Export Selected PFX Contents as PEM

See more PFX/P12 Examples

Demonstrates Pfx.ToPemEx, which exports selected PFX contents as PEM-formatted text with control over which parts are included and how private keys are encrypted.

IncludeFile "CkPfx.pb"

Procedure ChilkatExample()

    success.i = 0

    pfx.i = CkPfx::ckCreate()
    If pfx.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ;  The file path is relative to the application's current working directory.  An absolute path
    ;  may also be used.  Supply the path appropriate to your own environment.
    ;  The PFX password should come from a secure source rather than being hard-coded.
    password.s = "myPfxPassword"
    success = CkPfx::ckLoadPfxFile(pfx,"qa_data/identity.pfx",password)
    If success = 0
        Debug CkPfx::ckLastErrorText(pfx)
        CkPfx::ckDispose(pfx)
        ProcedureReturn
    EndIf

    ;  Export selected PFX contents as PEM-formatted text.  The boolean arguments control what is
    ;  included: extended attributes, and whether to omit private keys, certificates, or CA certificates.
    bExtendedAttrs.i = 0
    bNoKeys.i = 0
    bNoCerts.i = 0
    bNoCaCerts.i = 0

    ;  Encrypt the exported private keys.  Supported algorithms include aes128, aes192, aes256, and 3des;
    ;  leave the algorithm empty for unencrypted keys.  The key password should come from a secure source.
    keyPassword.s = "myKeyPassword"
    pem.s = CkPfx::ckToPemEx(pfx,bExtendedAttrs,bNoKeys,bNoCerts,bNoCaCerts,"aes256",keyPassword)
    If CkPfx::ckLastMethodSuccess(pfx) = 0
        Debug CkPfx::ckLastErrorText(pfx)
        CkPfx::ckDispose(pfx)
        ProcedureReturn
    EndIf

    Debug pem


    CkPfx::ckDispose(pfx)


    ProcedureReturn
EndProcedure