Lua Requires Chilkat v11.0.0+

Get Certificates from .p12 / .pfx

See more PFX/P12 Examples

A PKCS12 (.p12 / .pfx) is a container for holding a certificate, its private key, and the certs in the chain of authentication up to and possibly including the root CA cert. A .p12 is not required to contain certain things. It will contain whatever the creator of the .p12 decided to include. It's possible to contain just a private key, just a cert, many certs without private keys, or many certs with many private keys. Usually, a .p12 contains one certificate, its associated private key, and certificates in the chain of authentication. Lua

local chilkat = require("chilkat")

local pfx = chilkat.Pfx.new()

local success = pfx:load_pfx_file("qa_data/pfx/test.pfx", "pfx_password")
if not success then
    print(pfx.last_error_text)
    return
end

-- Iterate over the certs contained in the PFX
local cert = chilkat.Cert.new()
local numCerts = pfx.num_certs
local i = 0
while i < numCerts do
    pfx:cert_at(i, cert)

    print("--- " .. i .. " ---")
    print(cert.subject_dn)
    -- Is this a root cert, or self-signed?
    print("Root: " .. tostring(cert.is_root))
    print("Self-Signed: " .. tostring(cert.self_signed))

    -- If this certificate is not the root (self-signed), then get the issuer.
    -- If the issuing certificate is contained in the PFX, then it will be found here..
    if not cert.self_signed then
        local issuer = cert:find_issuer()
        if not cert.last_method_success then
            print("Issuer not found.")
        else
            print("Issuer: " .. issuer.subject_dn)
        end
    end

    i = i + 1
end

-- Usually, the user certificate is at index 0, its issuer is at index 1, etc. until we get to the root certificate.