SQL Server

Export an Encrypted PKCS #8 Private Key as Encoded Text

Demonstrates the Chilkat PrivateKey.GetPkcs8EncryptedENC method, which exports the key as password-protected PKCS #8 DER and encodes the encrypted DER as text. The first argument names the binary encoding and the second is the password. The cipher is selected by Pkcs8EncryptAlg.

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: This combines encryption with text encoding: the key is protected by a passphrase and returned as a string, ideal for storing an encrypted key in a text-only medium such as JSON or an environment variable. It is the encrypted counterpart to GetPkcs8ENC. Source the password securely.

Chilkat SQL Server Downloads

Download Chilkat for SQL Server

SQL Server

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @success int
    SELECT @success = 0

    --  Load a private key to export.
    DECLARE @privKey int
    EXEC @hr = sp_OACreate 'Chilkat.PrivateKey', @privKey OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    EXEC sp_OAMethod @privKey, 'LoadPemFile', @success OUT, 'qa_data/private.pem'
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @privKey, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @privKey
        RETURN
      END

    --  The key password is not hard-coded in a real application; obtain it from an interactive
    --  prompt, environment variable, or a secrets vault.
    DECLARE @password nvarchar(4000)
    SELECT @password = 'myKeyPassword'

    --  Export as password-protected PKCS #8 DER, then encode the encrypted DER as text.  The 1st
    --  argument names the binary encoding and the 2nd is the password.  The cipher is selected by the
    --  Pkcs8EncryptAlg property.
    DECLARE @encoded nvarchar(4000)
    EXEC sp_OAMethod @privKey, 'GetPkcs8EncryptedENC', @encoded OUT, 'base64', @password
    EXEC sp_OAGetProperty @privKey, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 = 0
      BEGIN
        EXEC sp_OAGetProperty @privKey, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @privKey
        RETURN
      END

    PRINT @encoded

    EXEC @hr = sp_OADestroy @privKey


END
GO