(Node.js) Use a Custom Set of Trusted Root Certificates

Demonstrates how to build a set of trusted root certificates to be used globally by all Chilkat classes.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var trustedRoots = new chilkat.TrustedRoots();

    //  Indicate that we will NOT trust any pre-installed certificates on the system.
    trustedRoots.TrustSystemCaRoots = false;

    // Thawte is a certificate authority that provides a .zip download of their
    // root CA certificates:  https://www.thawte.com/roots/index.html
    // The direct download link is: https://www.verisign.com/support/thawte-roots.zip
    // Note: The above URLs are valid at the time of writing this example (29-May-2015).

    // Assuming the .zip has already been downloaded, open it and load each .pem file into
    // our trusted roots object.
    var zip = new chilkat.Zip();

    // Open a .zip containing PEM files, among other things..
    var success = zip.OpenZip("qa_data/certs/thawte-roots.zip");
    if (success !== true) {
        console.log(zip.LastErrorText);
        return;
    }

    // entry: ZipEntry
    var entry = zip.FirstMatchingEntry("*.pem");
    if (zip.LastMethodSuccess !== true) {
        console.log("No entries matched.");
        return;
    }

    // nextEntry: ZipEntry
    var nextEntry;
    var pemStr;

    var cert = new chilkat.Cert();

    var bHasMoreEntries = true;
    while ((bHasMoreEntries == true)) {

        console.log("Entry: " + entry.FileName);

        // Get the PEM of the CA cert:
        pemStr = entry.UnzipToString(0,"utf-8");

        // Load it into a certificate object:
        success = cert.LoadPem(pemStr);
        if (success !== true) {
            console.log(cert.LastErrorText);
        }

        // Add it to the trusted roots.
        trustedRoots.AddCert(cert);

        // The NextMatchingEntry method was added in v9.5.0.50
        nextEntry = entry.NextMatchingEntry("*.pem");
        bHasMoreEntries = entry.LastMethodSuccess;

        entry = nextEntry;
    }

    //  Activate the trusted roots globally for all Chilkat objects.
    //  This call really shouldn't fail, so we're not checking the return value.
    success = trustedRoots.Activate();

}

chilkatExample();