(Classic ASP) Load Particular CA Certs into a Java KeyStore

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates.

Chilkat ActiveX Downloads

ActiveX for 32-bit and 64-bit Windows

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
' This requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.JavaKeyStore")
set jks = Server.CreateObject("Chilkat.JavaKeyStore")

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.TrustedRoots")
set troots = Server.CreateObject("Chilkat.TrustedRoots")

' Load certificates from a file.
success = troots.LoadCaCertsPem("qa_data/curl_cacert.pem")
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( troots.LastErrorText) & "</pre>"
    Response.End
End If

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.StringBuilder")
set sbDn = Server.CreateObject("Chilkat.StringBuilder")
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.StringBuilder")
set sbAlias = Server.CreateObject("Chilkat.StringBuilder")
caseSensitive = 0

i = 0
numCerts = troots.NumCerts
numAdded = 0
Do While (i < numCerts)
    ' cacert is a Chilkat.Cert
    Set cacert = troots.GetCert(i)
    sbDn.Clear 
    success = sbDn.Append(cacert.SubjectDN)
    If (sbDn.Contains("Entrust.net",caseSensitive) = 1) Then
        Response.Write "<pre>" & Server.HTMLEncode( cacert.SubjectDN) & "</pre>"

        ' The alias is an arbitrary unique string for each cert in the JKS.
        sbAlias.Clear 
        success = sbAlias.Append("cacert_")
        success = sbAlias.AppendInt(i + 1)
        success = jks.AddTrustedCert(cacert,sbAlias.GetAsString())
        numAdded = numAdded + 1
    End If

    i = i + 1
Loop

' Verify the number of certs in the JKS equals the number we added.
numJksCerts = jks.NumTrustedCerts
Response.Write "<pre>" & Server.HTMLEncode( "NumTrustedCerts = " & numJksCerts) & "</pre>"
If (numJksCerts <> numAdded) Then
    Response.Write "<pre>" & Server.HTMLEncode( "Something is amiss!") & "</pre>"
    Response.End
End If

' Save the JKS.
success = jks.ToFile("myPassword","qa_data/jks/entrust_caCerts.jks")
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( jks.LastErrorText) & "</pre>"
    Response.End
End If

Response.Write "<pre>" & Server.HTMLEncode( "Success.") & "</pre>"

' The output of this program when tested was:

' C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
' O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
' C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
' NumTrustedCerts = 3
' Success.

%>
</body>
</html>