(Java) Backup Windows Current User / Personal Certificates to a .zip

Demonstrates how to backup the certificates in the Windows registry-based Current User certificate store (in the "Personal" Logical Store as seen in certmgr.msc), to a zip archive. Certificates having an exportable private key are exported to .pfx files. Certificates with no private key, or with a non-exportable private key, are exported to .cer files.

Obviously, this example only runs on Windows computers.

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux, Solaris Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    CkCertStore certStore = new CkCertStore();

    boolean readOnly = true;
    boolean success = certStore.OpenCurrentUserStore(readOnly);
    if (!success) {
        System.out.println(certStore.lastErrorText());
        return;
        }

    String pfxPassword = "secret";

    boolean allSuccess = true;
    int numSuccess = 0;

    CkZipEntry entry;
    CkZip zip = new CkZip();
    zip.NewZip("qa_output/personalCerts.zip");

    CkBinData certData = new CkBinData();
    CkStringBuilder sbFilename = new CkStringBuilder();

    // Iterate over the certificates in the Current User store.
    int numCerts = certStore.get_NumCertificates();
    int i = 0;
    while (i < numCerts) {
        CkCert cert = certStore.GetCertificate(i);
        System.out.println("DN = " + cert.subjectDN());

        sbFilename.SetString("cert");
        sbFilename.AppendInt(i+1);

        boolean bHasPrivateKey = cert.HasPrivateKey();
        if ((bHasPrivateKey == true) && (cert.get_PrivateKeyExportable() == true)) {
            // Export to a .pfx
            success = cert.ExportToPfxBd(pfxPassword,true,certData);
            if (success == true) {
                sbFilename.Append(".pfx");
                entry = zip.AppendBd(sbFilename.getAsString(),certData);

                }

            }
        else {
            // Export to a .cer
            success = cert.ExportCertDerBd(certData);
            if (success == true) {
                sbFilename.Append(".cer");
                entry = zip.AppendBd(sbFilename.getAsString(),certData);

                }

            }

        if (success != true) {
            allSuccess = false;
            }
        else {
            numSuccess = numSuccess+1;
            }

        i = i+1;
        }

    if (numSuccess > 0) {
        success = zip.WriteZipAndClose();
        if (success != true) {
            System.out.println(zip.lastErrorText());
            allSuccess = false;
            }

        }

    System.out.println("All success = " + allSuccess);
  }
}