(MFC) Backup Windows Current User / Personal Certificates to a .zip

Demonstrates how to backup the certificates in the Windows registry-based Current User certificate store (in the "Personal" Logical Store as seen in certmgr.msc), to a zip archive. Certificates having an exportable private key are exported to .pfx files. Certificates with no private key, or with a non-exportable private key, are exported to .cer files.

Obviously, this example only runs on Windows computers.

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkCertStore.h>
#include <CkZipEntry.h>
#include <CkZip.h>
#include <CkBinData.h>
#include <CkStringBuilder.h>
#include <CkCert.h>

void ChilkatSample(void)
    {
    CkString strOut;

    CkCertStore certStore;

    bool readOnly = true;
    bool success = certStore.OpenCurrentUserStore(readOnly);
    if (!success) {
        strOut.append(certStore.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    const char *pfxPassword = "secret";

    bool allSuccess = true;
    int numSuccess = 0;

    CkZipEntry *entry = 0;
    CkZip zip;
    zip.NewZip("qa_output/personalCerts.zip");

    CkBinData certData;
    CkStringBuilder sbFilename;

    //  Iterate over the certificates in the Current User store.
    int numCerts = certStore.get_NumCertificates();
    int i = 0;
    while (i < numCerts) {
        CkCert *cert = certStore.GetCertificate(i);
        strOut.append("DN = ");
        strOut.append(cert->subjectDN());
        strOut.append("\r\n");

        sbFilename.SetString("cert");
        sbFilename.AppendInt(i + 1);

        bool bHasPrivateKey = cert->HasPrivateKey();
        if ((bHasPrivateKey == true) && (cert->get_PrivateKeyExportable() == true)) {
            //  Export to a .pfx
            success = cert->ExportToPfxBd(pfxPassword,true,certData);
            if (success == true) {
                sbFilename.Append(".pfx");
                entry = zip.AppendBd(sbFilename.getAsString(),certData);
                delete entry;
            }

        }
        else {
            //  Export to a .cer
            success = cert->ExportCertDerBd(certData);
            if (success == true) {
                sbFilename.Append(".cer");
                entry = zip.AppendBd(sbFilename.getAsString(),certData);
                delete entry;
            }

        }

        if (success != true) {
            allSuccess = false;
        }
        else {
            numSuccess = numSuccess + 1;
        }

        i = i + 1;
    }

    if (numSuccess > 0) {
        success = zip.WriteZipAndClose();
        if (success != true) {
            strOut.append(zip.lastErrorText());
            strOut.append("\r\n");
            allSuccess = false;
        }

    }

    strOut.append("All success = ");
    strOut.appendInt(allSuccess);
    strOut.append("\r\n");


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }