AutoIt

Azure Key Vault Get the Latest Version of a Certificate

See more Azure Key Vault Examples

Demonstrates how to get the latest version of a certificate in Azure Key Vault.

Note: This example requires Chilkat v9.5.0.96 or later.

AutoIt

Local $bSuccess = False

; This requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

; See Azure Key Vault Get Certificates for a more detailed explanation
; for how Chilkat is automatically getting the OAuth2 access token for your application.

; Provide information needed for Chilkat to automatically get an OAuth2 access token as needed.
$oJson = ObjCreate("Chilkat.JsonObject")
$oJson.UpdateString("client_id","APP_ID")
$oJson.UpdateString("client_secret","APP_PASSWORD")
$oJson.UpdateString("resource","https://vault.azure.net")
$oJson.UpdateString("token_endpoint","https://login.microsoftonline.com/TENANT_ID/oauth2/token")

$oHttp = ObjCreate("Chilkat.Http")

; Instead of providing an actual access token, we give Chilkat the information that allows it to 
; automatically fetch the access token using the OAuth2 client credentials flow.
$oHttp.AuthToken = $oJson.Emit()

; Replace VAULT_NAME with the name of your Azure Key Vault.
$oHttp.SetUrlVar("certName","importCert01")

$oSbResponse = ObjCreate("Chilkat.StringBuilder")
$bSuccess = $oHttp.QuickGetSb("https://VAULT_NAME.vault.azure.net/certificates/{$certName}?api-version=7.4",$oSbResponse)
If ($bSuccess = False) Then

Local $iStatusCode = $oHttp.LastStatus
    If ($iStatusCode = 0) Then
        ; We did not get a response from the server..
        ConsoleWrite($oHttp.LastErrorText & @CRLF)
    Else
        ; We received a response, but it was an error.
        ConsoleWrite("Error response status code: " & $iStatusCode & @CRLF)
        ConsoleWrite("Error response:" & @CRLF)
        ConsoleWrite($oSbResponse.GetAsString() & @CRLF)
    EndIf

    Exit
EndIf

$oJsonResp = ObjCreate("Chilkat.JsonObject")
$oJsonResp.LoadSb($oSbResponse)
$oJsonResp.EmitCompact = False

ConsoleWrite($oJsonResp.Emit() & @CRLF)

; A sample JSON response is show at the bottom.

; Let's do two things with the result.
; 1) Load the DER of the cert into a Chilkat Cert object.
; 2) Get the Key Vault version id of the certificate.

$oCert = ObjCreate("Chilkat.Cert")
$bSuccess = $oCert.LoadFromBase64($oJsonResp.StringOf("cer"))
If ($bSuccess = False) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    ConsoleWrite("Failed to load certificate from Base64 DER." & @CRLF)
    Exit
EndIf

; The Azure Key Vault's "version" of the certificate is the hex string at the end of the "id", "kid", and "sid" JSON members.
; For example:  "7140c8755ed14839b5d86a9f7e7f0497"
$oSbId = ObjCreate("Chilkat.StringBuilder")
$oSbId.Append($oJsonResp.StringOf("id"))
Local $sCertVersion = $oSbId.GetAfterFinal("/",False)
ConsoleWrite("The key vault cert version is " & $sCertVersion & @CRLF)

; {
;   "id": "https://kvchilkat.vault.azure.net/certificates/importCert01/7140c8755ed14839b5d86a9f7e7f0497",
;   "kid": "https://kvchilkat.vault.azure.net/keys/importCert01/7140c8755ed14839b5d86a9f7e7f0497",
;   "sid": "https://kvchilkat.vault.azure.net/secrets/importCert01/7140c8755ed14839b5d86a9f7e7f0497",
;   "x5t": "I_e3776K5Q_6PN1HHvJoI2ZGQRQ",
;   "cer": "MIIGXjCCB .... cjTsi7yIY=",
;   "attributes": {
;     "enabled": true,
;     "nbf": 1633996800,
;     "exp": 1728691199,
;     "created": 1697411128,
;     "updated": 1697411128,
;     "recoveryLevel": "CustomizedRecoverable+Purgeable",
;     "recoverableDays": 7
;   },
;   "policy": {
;     "id": "https://kvchilkat.vault.azure.net/certificates/importCert01/policy",
;     "key_props": {
;       "exportable": true,
;       "kty": "RSA",
;       "key_size": 4096,
;       "reuse_key": false
;     },
;     "secret_props": {
;       "contentType": "application/x-pkcs12"
;     },
;     "x509_props": {
;       "subject": "CN=\"Chilkat Software, Inc.\", O=\"Chilkat Software, Inc.\", S=Illinois, C=US",
;       "ekus": [
;         "1.3.6.1.5.5.7.3.3"
;       ],
;       "key_usage": [
;         "digitalSignature"
;       ],
;       "validity_months": 37,
;       "basic_constraints": {
;         "ca": false
;       }
;     },
;     "lifetime_actions": [
;       {
;         "trigger": {
;           "lifetime_percentage": 80
;         },
;         "action": {
;           "action_type": "EmailContacts"
;         }
;       }
;     ],
;     "issuer": {
;       "name": "Unknown"
;     },
;     "attributes": {
;       "enabled": true,
;       "created": 1697411128,
;       "updated": 1697411128
;     }
;   }
; }