
  troots.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.