Go

Load Particular CA Certs into a Java KeyStore

See more Java KeyStore (JKS) Examples

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates. Go

    success := false

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    jks := chilkat.NewJavaKeyStore()

    troots := chilkat.NewTrustedRoots()

    // Load certificates from a file.
    success = troots.LoadCaCertsPem("qa_data/curl_cacert.pem")
    if success != true {
        fmt.Println(troots.LastErrorText())
        jks.DisposeJavaKeyStore()
        troots.DisposeTrustedRoots()
        return
    }

    sbDn := chilkat.NewStringBuilder()
    sbAlias := chilkat.NewStringBuilder()
    caseSensitive := false

    i := 0
    numCerts := troots.NumCerts()
    numAdded := 0
    for (i < numCerts) {
        cacert := troots.GetCert(i)
        sbDn.Clear()
        sbDn.Append(cacert.SubjectDN())
        if sbDn.Contains("Entrust.net",caseSensitive) == true {
            fmt.Println(cacert.SubjectDN())

            // The alias is an arbitrary unique string for each cert in the JKS.
            sbAlias.Clear()
            sbAlias.Append("cacert_")
            sbAlias.AppendInt(i + 1)
            jks.AddTrustedCert(cacert,*sbAlias.GetAsString())
            numAdded = numAdded + 1
        }

        cacert.DisposeCert()
        i = i + 1
    }

    // Verify the number of certs in the JKS equals the number we added.
    numJksCerts := jks.NumTrustedCerts()
    fmt.Println("NumTrustedCerts = ", numJksCerts)
    if numJksCerts != numAdded {
        fmt.Println("Something is amiss!")
        jks.DisposeJavaKeyStore()
        troots.DisposeTrustedRoots()
        sbDn.DisposeStringBuilder()
        sbAlias.DisposeStringBuilder()
        return
    }

    // Save the JKS.
    success = jks.ToFile("myPassword","qa_data/jks/entrust_caCerts.jks")
    if success != true {
        fmt.Println(jks.LastErrorText())
        jks.DisposeJavaKeyStore()
        troots.DisposeTrustedRoots()
        sbDn.DisposeStringBuilder()
        sbAlias.DisposeStringBuilder()
        return
    }

    fmt.Println("Success.")

    // The output of this program when tested was:

    // C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
    // O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
    // C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
    // NumTrustedCerts = 3
    // Success.

    jks.DisposeJavaKeyStore()
    troots.DisposeTrustedRoots()
    sbDn.DisposeStringBuilder()
    sbAlias.DisposeStringBuilder()