(.NET Core C#) Import a PFX/P12 into the Windows Certificate Stores

Demonstrates how to import the certificates contained in a .pfx/.p12 to the Windows certificate stores.

Chilkat .NET Downloads Chilkat .NET Assemblies Chilkat for .NET Core Chilkat for Mono

Chilkat.Cert primaryCert = new Chilkat.Cert();

// Load a PFX file into a certificate object.
// The cert object will contain the certificate from the PFX that has a private key.
// The certs in the chain of authentication (if contained in the PFX) are also loaded,
// and can be accessed by getting the certificate chain (see below).
// If the PFX did not include the issuer certs in the chain of authentication, then Chilkat will
// automatically try to construct the issuer chain from the CA and intermedicate CA certs
// already installed on the Windows system.
string pfxPassword = "myPfxPassword";
bool success = primaryCert.LoadPfxFile("qa_data/pfx/somePfx.p12",pfxPassword);
if (success == false) {
    Debug.WriteLine(primaryCert.LastErrorText);
    return;
}

Chilkat.CertChain certChain = primaryCert.GetCertChain();
if (primaryCert.LastMethodSuccess == false) {
    Debug.WriteLine(primaryCert.LastErrorText);
    return;
}

// If the certificate chain reaches the root CA cert, then the last cert in the chain
// is the root CA cert.
bool chainReachesRoot = certChain.ReachesRoot;
if (chainReachesRoot == true) {
    Debug.WriteLine("The certificate chain reaches the root CA cert.");
}

Chilkat.Cert cert = null;
int i = 0;
int numCerts = certChain.NumCerts;
while (i < numCerts) {
    cert = certChain.GetCert(i);
    Debug.WriteLine("SubjectDN " + Convert.ToString(i) + ": " + cert.SubjectDN);
    Debug.WriteLine("IssuerDN " + Convert.ToString(i) + ": " + cert.IssuerDN);
    Debug.WriteLine("--");

    i = i + 1;
}

// The primary cert having the private key will be imported into the Current User "My" certificate store.
// Any intermediate root certificates will be imported into certificate store for intermediate certificate authorities.
// The root CA cert will be imported into the Root CA cert store.

// Let's open each of these 3 certificate stores..
Chilkat.CertStore certStoreCU = new Chilkat.CertStore();
Chilkat.CertStore certStoreCA = new Chilkat.CertStore();
Chilkat.CertStore certStoreRootCA = new Chilkat.CertStore();
bool readOnlyFlag = false;

// "CurrentUser" and "My" are the exact keywords to select your user account's certificate store.
success = certStoreCU.OpenWindowsStore("CurrentUser","My",readOnlyFlag);
if (success == false) {
    Debug.WriteLine("Failed to open the CurrentUser/My certificate store for read/write.");

    return;
}

// Certificate store for intermediate certification authorities (CAs). 
success = certStoreCA.OpenWindowsStore("CurrentUser","CertificationAuthority",readOnlyFlag);
if (success == false) {
    Debug.WriteLine("Failed to open the CurrentUser/CertificationAuthority certificate store for read/write.");

    return;
}

// Certificate store for trusted root certification authorities (CAs). 
success = certStoreRootCA.OpenWindowsStore("CurrentUser","Root",readOnlyFlag);
if (success == false) {
    Debug.WriteLine("Failed to open the CurrentUser/Root certificate store for read/write.");

    return;
}

// Iterate over the certs in the chain and import each into the desired certificate store.
bool allSuccess = true;
i = 0;
while (i < numCerts) {
    cert = certChain.GetCert(i);
    if (i == 0) {
        // Import the primary certificate into the CurrentUser/My certificate store.
        success = certStoreCU.AddCertificate(cert);
        if (success == false) {
            Debug.WriteLine(certStoreCU.LastErrorText);
            allSuccess = false;
        }

    }
    else {
        if ((i == (numCerts - 1)) && (chainReachesRoot == true)) {
            // Add the root CA certificate to the CurrentUser/Root certificate store.
            // (Your application can obviously choose whether this should be done or not.  Perhaps you prompt the user.)

            // Note: If the root CA cert is already present in the Windows certificate store, Windows will display
            // a dialog to ask if it should be deleted.  Chilkat does not explicitly display dialogs.
            success = certStoreRootCA.AddCertificate(cert);
            if (success == false) {
                Debug.WriteLine(certStoreRootCA.LastErrorText);
                allSuccess = false;
            }

        }
        else {
            // This is an intermediate CA certificate.
            success = certStoreCA.AddCertificate(cert);
            if (success == false) {
                Debug.WriteLine(certStoreCA.LastErrorText);
                allSuccess = false;
            }

        }

    }

    if (success == false) {
        Debug.WriteLine("Failed to import certificate.");
    }

    i = i + 1;
}

Debug.WriteLine("allSuccess = " + Convert.ToString(allSuccess));