Delphi ActiveX Requires Chilkat v11.0.0+

Convert Java KeyStore to PEM

See more Java KeyStore (JKS) Examples

Loads a Java keystore file and saves the trusted certificate entries to a PEM file. Delphi ActiveX

var
success: Integer;
jks: TChilkatJavaKeyStore;
jksPassword: WideString;
fac: TCkFileAccess;
numCerts: Integer;
cert: TChilkatCert;
pem: WideString;
i: Integer;

begin
success := 0;

//  This requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

jks := TChilkatJavaKeyStore.Create(Self);

jksPassword := 'myJksPassword';

//  Load the Java keystore from a file.  The JKS file password is used
//  to verify the keyed digest that is found at the very end of the keystore.
//  It verifies that the keystore has not been modified.
success := jks.LoadFile(jksPassword,'/someDir/keyStore.jks');
if (success = 0) then
  begin
    Memo1.Lines.Add(jks.LastErrorText);
    Exit;
  end;

//  Open/create the output PEM file. 
//  This example uses Chilkat's file access class for writing the output file.
//  You may replace the file I/O lines of code with whatever is most convenient for you.
fac := TCkFileAccess.Create(Self);
success := fac.OpenForWrite('/pemFiles/caCerts.pem');
if (success = 0) then
  begin
    Memo1.Lines.Add(fac.LastErrorText);
    Exit;
  end;

numCerts := jks.NumTrustedCerts;

cert := TChilkatCert.Create(Self);

//  Iterate over the trusted certs, get the PEM for each,
//  and append it to the output file.
i := 0;
while i < numCerts do
  begin
    jks.TrustedCertAt(i,cert.ControlInterface);

    //  Get the certificate in PEM format.  
    pem := cert.ExportCertPem();

    //  Append the PEM string to the open file.
    success := fac.AppendText(pem,'utf-8');
    if (success <> 1) then
      begin
        Memo1.Lines.Add(fac.LastErrorText);
        Exit;
      end;

    i := i + 1;
  end;

//  Close the output file.
fac.FileClose();

Memo1.Lines.Add('Trusted certificates saved to PEM.');