Tcl

Save a Private Key as a PKCS #8 PEM File

Demonstrates the Chilkat PrivateKey.SavePkcs8PemFile method, which saves the key as unencrypted PKCS #8 PEM (the PRIVATE KEY label) to a file. The only argument is the destination path.

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: This writes the widely-compatible unencrypted .pem that most modern tooling reads — the text (Base64) form of PKCS #8. It is convenient and portable, but unprotected, so keep the file access-controlled or prefer the encrypted variant for anything that leaves a trusted location.

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

#  Load a private key to export.
set privKey [new_CkPrivateKey]

set success [CkPrivateKey_LoadPemFile $privKey "qa_data/private.pem"]
if {$success == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkPrivateKey $privKey
    exit
}

#  Save as unencrypted PKCS #8 PEM (the "PRIVATE KEY" label).
set success [CkPrivateKey_SavePkcs8PemFile $privKey "qa_output/private_pkcs8.pem"]
if {$success == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkPrivateKey $privKey
    exit
}

puts "Saved."

delete_CkPrivateKey $privKey