(Visual FoxPro) Create JWK Set Containing Certificates

Demonstrates how to create a JWK Set containing N certificates.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL loCert1
LOCAL lnSuccess
LOCAL loCert2
LOCAL loCrypt
LOCAL loJson
LOCAL lcHexThumbprint
LOCAL lcBase64Thumbprint
LOCAL loPubKey
LOCAL loPubKeyJwk

* This example creates the following JWK Set from two certificates:

* {
*   "keys": [
*     {
*       "kty": "RSA",
*       "use": "sig",
*       "kid": "BB8CeFVqyaGrGNuehJIiL4dfjzw",
*       "x5t": "BB8CeFVqyaGrGNuehJIiL4dfjzw",
*       "n": "nYf1jpn7cFdQ...9Iw",
*       "e": "AQAB",
*       "x5c": [
*         "MIIDBTCCAe2...Z+NTZo"
*       ]
*     },
*     {
*       "kty": "RSA",
*       "use": "sig",
*       "kid": "M6pX7RHoraLsprfJeRCjSxuURhc",
*       "x5t": "M6pX7RHoraLsprfJeRCjSxuURhc",
*       "n": "xHScZMPo8F...EO4QQ",
*       "e": "AQAB",
*       "x5c": [
*         "MIIC8TCCAdmgA...Vt5432GA=="
*       ]
*     }
*   ]
* }

* First get two certificates from files.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Cert')
loCert1 = CreateObject('Chilkat.Cert')
lnSuccess = loCert1.LoadFromFile("qa_data/certs/brasil_cert.pem")
IF (lnSuccess <> 1) THEN
    ? loCert1.LastErrorText
    RELEASE loCert1
    CANCEL
ENDIF

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Cert')
loCert2 = CreateObject('Chilkat.Cert')
lnSuccess = loCert2.LoadFromFile("qa_data/certs/testCert.cer")
IF (lnSuccess <> 1) THEN
    ? loCert2.LastErrorText
    RELEASE loCert1
    RELEASE loCert2
    CANCEL
ENDIF

* We'll need this crypt object re-encode the SHA1 thumbprint from hex to base64.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Crypt2')
loCrypt = CreateObject('Chilkat.Crypt2')

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.JsonObject')
loJson = CreateObject('Chilkat.JsonObject')

* Let's begin with the 1st cert:
loJson.I = 0
loJson.UpdateString("keys[i].kty","RSA")
loJson.UpdateString("keys[i].use","sig")

lcHexThumbprint = loCert1.Sha1Thumbprint
lcBase64Thumbprint = loCrypt.ReEncode(lcHexThumbprint,"hex","base64")
loJson.UpdateString("keys[i].kid",lcBase64Thumbprint)
loJson.UpdateString("keys[i].x5t",lcBase64Thumbprint)

* (We're assuming these are RSA certificates)
* To get the modulus (n) and exponent (e), we need to get the cert's public key and then get its JWK.
loPubKey = loCert1.ExportPublicKey()
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.JsonObject')
loPubKeyJwk = CreateObject('Chilkat.JsonObject')
loPubKeyJwk.Load(loPubKey.GetJwk())
RELEASE loPubKey
loJson.UpdateString("keys[i].n",loPubKeyJwk.StringOf("n"))
loJson.UpdateString("keys[i].e",loPubKeyJwk.StringOf("e"))

* Now add the entire X.509 certificate 
loJson.UpdateString("keys[i].x5c[0]",loCert1.GetEncoded())

* Now do the same for cert2..
loJson.I = 1

loJson.UpdateString("keys[i].kty","RSA")
loJson.UpdateString("keys[i].use","sig")

lcHexThumbprint = loCert2.Sha1Thumbprint
lcBase64Thumbprint = loCrypt.ReEncode(lcHexThumbprint,"hex","base64")
loJson.UpdateString("keys[i].kid",lcBase64Thumbprint)
loJson.UpdateString("keys[i].x5t",lcBase64Thumbprint)

loPubKey = loCert2.ExportPublicKey()
loPubKeyJwk.Load(loPubKey.GetJwk())
RELEASE loPubKey
loJson.UpdateString("keys[i].n",loPubKeyJwk.StringOf("n"))
loJson.UpdateString("keys[i].e",loPubKeyJwk.StringOf("e"))

* Now add the entire X.509 certificate 
loJson.UpdateString("keys[i].x5c[0]",loCert2.GetEncoded())

* Emit the JSON..
loJson.EmitCompact = 0
? loJson.Emit()

RELEASE loCert1
RELEASE loCert2
RELEASE loCrypt
RELEASE loJson
RELEASE loPubKeyJwk