(Visual FoxPro) Get Certificates from .p12 / .pfx

A PKCS12 (.p12 / .pfx) is a container for holding a certificate, its private key, and the certs in the chain of authentication up to and possibly including the root CA cert. A .p12 is not required to contain certain things. It will contain whatever the creator of the .p12 decided to include. It's possible to contain just a private key, just a cert, many certs without private keys, or many certs with many private keys. Usually, a .p12 contains one certificate, its associated private key, and certificates in the chain of authentication.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL loPfx
LOCAL lnSuccess
LOCAL lnNumCerts
LOCAL i
LOCAL loCert
LOCAL loIssuer

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Pfx')
loPfx = CreateObject('Chilkat.Pfx')

lnSuccess = loPfx.LoadPfxFile("qa_data/pfx/test.pfx","pfx_password")
IF (lnSuccess = 0) THEN
    ? loPfx.LastErrorText
    RELEASE loPfx
    CANCEL
ENDIF

* Iterate over the certs contained in the PFX
lnNumCerts = loPfx.NumCerts
i = 0
DO WHILE i < lnNumCerts
    loCert = loPfx.GetCert(i)

    ? "--- " + STR(i) + " ---"
    ? loCert.SubjectDN
    * Is this a root cert, or self-signed?
    ? "Root: " + STR(loCert.IsRoot)
    ? "Self-Signed: " + STR(loCert.SelfSigned)

    * If this certificate is not the root (self-signed), then get the issuer.
    * If the issuing certificate is contained in the PFX, then it will be found here..
    IF (loCert.SelfSigned <> 1) THEN
        loIssuer = loCert.FindIssuer()
        IF (loCert.LastMethodSuccess = 0) THEN
            ? "Issuer not found."
        ELSE
            ? "Issuer: " + loIssuer.SubjectDN
            RELEASE loIssuer
        ENDIF

    ENDIF

    RELEASE loCert
    i = i + 1
ENDDO

* Usually, the user certificate is at index 0, its issuer is at index 1, etc. until we get to the root certificate.

RELEASE loPfx