C

Convert Java KeyStore to PEM

See more Java KeyStore (JKS) Examples

Loads a Java keystore file and saves the trusted certificate entries to a PEM file. C

#include <C_CkJavaKeyStore.h>
#include <C_CkFileAccess.h>
#include <C_CkCert.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkJavaKeyStore jks;
    const char *jksPassword;
    HCkFileAccess fac;
    int numCerts;
    HCkCert cert;
    const char *pem;
    int i;

    success = FALSE;

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    jks = CkJavaKeyStore_Create();

    jksPassword = "myJksPassword";

    // Load the Java keystore from a file.  The JKS file password is used
    // to verify the keyed digest that is found at the very end of the keystore.
    // It verifies that the keystore has not been modified.
    success = CkJavaKeyStore_LoadFile(jks,jksPassword,"/someDir/keyStore.jks");
    if (success == FALSE) {
        printf("%s\n",CkJavaKeyStore_lastErrorText(jks));
        CkJavaKeyStore_Dispose(jks);
        return;
    }

    // Open/create the output PEM file. 
    // This example uses Chilkat's file access class for writing the output file.
    // You may replace the file I/O lines of code with whatever is most convenient for you.
    fac = CkFileAccess_Create();
    success = CkFileAccess_OpenForWrite(fac,"/pemFiles/caCerts.pem");
    if (success == FALSE) {
        printf("%s\n",CkFileAccess_lastErrorText(fac));
        CkJavaKeyStore_Dispose(jks);
        CkFileAccess_Dispose(fac);
        return;
    }

    numCerts = CkJavaKeyStore_getNumTrustedCerts(jks);

    cert = CkCert_Create();

    // Iterate over the trusted certs, get the PEM for each,
    // and append it to the output file.
    i = 0;
    while (i < numCerts) {
        CkJavaKeyStore_TrustedCertAt(jks,i,cert);

        // Get the certificate in PEM format.  
        pem = CkCert_exportCertPem(cert);

        // Append the PEM string to the open file.
        success = CkFileAccess_AppendText(fac,pem,"utf-8");
        if (success != TRUE) {
            printf("%s\n",CkFileAccess_lastErrorText(fac));
            CkJavaKeyStore_Dispose(jks);
            CkFileAccess_Dispose(fac);
            CkCert_Dispose(cert);
            return;
        }

        i = i + 1;
    }

    // Close the output file.
    CkFileAccess_FileClose(fac);

    printf("Trusted certificates saved to PEM.\n");


    CkJavaKeyStore_Dispose(jks);
    CkFileAccess_Dispose(fac);
    CkCert_Dispose(cert);

    }