(MFC) Load Particular CA Certs into a Java KeyStore

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates.

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkJavaKeyStore.h>
#include <CkTrustedRoots.h>
#include <CkStringBuilder.h>
#include <CkCert.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkJavaKeyStore jks;

    CkTrustedRoots troots;

    // Load certificates from a file.
    bool success = troots.LoadCaCertsPem("qa_data/curl_cacert.pem");
    if (success != true) {
        strOut.append(troots.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    CkStringBuilder sbDn;
    CkStringBuilder sbAlias;
    bool caseSensitive = false;

    int i = 0;
    int numCerts = troots.get_NumCerts();
    int numAdded = 0;
    while ((i < numCerts)) {
        CkCert *cacert = troots.GetCert(i);
        sbDn.Clear();
        sbDn.Append(cacert->subjectDN());
        if (sbDn.Contains("Entrust.net",caseSensitive) == true) {
            strOut.append(cacert->subjectDN());
            strOut.append("\r\n");

            // The alias is an arbitrary unique string for each cert in the JKS.
            sbAlias.Clear();
            sbAlias.Append("cacert_");
            sbAlias.AppendInt(i + 1);
            jks.AddTrustedCert(*cacert,sbAlias.getAsString());
            numAdded = numAdded + 1;
        }

        delete cacert;
        i = i + 1;
    }

    // Verify the number of certs in the JKS equals the number we added.
    int numJksCerts = jks.get_NumTrustedCerts();
    strOut.append("NumTrustedCerts = ");
    strOut.appendInt(numJksCerts);
    strOut.append("\r\n");
    if (numJksCerts != numAdded) {
        strOut.append("Something is amiss!");
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Save the JKS.
    success = jks.ToFile("myPassword","qa_data/jks/entrust_caCerts.jks");
    if (success != true) {
        strOut.append(jks.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    strOut.append("Success.");
    strOut.append("\r\n");

    // The output of this program when tested was:

    // C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
    // O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
    // C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
    // NumTrustedCerts = 3
    // Success.


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }