Export Selected PFX Contents as PEM

See more PFX/P12 Examples

Demonstrates Pfx.ToPemEx, which exports selected PFX contents as PEM-formatted text with control over which parts are included and how private keys are encrypted.

#include <CkPfxW.h>

void ChilkatSample(void)
    {
    bool success = false;

    CkPfxW pfx;

    //  The file path is relative to the application's current working directory.  An absolute path
    //  may also be used.  Supply the path appropriate to your own environment.
    //  The PFX password should come from a secure source rather than being hard-coded.
    const wchar_t *password = L"myPfxPassword";
    success = pfx.LoadPfxFile(L"qa_data/identity.pfx",password);
    if (success == false) {
        wprintf(L"%s\n",pfx.lastErrorText());
        return;
    }

    //  Export selected PFX contents as PEM-formatted text.  The boolean arguments control what is
    //  included: extended attributes, and whether to omit private keys, certificates, or CA certificates.
    bool bExtendedAttrs = false;
    bool bNoKeys = false;
    bool bNoCerts = false;
    bool bNoCaCerts = false;

    //  Encrypt the exported private keys.  Supported algorithms include aes128, aes192, aes256, and 3des;
    //  leave the algorithm empty for unencrypted keys.  The key password should come from a secure source.
    const wchar_t *keyPassword = L"myKeyPassword";
    const wchar_t *pem = pfx.toPemEx(bExtendedAttrs,bNoKeys,bNoCerts,bNoCaCerts,L"aes256",keyPassword);
    if (pfx.get_LastMethodSuccess() == false) {
        wprintf(L"%s\n",pfx.lastErrorText());
        return;
    }

    wprintf(L"%s\n",pem);
    }