Rust

Load an Encrypted Private Key from PEM Text

Demonstrates the Chilkat PrivateKey.LoadEncryptedPem method, which loads a private key from PEM text, using a password when the PEM is encrypted. The first argument is the PEM string and the second is the password. Unencrypted PEM is also accepted.

Background: An encrypted PEM protects the key material at rest — a stolen file is useless without the passphrase — which is why encrypted keys are preferred for anything shipped or stored. This loader supplies that passphrase to decrypt a BEGIN ENCRYPTED PRIVATE KEY block (and gracefully handles unencrypted PEM too), so it is a safe default when a PEM might be either. The password should come from a secure source, never a hard-coded literal.

Chilkat Rust Downloads

Download Chilkat for Rust

Rust


// Demonstrates the PrivateKey.LoadEncryptedPem method, which loads a private key from PEM text.
// The 1st argument is the PEM string and the 2nd is the password (used when the PEM is
// encrypted).  Unencrypted PEM is also accepted.

let priv_key = chilkat::PrivateKey::new();

// The PEM text of an encrypted private key.
let pem_text = "-----BEGIN ENCRYPTED PRIVATE KEY-----\nMIIFHzBJ...\n-----END ENCRYPTED PRIVATE KEY-----".to_string();

// The key password is not hard-coded in a real application; obtain it from an interactive
// prompt, environment variable, or a secrets vault.
let password = "myKeyPassword".to_string();

if priv_key.load_encrypted_pem(&pem_text, &password).is_err() {
    println!("{}", priv_key.last_error_text());
    return;
}

println!("Loaded a {} private key.", priv_key.key_type());