PureBasic

Export a PKCS #8 Private Key as Encoded Text

Demonstrates the Chilkat PrivateKey.GetPkcs8ENC method, which exports the key as unencrypted PKCS #8 DER and encodes the DER bytes as text. The only argument names the binary encoding, such as base64 or hex.

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: DER is the compact binary form of a key; this method hands it back as encoded text so it can travel through channels that expect a string — a JSON field, a database column, a config value. It is the string-returning alternative to writing raw DER bytes, and choosing base64 versus hex is just a matter of what the consumer expects. The DER itself is unencrypted, so the encoded text is still sensitive.

Chilkat PureBasic Downloads

Download Chilkat for PureBasic

PureBasic

IncludeFile "CkPrivateKey.pb"

Procedure ChilkatExample()

    success.i = 0

    ;  Load a private key to export.
    privKey.i = CkPrivateKey::ckCreate()
    If privKey.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkPrivateKey::ckLoadPemFile(privKey,"qa_data/private.pem")
    If success = 0
        Debug CkPrivateKey::ckLastErrorText(privKey)
        CkPrivateKey::ckDispose(privKey)
        ProcedureReturn
    EndIf

    ;  Export as unencrypted PKCS #8 DER, then encode the DER bytes as text.  The only argument names
    ;  the binary encoding, such as "base64" or "hex".
    encoded.s = CkPrivateKey::ckGetPkcs8ENC(privKey,"base64")
    If CkPrivateKey::ckLastMethodSuccess(privKey) = 0
        Debug CkPrivateKey::ckLastErrorText(privKey)
        CkPrivateKey::ckDispose(privKey)
        ProcedureReturn
    EndIf

    Debug encoded


    CkPrivateKey::ckDispose(privKey)


    ProcedureReturn
EndProcedure