Java

Load Particular CA Certs into a Java KeyStore

See more Java KeyStore (JKS) Examples

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates. Chilkat2 Java

import com.chilkatsoft.chilkat2.Cert;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.JavaKeyStore;
import com.chilkatsoft.chilkat2.StringBuilder;
import com.chilkatsoft.chilkat2.TrustedRoots;

public class ChilkatExample {

    public static void main(String[] args) {
        // This requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        JavaKeyStore jks = new JavaKeyStore();

        TrustedRoots troots = new TrustedRoots();

        // Load certificates from a file.
        try {
            troots.loadCaCertsPem("qa_data/curl_cacert.pem");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        StringBuilder sbDn = new StringBuilder();
        StringBuilder sbAlias = new StringBuilder();
        boolean caseSensitive = false;

        int i = 0;
        int numCerts = troots.getNumCerts();
        int numAdded = 0;
        while (i < numCerts) {
ERROR: Method not in Chilkat2 Java: TrustedRoots.GetCert
            Cert cacert = troots.ERROR();
            sbDn.clear();
            sbDn.append(cacert.getSubjectDN());
            if (sbDn.contains("Entrust.net", caseSensitive)) {
                System.out.println(cacert.getSubjectDN());

                // The alias is an arbitrary unique string for each cert in the JKS.
                sbAlias.clear();
                sbAlias.append("cacert_");
                sbAlias.appendInt(i + 1);
                jks.addTrustedCert(cacert, sbAlias.getAsString());
                numAdded = numAdded + 1;
            }

            cacert.close();
            i = i + 1;
        }

        // Verify the number of certs in the JKS equals the number we added.
        int numJksCerts = jks.getNumTrustedCerts();
        System.out.println("NumTrustedCerts = " + numJksCerts);
        if (numJksCerts != numAdded) {
            System.out.println("Something is amiss!");
            return;
        }

        // Save the JKS.
        try {
            jks.toFile("myPassword", "qa_data/jks/entrust_caCerts.jks");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        System.out.println("Success.");

        // The output of this program when tested was:

        // C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
        // O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
        // C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
        // NumTrustedCerts = 3
        // Success.
    }
}