(SQL Server) Generate RSA Key and Export to Encrypted PEM

SQL Server sample showing how to generate an RSA key and export to encrypted PEM.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    -- This example assumes the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @rsa int
    -- Use "Chilkat_9_5_0.Rsa" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Rsa', @rsa OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    -- Generate a 1024-bit key.  Chilkat RSA supports
    -- key sizes ranging from 512 bits to 4096 bits.
    DECLARE @success int
    EXEC sp_OAMethod @rsa, 'GenerateKey', @success OUT, 1024
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @rsa, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @rsa
        RETURN
      END

    -- Get the private key as unencrypted XML:
    DECLARE @keyXml nvarchar(4000)
    EXEC sp_OAMethod @rsa, 'ExportPrivateKey', @keyXml OUT

    PRINT @keyXml

    -- To encrypt the key -- meaning to get the key in
    -- an encrypted PEM format -- load it into a PrivateKey object,
    -- and then export to encrypted PEM:
    DECLARE @privKey int
    -- Use "Chilkat_9_5_0.PrivateKey" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.PrivateKey', @privKey OUT

    EXEC sp_OAMethod @privKey, 'LoadXml', @success OUT, @keyXml
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @privKey, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @rsa
        EXEC @hr = sp_OADestroy @privKey
        RETURN
      END

    DECLARE @strEncPem nvarchar(4000)

    EXEC sp_OAMethod @privKey, 'GetPkcs8EncryptedPem', @strEncPem OUT, 'myPassword'

    -- You now have the private key in an encrypted format,
    -- which may be (for example) saved to a database

    EXEC @hr = sp_OADestroy @rsa
    EXEC @hr = sp_OADestroy @privKey


END
GO