(C) Convert Cert + Key to PEM and PFX

This example is based on the following question from a Chilkat customer:

We receive 2 files :

    MyCertificate.p7b
    MyCertificate-privatekey.pkey

We have to transform these certificate like this:

First convert it to PEM like this:

openssl pkcs7 -in MyCertificate.p7b -inform DER -out MyCertificate.pem -print_certs

Now we get MyCertificate.pem

Last step, we need to convert it to pfx file:

openssl pkcs12 -export -inkey moncertificat-privatekey.pkey  -in  moncertificat.pem -out moncertificat.pfx

Is there a way to make all these steps with Chilkat ?

I will be nice to include this directly in our software instead of askig the user to do it manualy.

Chilkat C/C++ Library Downloads
MS Visual C/C++ Linux/CentOS C/C++ Alpine Linux C/C++ MAC OS X C/C++	armhf/aarch64 C/C++ C++ Builder iOS C/C++ Android C/C++	Solaris C/C++ MinGW C/C++

#include <C_CkCert.h>
#include <C_CkPrivateKey.h>

void ChilkatSample(void)
    {
    HCkCert cert;
    HCkPrivateKey privKey;
    BOOL success;

    cert = CkCert_Create();
    privKey = CkPrivateKey_Create();

    //  Load any type of certificate (.cer, .p7b, .pem, etc.) by calling LoadFromFile.
    success = CkCert_LoadFromFile(cert,"qa_data/certs/sample_cert_a.cer");
    if (success != TRUE) {
        printf("%s\n",CkCert_lastErrorText(cert));
        CkCert_Dispose(cert);
        CkPrivateKey_Dispose(privKey);
        return;
    }

    //  Load the private key.
    //  (The various privKey methods that load from a file will automatically detect
    //  the format.  It doesn't actually matter if you try to load a non-PKCS8 format private key
    //  by calling LoadPkcs8EncryptedFile -- internally Chilkat will detect the format and will load
    //  based on what it finds.)
    success = CkPrivateKey_LoadPkcs8EncryptedFile(privKey,"qa_data/certs/sample_key_a.pkcs8","password");
    if (success != TRUE) {
        printf("%s\n",CkPrivateKey_lastErrorText(privKey));
        CkCert_Dispose(cert);
        CkPrivateKey_Dispose(privKey);
        return;
    }

    //  Write the cert as PEM.
    success = CkCert_ExportCertPemFile(cert,"qa_output/cert.pem");

    //  Or get the PEM string directly...
    printf("%s\n",CkCert_exportCertPem(cert));

    //  Associate the private key with the cert object.
    success = CkCert_SetPrivateKey(cert,privKey);
    if (success != TRUE) {
        printf("%s\n",CkCert_lastErrorText(cert));
        CkCert_Dispose(cert);
        CkPrivateKey_Dispose(privKey);
        return;
    }

    //  Write the cert + private key to a .pfx file.
    success = CkCert_ExportToPfxFile(cert,"qa_data/myPfx.pfx","password",TRUE);
    if (success != TRUE) {
        printf("%s\n",CkCert_lastErrorText(cert));
        CkCert_Dispose(cert);
        CkPrivateKey_Dispose(privKey);
        return;
    }

    printf("Success.\n");


    CkCert_Dispose(cert);
    CkPrivateKey_Dispose(privKey);

    }