(SQL Server) Load Certificate from PFX (PKCS#12)

Loads a digital certificate (and private key, if available) from a PFX file.(also known as PKCS#12)

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @cert int
    -- Use "Chilkat_9_5_0.Cert" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Cert', @cert OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    DECLARE @success int

    -- Load from the PFX file
    DECLARE @pfxFilename nvarchar(4000)
    SELECT @pfxFilename = '/Users/chilkat/testData/pfx/chilkat_ssl_pwd_is_test.pfx'
    DECLARE @pfxPassword nvarchar(4000)
    SELECT @pfxPassword = 'test'

    -- A PFX typically contains certificates in the chain of authentication.
    -- The Chilkat cert object will choose the certificate w/
    -- private key farthest from the root authority cert.
    -- To access all the certificates in a PFX, use the 
    -- Chilkat certificate store object instead.
    EXEC sp_OAMethod @cert, 'LoadPfxFile', @success OUT, @pfxFilename, @pfxPassword
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @cert, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @cert
        RETURN
      END

    -- Get some information about the digital certificate, 
    -- then get the private key...

    -- DN = "Distinguished Name"

    EXEC sp_OAGetProperty @cert, 'SubjectDN', @sTmp0 OUT
    PRINT 'SubjectDN:' + @sTmp0


    EXEC sp_OAGetProperty @cert, 'SubjectCN', @sTmp0 OUT
    PRINT 'Common Name:' + @sTmp0

    EXEC sp_OAGetProperty @cert, 'IssuerCN', @sTmp0 OUT
    PRINT 'Issuer Common Name:' + @sTmp0


    EXEC sp_OAGetProperty @cert, 'SerialNumber', @sTmp0 OUT
    PRINT 'Serial Number:' + @sTmp0

    -- Now for the private key...
    DECLARE @privKey int

    EXEC sp_OAMethod @cert, 'ExportPrivateKey', @privKey OUT
    EXEC sp_OAGetProperty @cert, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 = 0
      BEGIN
        EXEC sp_OAGetProperty @cert, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @cert
        RETURN
      END

    -- The private key object may be used in any Chilkat methods
    -- (in other objects/classes) that expect a private key argument.

    -- In this case, save the private key to a PKCS8 Encrypted PEM format file:
    DECLARE @pemPassword nvarchar(4000)
    SELECT @pemPassword = 'secret'
    DECLARE @pemPath nvarchar(4000)
    SELECT @pemPath = '/Users/chilkat/testData/pem/chilkat_privKey.pem'
    EXEC sp_OAMethod @privKey, 'SavePkcs8EncryptedPemFile', @success OUT, @pemPassword, @pemPath
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @privKey, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @privKey

        EXEC @hr = sp_OADestroy @cert
        RETURN
      END

    EXEC @hr = sp_OADestroy @privKey


    PRINT 'Private key saved to PKCS8 Encrypted PEM...'

    EXEC @hr = sp_OADestroy @cert


END
GO