Tcl

Save a Private Key as a Traditional DER File

Demonstrates the Chilkat PrivateKey.SavePkcs1File method, which saves the key using the traditional/preferred unencrypted DER representation. The only argument is the destination path.

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: This writes the older, algorithm-specific DER structure — useful for compatibility with tools that predate or do not accept PKCS #8. For new work, PKCS #8 (SavePkcs8File) is more interoperable. The output is unencrypted, so protect the file accordingly.

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

#  Load a private key to export.
set privKey [new_CkPrivateKey]

set success [CkPrivateKey_LoadPemFile $privKey "qa_data/private.pem"]
if {$success == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkPrivateKey $privKey
    exit
}

#  Save using the traditional/preferred unencrypted DER representation.
set success [CkPrivateKey_SavePkcs1File $privKey "qa_output/private_pkcs1.der"]
if {$success == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkPrivateKey $privKey
    exit
}

puts "Saved."

delete_CkPrivateKey $privKey