Find a PFX Certificate by localKeyId

See more PFX/P12 Examples

Demonstrates Pfx.CertByLocalKeyId, which searches for a certificate whose certificate-bag localKeyId attribute matches a given value and copies it into a Cert object.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

load ./chilkat.dll

set success 0

set pfx [new_CkPfx]

#  The file path is relative to the application's current working directory.  An absolute path
#  may also be used.  Supply the path appropriate to your own environment.
#  The PFX password should come from a secure source rather than being hard-coded.
set password "myPfxPassword"
set success [CkPfx_LoadPfxFile $pfx "qa_data/identity.pfx" $password]
if {$success == 0} then {
    puts [CkPfx_lastErrorText $pfx]
    delete_CkPfx $pfx
    exit
}

#  Find a certificate whose certificate-bag localKeyId attribute matches the given value.  The 2nd
#  argument names the binary representation of the id, such as decimal, base64, or hex.
set cert [new_CkCert]

set success [CkPfx_CertByLocalKeyId $pfx "01" "hex" $cert]
if {$success == 0} then {
    puts [CkPfx_lastErrorText $pfx]
    delete_CkPfx $pfx
    delete_CkCert $cert
    exit
}

puts "Found certificate: [CkCert_subjectCN $cert]"

delete_CkPfx $pfx
delete_CkCert $cert