Xbase++

Enumerate Certificates in a PFX

Demonstrates Pfx.CertAt, which copies the certificate at a zero-based index into a Cert object. The example enumerates all certificates in the PFX.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

Background. Valid indexes are less than NumCerts. Each retrieved certificate is an independent copy that can be inspected or used separately.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oPfx
LOCAL cPassword
LOCAL nNumCerts
LOCAL oCert
LOCAL i

nSuccess := 0

oPfx := CreateObject("Chilkat.Pfx")

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
cPassword := "myPfxPassword"
nSuccess := oPfx:LoadPfxFile("qa_data/identity.pfx", cPassword)
IF (nSuccess == 0)
    ? oPfx:LastErrorText
    oPfx:destroy()
    RETURN
ENDIF

//  Enumerate the certificates in the PFX by zero-based index.  Valid indexes are less than NumCerts.
//  The certificate at index 0 is typically the certificate that has a private key, and the remaining
//  certificates are the others in its certificate chain.
nNumCerts := oPfx:NumCerts
oCert := CreateObject("Chilkat.Cert")

FOR i := 0 TO nNumCerts - 1
    nSuccess := oPfx:CertAt(i, oCert)
    IF (nSuccess == 0)
        ? oPfx:LastErrorText
        oPfx:destroy()
        oCert:destroy()
        RETURN
    ENDIF

    ? "Certificate " + Str(i) + ": " + oCert:SubjectCN
NEXT

oPfx:destroy()
oCert:destroy()