PureBasic

Export an Encrypted PKCS #8 Private Key as Encoded Text

Demonstrates the Chilkat PrivateKey.GetPkcs8EncryptedENC method, which exports the key as password-protected PKCS #8 DER and encodes the encrypted DER as text. The first argument names the binary encoding and the second is the password. The cipher is selected by Pkcs8EncryptAlg.

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: This combines encryption with text encoding: the key is protected by a passphrase and returned as a string, ideal for storing an encrypted key in a text-only medium such as JSON or an environment variable. It is the encrypted counterpart to GetPkcs8ENC. Source the password securely.

Chilkat PureBasic Downloads

Download Chilkat for PureBasic

PureBasic

IncludeFile "CkPrivateKey.pb"

Procedure ChilkatExample()

    success.i = 0

    ;  Load a private key to export.
    privKey.i = CkPrivateKey::ckCreate()
    If privKey.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkPrivateKey::ckLoadPemFile(privKey,"qa_data/private.pem")
    If success = 0
        Debug CkPrivateKey::ckLastErrorText(privKey)
        CkPrivateKey::ckDispose(privKey)
        ProcedureReturn
    EndIf

    ;  The key password is not hard-coded in a real application; obtain it from an interactive
    ;  prompt, environment variable, or a secrets vault.
    password.s = "myKeyPassword"

    ;  Export as password-protected PKCS #8 DER, then encode the encrypted DER as text.  The 1st
    ;  argument names the binary encoding and the 2nd is the password.  The cipher is selected by the
    ;  Pkcs8EncryptAlg property.
    encoded.s = CkPrivateKey::ckGetPkcs8EncryptedENC(privKey,"base64",password)
    If CkPrivateKey::ckLastMethodSuccess(privKey) = 0
        Debug CkPrivateKey::ckLastErrorText(privKey)
        CkPrivateKey::ckDispose(privKey)
        ProcedureReturn
    EndIf

    Debug encoded


    CkPrivateKey::ckDispose(privKey)


    ProcedureReturn
EndProcedure