Delphi DLL

Convert Cert + Key to PEM and PFX

See more Certificates Examples

This example is based on the following question from a Chilkat customer:

We receive 2 files :

    MyCertificate.p7b
    MyCertificate-privatekey.pkey

We have to transform these certificate like this:

First convert it to PEM like this:

openssl pkcs7 -in MyCertificate.p7b -inform DER -out MyCertificate.pem -print_certs

Now we get MyCertificate.pem

Last step, we need to convert it to pfx file:

openssl pkcs12 -export -inkey moncertificat-privatekey.pkey  -in  moncertificat.pem -out moncertificat.pfx

Is there a way to make all these steps with Chilkat ?

I will be nice to include this directly in our software instead of askig the user to do it manualy.

Delphi DLL

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Cert, PrivateKey;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Boolean;
cert: HCkCert;
privKey: HCkPrivateKey;

begin
success := False;

cert := CkCert_Create();
privKey := CkPrivateKey_Create();

// Load any type of certificate (.cer, .p7b, .pem, etc.) by calling LoadFromFile.
success := CkCert_LoadFromFile(cert,'qa_data/certs/sample_cert_a.cer');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(cert));
    Exit;
  end;

// Load the private key.
// (The various privKey methods that load from a file will automatically detect
// the format.  It doesn't actually matter if you try to load a non-PKCS8 format private key
// by calling LoadPkcs8EncryptedFile -- internally Chilkat will detect the format and will load
// based on what it finds.)
success := CkPrivateKey_LoadPkcs8EncryptedFile(privKey,'qa_data/certs/sample_key_a.pkcs8','password');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkPrivateKey__lastErrorText(privKey));
    Exit;
  end;

// Write the cert as PEM.
success := CkCert_ExportCertPemFile(cert,'qa_output/cert.pem');

// Or get the PEM string directly...
Memo1.Lines.Add(CkCert__exportCertPem(cert));

// Associate the private key with the cert object.
success := CkCert_SetPrivateKey(cert,privKey);
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(cert));
    Exit;
  end;

// Write the cert + private key to a .pfx file.
success := CkCert_ExportToPfxFile(cert,'qa_data/myPfx.pfx','password',True);
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(cert));
    Exit;
  end;

Memo1.Lines.Add('Success.');

CkCert_Dispose(cert);
CkPrivateKey_Dispose(privKey);

end;