DataFlex

Add Private Key and Certificate to a PEM

See more PEM Examples

Demonstrates how to add certificates and private keys to a PEM. DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoPem
    Variant vPrivKey
    Handle hoPrivKey
    Variant vCert
    Handle hoCert
    Boolean iIncludeCertChain
    String sPassword
    Boolean iExtendedAttrs
    Boolean iNoKeys
    Boolean iNoCerts
    Boolean iNoCaCerts
    String sEncryptAlg
    String sPemStr
    String sTemp1

    Move False To iSuccess

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // The Chilkat PEM class was introduced in v9.5.0.49.  
    // It requires the bundle to be unlocked, as shown above.
    Get Create (RefClass(cComChilkatPem)) To hoPem
    If (Not(IsComObjectCreated(hoPem))) Begin
        Send CreateComObject of hoPem
    End

    // Add the private key found in alice.key to this PEM.
    // 
    Get Create (RefClass(cComChilkatPrivateKey)) To hoPrivKey
    If (Not(IsComObjectCreated(hoPrivKey))) Begin
        Send CreateComObject of hoPrivKey
    End

    Get ComLoadAnyFormatFile Of hoPrivKey "qa_data/alice.key" "" To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoPrivKey To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Add it to the PEM:
    Get pvComObject of hoPrivKey to vPrivKey
    Get ComAddPrivateKey Of hoPem vPrivKey To iSuccess

    // Add the certificate found in alice.crt to this PEM.
    // 
    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End

    Get ComLoadFromFile Of hoCert "qa_data/alice.crt" To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCert To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Add it to the PEM:
    Move False To iIncludeCertChain
    Get pvComObject of hoCert to vCert
    Get ComAddCert Of hoPem vCert iIncludeCertChain To iSuccess

    // Write the PEM containing the private key and certificate.
    // The private key will be output in PKCS8 encrypted form.
    // Certificates are never encrypted.

    // This is the password that will be required to open and access the private key
    // from the PEM we're about to write..
    Move "secret" To sPassword
    Move False To iExtendedAttrs
    Move False To iNoKeys
    Move False To iNoCerts
    Move False To iNoCaCerts
    Move "aes128" To sEncryptAlg

    Get ComToPemEx Of hoPem iExtendedAttrs iNoKeys iNoCerts iNoCaCerts sEncryptAlg sPassword To sPemStr
    Showln sPemStr


End_Procedure