(Tcl) Convert PEM to JKS (Java KeyStore)

Converts a PEM containing private key(s) and certificates into a JKS (Java KeyStore) formatted file.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

set success 0

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set pem [new_CkPem]

# Load the PEM from a file.
# If the PEM is encrypted, provide a password.  Otherwise pass an empty string for the password.
set password "myPassword"
set success [CkPem_LoadPemFile $pem "../myPemFiles/myPem.pem" $password]
if {$success == 0} then {
    puts [CkPem_lastErrorText $pem]
    delete_CkPem $pem
    exit
}

# Note: If the app already has the PEM pre-loaded in a string variable, then load it 
# by calling LoadPem instead.  
set pemContent "... the PEM contents ..."
set success [CkPem_LoadPem $pem $pemContent $password]
# Check for success as before..

# Convert to a JavaKeyStore object.
# The alias, if a non-empty string, will be applied to the 1st private key or 
# certificate.  All other keys and/or certificates will be assigned an auto-generated
# alias.
set alias "anything_I_want_here"

# This is the passord that will be required to access the created JKS.
set jksPassword "myJksSecret"
set jks [new_CkJavaKeyStore]

set success [CkPem_ToJksObj $pem $alias $jksPassword $jks]
if {$success == 0} then {
    puts [CkPem_lastErrorText $pem]
    delete_CkPem $pem
    delete_CkJavaKeyStore $jks
    exit
}

# Save the JKS to a file.  The password passed here is used for the keyed hash of the
# entire JKS file.  This may be different (if desired) than the password for individual private keys
# contained within the JKS.  
set success [CkJavaKeyStore_ToFile $jks $jksPassword "../myJksFiles/myJks.jks"]
if {$success == 0} then {
    puts [CkJavaKeyStore_lastErrorText $jks]
    delete_CkPem $pem
    delete_CkJavaKeyStore $jks
    exit
}


delete_CkPem $pem
delete_CkJavaKeyStore $jks