(Delphi DLL) Convert Java KeyStore to PEM

Loads a Java keystore file and saves the trusted certificate entries to a PEM file.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, FileAccess, JavaKeyStore, Cert;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Boolean;
jks: HCkJavaKeyStore;
jksPassword: PWideChar;
fac: HCkFileAccess;
numCerts: Integer;
cert: HCkCert;
pem: PWideChar;
i: Integer;

begin
success := False;

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

jks := CkJavaKeyStore_Create();

jksPassword := 'myJksPassword';

// Load the Java keystore from a file.  The JKS file password is used
// to verify the keyed digest that is found at the very end of the keystore.
// It verifies that the keystore has not been modified.
success := CkJavaKeyStore_LoadFile(jks,jksPassword,'/someDir/keyStore.jks');
if (success = False) then
  begin
    Memo1.Lines.Add(CkJavaKeyStore__lastErrorText(jks));
    Exit;
  end;

// Open/create the output PEM file. 
// This example uses Chilkat's file access class for writing the output file.
// You may replace the file I/O lines of code with whatever is most convenient for you.
fac := CkFileAccess_Create();
success := CkFileAccess_OpenForWrite(fac,'/pemFiles/caCerts.pem');
if (success = False) then
  begin
    Memo1.Lines.Add(CkFileAccess__lastErrorText(fac));
    Exit;
  end;

numCerts := CkJavaKeyStore_getNumTrustedCerts(jks);

cert := CkCert_Create();

// Iterate over the trusted certs, get the PEM for each,
// and append it to the output file.
i := 0;
while i < numCerts do
  begin
    CkJavaKeyStore_TrustedCertAt(jks,i,cert);

    // Get the certificate in PEM format.  
    pem := CkCert__exportCertPem(cert);

    // Append the PEM string to the open file.
    success := CkFileAccess_AppendText(fac,pem,'utf-8');
    if (success <> True) then
      begin
        Memo1.Lines.Add(CkFileAccess__lastErrorText(fac));
        Exit;
      end;

    i := i + 1;
  end;

// Close the output file.
CkFileAccess_FileClose(fac);

Memo1.Lines.Add('Trusted certificates saved to PEM.');

CkJavaKeyStore_Dispose(jks);
CkFileAccess_Dispose(fac);
CkCert_Dispose(cert);

end;