Delphi DLL Requires Chilkat v11.0.0+

Convert Java KeyStore to PEM

See more Java KeyStore (JKS) Examples

Loads a Java keystore file and saves the trusted certificate entries to a PEM file. Delphi DLL

var
success: Boolean;
jks: HCkJavaKeyStore;
jksPassword: PWideChar;
fac: HCkFileAccess;
numCerts: Integer;
cert: HCkCert;
pem: PWideChar;
i: Integer;

begin
success := False;

//  This requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

jks := CkJavaKeyStore_Create();

jksPassword := 'myJksPassword';

//  Load the Java keystore from a file.  The JKS file password is used
//  to verify the keyed digest that is found at the very end of the keystore.
//  It verifies that the keystore has not been modified.
success := CkJavaKeyStore_LoadFile(jks,jksPassword,'/someDir/keyStore.jks');
if (success = False) then
  begin
    Memo1.Lines.Add(CkJavaKeyStore__lastErrorText(jks));
    Exit;
  end;

//  Open/create the output PEM file. 
//  This example uses Chilkat's file access class for writing the output file.
//  You may replace the file I/O lines of code with whatever is most convenient for you.
fac := CkFileAccess_Create();
success := CkFileAccess_OpenForWrite(fac,'/pemFiles/caCerts.pem');
if (success = False) then
  begin
    Memo1.Lines.Add(CkFileAccess__lastErrorText(fac));
    Exit;
  end;

numCerts := CkJavaKeyStore_getNumTrustedCerts(jks);

cert := CkCert_Create();

//  Iterate over the trusted certs, get the PEM for each,
//  and append it to the output file.
i := 0;
while i < numCerts do
  begin
    CkJavaKeyStore_TrustedCertAt(jks,i,cert);

    //  Get the certificate in PEM format.  
    pem := CkCert__exportCertPem(cert);

    //  Append the PEM string to the open file.
    success := CkFileAccess_AppendText(fac,pem,'utf-8');
    if (success <> True) then
      begin
        Memo1.Lines.Add(CkFileAccess__lastErrorText(fac));
        Exit;
      end;

    i := i + 1;
  end;

//  Close the output file.
CkFileAccess_FileClose(fac);

Memo1.Lines.Add('Trusted certificates saved to PEM.');

CkJavaKeyStore_Dispose(jks);
CkFileAccess_Dispose(fac);
CkCert_Dispose(cert);