Tcl

Load a Private Key from BinData (Any Format)

Demonstrates the Chilkat PrivateKey.LoadAnyFormat method, which loads a private key by inspecting the bytes in a BinData. The first argument is the BinData and the second is the password (used if the detected key is encrypted).

Note: The file path is relative to the application's current working directory. Absolute paths may also be used. Supply the path to your own key file.

Background: When you have key bytes in memory but do not know their exact format — downloaded, decrypted, or pulled from a database — this figures it out for you, recognizing PKCS #1/#8 DER, encrypted PKCS #8, PEM, JWK, Chilkat XML, Microsoft formats, and more. It removes the guesswork of choosing a specific loader, at the small cost of the detection step. Supply the password so it can decrypt an encrypted key without a second call.

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

#  Demonstrates the PrivateKey.LoadAnyFormat method, which loads a private key by inspecting the
#  bytes in a BinData.  The 1st argument is the BinData and the 2nd is the password (used if the
#  detected key is encrypted).

set bd [new_CkBinData]

set success [CkBinData_LoadFile $bd "qa_data/some_private_key"]
if {$success == 0} then {
    puts [CkBinData_lastErrorText $bd]
    delete_CkBinData $bd
    exit
}

set privKey [new_CkPrivateKey]

#  The key password is not hard-coded in a real application; obtain it from an interactive
#  prompt, environment variable, or a secrets vault.
set password "myKeyPassword"

#  Chilkat auto-detects the representation: PKCS #1/#8 DER, encrypted PKCS #8, PEM, JWK,
#  Chilkat XML, Microsoft formats, and more.
set success [CkPrivateKey_LoadAnyFormat $privKey $bd $password]
if {$success == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkBinData $bd
    delete_CkPrivateKey $privKey
    exit
}

puts "Loaded a [CkPrivateKey_keyType $privKey] private key."

delete_CkBinData $bd
delete_CkPrivateKey $privKey