(C) Get Certificates from .p12 / .pfx

A PKCS12 (.p12 / .pfx) is a container for holding a certificate, its private key, and the certs in the chain of authentication up to and possibly including the root CA cert. A .p12 is not required to contain certain things. It will contain whatever the creator of the .p12 decided to include. It's possible to contain just a private key, just a cert, many certs without private keys, or many certs with many private keys. Usually, a .p12 contains one certificate, its associated private key, and certificates in the chain of authentication.

Chilkat C/C++ Library Downloads
MS Visual C/C++ Linux/CentOS C/C++ Alpine Linux C/C++ MAC OS X C/C++	armhf/aarch64 C/C++ C++ Builder iOS C/C++ Android C/C++	Solaris C/C++ MinGW C/C++

#include <C_CkPfx.h>
#include <C_CkCert.h>

void ChilkatSample(void)
    {
    HCkPfx pfx;
    BOOL success;
    int numCerts;
    int i;
    HCkCert cert;
    HCkCert issuer;

    pfx = CkPfx_Create();

    success = CkPfx_LoadPfxFile(pfx,"qa_data/pfx/test.pfx","pfx_password");
    if (success == FALSE) {
        printf("%s\n",CkPfx_lastErrorText(pfx));
        CkPfx_Dispose(pfx);
        return;
    }

    // Iterate over the certs contained in the PFX
    numCerts = CkPfx_getNumCerts(pfx);
    i = 0;
    while (i < numCerts) {
        cert = CkPfx_GetCert(pfx,i);

        printf("--- %d ---\n",i);
        printf("%s\n",CkCert_subjectDN(cert));
        // Is this a root cert, or self-signed?
        printf("Root: %d\n",CkCert_getIsRoot(cert));
        printf("Self-Signed: %d\n",CkCert_getSelfSigned(cert));

        // If this certificate is not the root (self-signed), then get the issuer.
        // If the issuing certificate is contained in the PFX, then it will be found here..
        if (CkCert_getSelfSigned(cert) != TRUE) {
            issuer = CkCert_FindIssuer(cert);
            if (CkCert_getLastMethodSuccess(cert) == FALSE) {
                printf("Issuer not found.\n");
            }
            else {
                printf("Issuer: %s\n",CkCert_subjectDN(issuer));
                CkCert_Dispose(issuer);
            }

        }

        CkCert_Dispose(cert);
        i = i + 1;
    }

    // Usually, the user certificate is at index 0, its issuer is at index 1, etc. until we get to the root certificate.


    CkPfx_Dispose(pfx);

    }