C

Install PFX Certificates and Private Keys to Windows

See more PFX/P12 Examples

Demonstrates how to install the certificates and private keys contained in a PFX to the Windows certificate stores. C

#include <C_CkPfx.h>
#include <C_CkJsonObject.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkPfx pfx;
    BOOL exportable;
    BOOL userProtected;
    BOOL machineKeyset;
    BOOL allowOverwriteKey;
    BOOL allowExport;
    const char *leafStore;
    const char *intermediateStore;
    const char *rootStore;
    HCkJsonObject json;

    success = FALSE;

    pfx = CkPfx_Create();

    success = CkPfx_LoadPfxFile(pfx,"qa_data/pfx/test_secret.pfx","secret");
    if (success == FALSE) {
        printf("%s\n",CkPfx_lastErrorText(pfx));
        CkPfx_Dispose(pfx);
        return;
    }

    // See the online reference documentation for more information about the ImportToWindows method.

    // Mark imported privae keys as exportable.
    exportable = TRUE;

    // If userProtected is TRUE, the user is to be notified through a dialog box or other method when certain attempts to use this key are made. 
    userProtected = FALSE;

    // If machineKeyset is TRUE, the private keys are stored under the local computer and not under the current user. 
    machineKeyset = FALSE;

    // If allowOverwriteKey is TRUE, allow overwrite of the existing key. 
    allowOverwriteKey = FALSE;

    // If allowExport is TRUE, then the imported key can later be exported back to a PFX.
    // (It also allows for applications to directly access the private key material.)
    allowExport = TRUE;

    // Indicate where to import types of certs.
    leafStore = "My";
    intermediateStore = "CertificationAuthority";
    rootStore = "AuthRoot";

    success = CkPfx_ImportToWindows(pfx,exportable,userProtected,machineKeyset,allowOverwriteKey,allowExport,leafStore,intermediateStore,rootStore,"");
    if (success == FALSE) {
        printf("%s\n",CkPfx_lastErrorText(pfx));
        CkPfx_Dispose(pfx);
        return;
    }

    // Show information about the certificates imported
    json = CkJsonObject_Create();
    CkPfx_GetLastJsonData(pfx,json);

    CkJsonObject_putEmitCompact(json,FALSE);
    printf("%s\n",CkJsonObject_emit(json));

    // Sample output:

    // {
    //   "exportable": true,
    //   "userProtected": false,
    //   "machineKeyset": false,
    //   "allowOverwriteKey": false,
    //   "allowExport": true,
    //   "key": [
    //     {
    //       "name": "{F09B755A-1E90-444D-9851-02B86CA14961}",
    //       "storageProvider": "Microsoft Software Key Storage Provider"
    //     }
    //   ],
    //   "cert": [
    //     {
    //       "DN": "...",
    //       "type": "intermediate",
    //       "storeName": "CertificationAuthority",
    //       "imported": true
    //     },
    //     {
    //       "DN": "...",
    //       "type": "root",
    //       "storeName": "AuthRoot",
    //       "imported": true
    //     },
    //     {
    //       "DN": "....",
    //       "type": "leaf",
    //       "storeName": "My",
    //       "keyContainer": "{345D4EAD-B8DD-4150-9A1F-4BC6437E77A2}",
    //       "machineKeyset": true,
    //       "imported": true
    //     }
    //   ]
    // }

    printf("Success.\n");


    CkPfx_Dispose(pfx);
    CkJsonObject_Dispose(json);

    }