Zig Requires Chilkat v11.0.0+

Get the Certificate with Private Key from a Java KeyStore

See more Java KeyStore (JKS) Examples

Load a Chilkat certificate object from a Java KeyStore. Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Most of the time a .jks contains one certificate with it's associated private key.
    // (Similar to how a .pfx/.p12 usually contains a particular certificate with private key.)
    // This example demonstrates how to get the certificate with private key such that it can be used
    // by other Chilkat classes wherever a cert w/ private key is needed.
    const jks = try chilkat.JavaKeyStore.init();
    defer jks.deinit();
    const password = "secret";
    jks.loadFile(password, "qa_data/jks/test_secret.jks") catch {
        std.debug.print("{s}\n", .{try jks.getLastErrorText(alloc)});
        return;
    };

    // Make sure we have a private key.
    if (jks.getNumPrivateKeys() < 1) {
        std.debug.print("No private key available.\n", .{});
        return;
    }

    // -------------------------------------------------------------------------
    // Get the certificate chain associated with the 1st (and probably only) private key in the JKS.

    const chain = try chilkat.CertChain.init();
    defer chain.deinit();
    jks.certChainAt(0, chain) catch {
        std.debug.print("{s}\n", .{try jks.getLastErrorText(alloc)});
        return;
    };

    const cert = try chilkat.Cert.init();
    defer cert.deinit();
    chain.certAt(0, cert) catch {
        std.debug.print("{s}\n", .{try chain.getLastErrorText(alloc)});
        return;
    };

    // Verify again that this cert has a private key.
    if (!cert.hasPrivateKey()) {
        std.debug.print("Certificate has no associated private key.\n", .{});
        return;
    }

    // We now have the cert object with it's associated private key, and it can be used in other Chilkat classes where needed.
    // For example..

    const crypt = try chilkat.Crypt2.init();
    defer crypt.deinit();
    crypt.setSigningCert(cert) catch {
        std.debug.print("{s}\n", .{try crypt.getLastErrorText(alloc)});
        return;
    };

    // ...
    // ...
}