B4X

Load Particular CA Certs into a Java KeyStore

See more Java KeyStore (JKS) Examples

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates. B4X

Dim success As Boolean = False

'  This requires the Chilkat API to have been previously unlocked.
'  See Global Unlock Sample for sample code.

Dim jks As ChilkatJavaKeyStore
jks.Initialize

Dim troots As ChilkatTrustedRoots
troots.Initialize("troots")

'  Load certificates from a file.
success = troots.LoadCaCertsPem("qa_data/curl_cacert.pem")
If success <> True Then
    Log(troots.LastErrorText)
    Return
End If


Dim sbDn As ChilkatStringBuilder
sbDn.Initialize
Dim sbAlias As ChilkatStringBuilder
sbAlias.Initialize
Dim caseSensitive As Boolean = False

Dim i As Int = 0
Dim numCerts As Int = troots.NumCerts
Dim numAdded As Int = 0
Do While (i < numCerts)
    Dim cacert As ChilkatCert = troots.GetCert(i)
    sbDn.Clear
    sbDn.Append(cacert.SubjectDN)
    If sbDn.Contains("Entrust.net", caseSensitive) = True Then
        Log(cacert.SubjectDN)

        '  The alias is an arbitrary unique string for each cert in the JKS.
        sbAlias.Clear
        sbAlias.Append("cacert_")
        sbAlias.AppendInt(i + 1)
        jks.AddTrustedCert(cacert, sbAlias.GetAsString)
        numAdded = numAdded + 1
    End If


    i = i + 1
Loop

'  Verify the number of certs in the JKS equals the number we added.
Dim numJksCerts As Int = jks.NumTrustedCerts
Log("NumTrustedCerts = " & numJksCerts)
If numJksCerts <> numAdded Then
    Log("Something is amiss!")
    Return
End If


'  Save the JKS.
success = jks.ToFile("myPassword", "qa_data/jks/entrust_caCerts.jks")
If success <> True Then
    Log(jks.LastErrorText)
    Return
End If


Log("Success.")

'  The output of this program when tested was:

'  C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
'  O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
'  C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
'  NumTrustedCerts = 3
'  Success.