(MFC) Get Certificates from .p12 / .pfx

A PKCS12 (.p12 / .pfx) is a container for holding a certificate, its private key, and the certs in the chain of authentication up to and possibly including the root CA cert. A .p12 is not required to contain certain things. It will contain whatever the creator of the .p12 decided to include. It's possible to contain just a private key, just a cert, many certs without private keys, or many certs with many private keys. Usually, a .p12 contains one certificate, its associated private key, and certificates in the chain of authentication.

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkPfx.h>
#include <CkCert.h>

void ChilkatSample(void)
    {
    CkString strOut;

    CkPfx pfx;

    bool success = pfx.LoadPfxFile("qa_data/pfx/test.pfx","pfx_password");
    if (success == false) {
        strOut.append(pfx.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Iterate over the certs contained in the PFX
    int numCerts = pfx.get_NumCerts();
    int i = 0;
    while (i < numCerts) {
        CkCert *cert = pfx.GetCert(i);

        strOut.append("--- ");
        strOut.appendInt(i);
        strOut.append(" ---");
        strOut.append("\r\n");
        strOut.append(cert->subjectDN());
        strOut.append("\r\n");
        // Is this a root cert, or self-signed?
        strOut.append("Root: ");
        strOut.appendInt(cert->get_IsRoot());
        strOut.append("\r\n");
        strOut.append("Self-Signed: ");
        strOut.appendInt(cert->get_SelfSigned());
        strOut.append("\r\n");

        // If this certificate is not the root (self-signed), then get the issuer.
        // If the issuing certificate is contained in the PFX, then it will be found here..
        if (cert->get_SelfSigned() != true) {
            CkCert *issuer = cert->FindIssuer();
            if (cert->get_LastMethodSuccess() == false) {
                strOut.append("Issuer not found.");
                strOut.append("\r\n");
            }
            else {
                strOut.append("Issuer: ");
                strOut.append(issuer->subjectDN());
                strOut.append("\r\n");
                delete issuer;
            }

        }

        delete cert;
        i = i + 1;
    }

    // Usually, the user certificate is at index 0, its issuer is at index 1, etc. until we get to the root certificate.


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }