Convert a PFX to a Java KeyStore

See more PFX/P12 Examples

Demonstrates Pfx.ToJksObj, which populates a JavaKeyStore with a JKS representation of the PFX, then writes it to a file.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    const pfx = try chilkat.Pfx.init();
    defer pfx.deinit();

    // The file path is relative to the application's current working directory.  An absolute path
    // may also be used.  Supply the path appropriate to your own environment.
    // The PFX password should come from a secure source rather than being hard-coded.
    const password = "myPfxPassword";
    pfx.loadPfxFile("qa_data/identity.pfx", password) catch {
        std.debug.print("{s}\n", .{try pfx.getLastErrorText(alloc)});
        return;
    };

    // Populate a Java KeyStore (JKS) representation of this PFX.  One private-key entry is created for
    // each private key, and the PFX certificates are used to build the certificate chains.  The 1st
    // argument is the alias for the first private-key entry, and the 2nd protects the generated JKS.
    // The JKS password should come from a secure source rather than being hard-coded.
    const jks_password = "myJksPassword";
    const jks = try chilkat.JavaKeyStore.init();
    defer jks.deinit();
    pfx.toJksObj("myalias", jks_password, jks) catch {
        std.debug.print("{s}\n", .{try pfx.getLastErrorText(alloc)});
        return;
    };

    // The Java KeyStore object can then be written to a .jks file.
    jks.toFile(jks_password, "qa_output/identity.jks") catch {
        std.debug.print("{s}\n", .{try jks.getLastErrorText(alloc)});
        return;
    };

    std.debug.print("Wrote a Java KeyStore with {d} private key(s).\n", .{jks.getNumPrivateKeys()});
}