Rust Requires Chilkat v11.0.0+

Get the Certificate with Private Key from a Java KeyStore

See more Java KeyStore (JKS) Examples

Load a Chilkat certificate object from a Java KeyStore. Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Most of the time a .jks contains one certificate with it's associated private key.
// (Similar to how a .pfx/.p12 usually contains a particular certificate with private key.)
// This example demonstrates how to get the certificate with private key such that it can be used
// by other Chilkat classes wherever a cert w/ private key is needed.
let jks = chilkat::JavaKeyStore::new();
let password = "secret".to_string();
if jks.load_file(&password, "qa_data/jks/test_secret.jks").is_err() {
    println!("{}", jks.last_error_text());
    return;
}

// Make sure we have a private key.
if jks.num_private_keys() < 1 {
    println!("No private key available.");
    return;
}

// -------------------------------------------------------------------------
// Get the certificate chain associated with the 1st (and probably only) private key in the JKS.

let chain = chilkat::CertChain::new();
if jks.cert_chain_at(0, &chain).is_err() {
    println!("{}", jks.last_error_text());
    return;
}

let cert = chilkat::Cert::new();
if chain.cert_at(0, &cert).is_err() {
    println!("{}", chain.last_error_text());
    return;
}

// Verify again that this cert has a private key.
if !cert.has_private_key() {
    println!("Certificate has no associated private key.");
    return;
}

// We now have the cert object with it's associated private key, and it can be used in other Chilkat classes where needed.
// For example..

let crypt = chilkat::Crypt2::new();
if crypt.set_signing_cert(&cert).is_err() {
    println!("{}", crypt.last_error_text());
    return;
}

// ...
// ...