PureBasic

Load an Encrypted Private Key from PEM Text

Demonstrates the Chilkat PrivateKey.LoadEncryptedPem method, which loads a private key from PEM text, using a password when the PEM is encrypted. The first argument is the PEM string and the second is the password. Unencrypted PEM is also accepted.

Background: An encrypted PEM protects the key material at rest — a stolen file is useless without the passphrase — which is why encrypted keys are preferred for anything shipped or stored. This loader supplies that passphrase to decrypt a BEGIN ENCRYPTED PRIVATE KEY block (and gracefully handles unencrypted PEM too), so it is a safe default when a PEM might be either. The password should come from a secure source, never a hard-coded literal.

Chilkat PureBasic Downloads

Download Chilkat for PureBasic

PureBasic

IncludeFile "CkPrivateKey.pb"

Procedure ChilkatExample()

    success.i = 0

    ;  Demonstrates the PrivateKey.LoadEncryptedPem method, which loads a private key from PEM text.
    ;  The 1st argument is the PEM string and the 2nd is the password (used when the PEM is
    ;  encrypted).  Unencrypted PEM is also accepted.

    privKey.i = CkPrivateKey::ckCreate()
    If privKey.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ;  The PEM text of an encrypted private key.
    pemText.s = "-----BEGIN ENCRYPTED PRIVATE KEY-----" + Chr(10) + "MIIFHzBJ..." + Chr(10) + "-----END ENCRYPTED PRIVATE KEY-----"

    ;  The key password is not hard-coded in a real application; obtain it from an interactive
    ;  prompt, environment variable, or a secrets vault.
    password.s = "myKeyPassword"

    success = CkPrivateKey::ckLoadEncryptedPem(privKey,pemText,password)
    If success = 0
        Debug CkPrivateKey::ckLastErrorText(privKey)
        CkPrivateKey::ckDispose(privKey)
        ProcedureReturn
    EndIf

    Debug "Loaded a " + CkPrivateKey::ckKeyType(privKey) + " private key."


    CkPrivateKey::ckDispose(privKey)


    ProcedureReturn
EndProcedure