Delphi DLL Requires Chilkat v11.0.0+

Get the Certificate with Private Key from a Java KeyStore

See more Java KeyStore (JKS) Examples

Load a Chilkat certificate object from a Java KeyStore. Delphi DLL

var
success: Boolean;
jks: HCkJavaKeyStore;
password: PWideChar;
chain: HCkCertChain;
cert: HCkCert;
crypt: HCkCrypt2;

begin
success := False;

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  Most of the time a .jks contains one certificate with it's associated private key.
//  (Similar to how a .pfx/.p12 usually contains a particular certificate with private key.)
//  This example demonstrates how to get the certificate with private key such that it can be used
//  by other Chilkat classes wherever a cert w/ private key is needed.
jks := CkJavaKeyStore_Create();
password := 'secret';
success := CkJavaKeyStore_LoadFile(jks,password,'qa_data/jks/test_secret.jks');
if (success = False) then
  begin
    Memo1.Lines.Add(CkJavaKeyStore__lastErrorText(jks));
    Exit;
  end;

//  Make sure we have a private key.
if (CkJavaKeyStore_getNumPrivateKeys(jks) < 1) then
  begin
    Memo1.Lines.Add('No private key available.');
    Exit;
  end;

//  -------------------------------------------------------------------------
//  Get the certificate chain associated with the 1st (and probably only) private key in the JKS.

chain := CkCertChain_Create();
success := CkJavaKeyStore_CertChainAt(jks,0,chain);
if (success = False) then
  begin
    Memo1.Lines.Add(CkJavaKeyStore__lastErrorText(jks));
    Exit;
  end;

cert := CkCert_Create();
success := CkCertChain_CertAt(chain,0,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCertChain__lastErrorText(chain));
    Exit;
  end;

//  Verify again that this cert has a private key.
if (CkCert_HasPrivateKey(cert) <> True) then
  begin
    Memo1.Lines.Add('Certificate has no associated private key.');
    Exit;
  end;

//  We now have the cert object with it's associated private key, and it can be used in other Chilkat classes where needed.
//  For example..

crypt := CkCrypt2_Create();
success := CkCrypt2_SetSigningCert(crypt,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCrypt2__lastErrorText(crypt));
    Exit;
  end;

//  ...
//  ...

CkJavaKeyStore_Dispose(jks);
CkCertChain_Dispose(chain);
CkCert_Dispose(cert);
CkCrypt2_Dispose(crypt);