AutoIt

AWS KMS Import PFX Key

See more AWS KMS Examples

Imports a certificate's private key from a .pfx file to new key created in AWS KMS. AutoIt

Local $bSuccess = False

; This example requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

; Note: This example is using a relative file path.  You can also specify a full file path, such as "C:/someDir/myCertAndKey.pfx"
; or a file path the makes sense on non-Windows operating systems..
$oCert = ObjCreate("Chilkat.Cert")
$bSuccess = $oCert.LoadPfxFile("qa_data/pfx/myCertAndKey.pfx","pfx_password")
If ($bSuccess = False) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    Exit
EndIf

; Get the cert's private key.  This is what will be uploaded to AWS KMS.
$oPrivKey = ObjCreate("Chilkat.PrivateKey")
$bSuccess = $oCert.GetPrivateKey($oPrivKey)
If ($bSuccess = False) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    Exit
EndIf

$oJson = ObjCreate("Chilkat.JsonObject")
$oJson.UpdateString("service","aws-kms")
$oJson.UpdateString("auth.access_key","AWS_ACCESS_KEY")
$oJson.UpdateString("auth.secret_key","AWS_SECRET_KEY")
$oJson.UpdateString("auth.region","us-west-2")
$oJson.UpdateString("description","Test of uploading existing private key to AWS KMS")

; Let's add some information about the certificate this key belongs to.
; This is for informational purposes only, so that we can examine the tags
; in the AWS KMS console and know the corresponding certificate.
$oJson.UpdateString("tags[0].key","CertSerial")
$oJson.UpdateString("tags[0].value",$oCert.SerialNumber)
$oJson.UpdateString("tags[1].key","CertIssuer")
$oJson.UpdateString("tags[1].value",$oCert.IssuerCN)
$oJson.UpdateString("tags[2].key","CertSubject")
$oJson.UpdateString("tags[2].value",$oCert.SubjectCN)

$oJson.UpdateString("keyUsage","SIGN_VERIFY")

; The UploadToCloud method was added in Chilkat v9.5.0.96
$oJsonOut = ObjCreate("Chilkat.JsonObject")
$bSuccess = $oPrivKey.UploadToCloud($oJson,$oJsonOut)
If ($bSuccess = False) Then
    ConsoleWrite($oPrivKey.LastErrorText & @CRLF)
    Exit
EndIf

; When successful, the jsonOut contains information about the private key in AWS KMS.
; Most importantly, the KeyId.
$oJsonOut.EmitCompact = False
ConsoleWrite($oJsonOut.Emit() & @CRLF)

; Sample JSON result:

; {
;   "AWSAccountId": "954491834127",
;   "Arn": "arn:aws:kms:us-west-2:954491834127:key/187012e8-008f-4fc7-b100-5efe6146dff2",
;   "KeySpec": "RSA_4096",
;   "Description": "Test of uploading existing private key to AWS KMS",
;   "KeyId": "187012e8-008f-4fc7-b100-5efe6146dff2",
;   "KeyUsage": "SIGN_VERIFY"
; }