(Java) Use HTTPS Client Certificate from .cer and .key Files

Demonstrates how to load a cert + private key from .cer and .key (base64) files and use it for mutual TLS authentication (client-side certificate).

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux, Solaris Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkHttp http = new CkHttp();

    CkCert cert = new CkCert();
    CkPrivateKey privKey = new CkPrivateKey();

    // Load any type of certificate (.cer, .p7b, .pem, etc.) by calling LoadFromFile.
    boolean success = cert.LoadFromFile("qa_data/certs/sample_cert_a.cer");
    if (success != true) {
        System.out.println(cert.lastErrorText());
        return;
        }

    // Load the private key.
    CkBinData bd = new CkBinData();
    success = bd.LoadFile("qa_data/certs/sample_key_a.key");
    success = privKey.LoadAnyFormat(bd,"privateKeyPasswordIfNecessary");
    if (success != true) {
        System.out.println(privKey.lastErrorText());
        return;
        }

    // Associate the private key with the cert.
    success = cert.SetPrivateKey(privKey);
    if (success != true) {
        System.out.println(cert.lastErrorText());
        return;
        }

    // Set the certificate to be used for mutual TLS authentication
    // (i.e. sets the client-side certificate for two-way TLS authentication)
    success = http.SetSslClientCert(cert);
    if (success != true) {
        System.out.println(http.lastErrorText());
        return;
        }

    // At this point, the HTTP object instance is setup with the client-side cert, and any SSL/TLS
    // connection will automatically use it if the server demands a client-side cert.
  }
}