(Node.js) Load Java KeyStore and Access Contents

Loads a Java keystore file and iterates over the contents. A Java keystore (.jks) file can contain one or more trusted root certificate entries and/or one or more private key entries. Each private key entry includes an associated certificate chain.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var jks = new chilkat.JavaKeyStore();

    // Load the Java keystore from a file.  The JKS file password is used
    // to verify the keyed digest that is found at the very end of the keystore.
    // It verifies there has been no tampering with the file.
    var success = jks.LoadFile("jksFilePassword","/someDir/keyStore.jks");
    if (success !== true) {
        console.log(jks.LastErrorText);
        return;
    }

    // Find out how many of each type of entry:
    var numTrustedCerts = jks.NumTrustedCerts;
    var numPrivateKeys = jks.NumPrivateKeys;

    // cert: Cert
    var cert;
    var alias;

    var i;

    // For each trusted certificate, access it by getting
    // it as a cert object.  Also get the alias associated with the certificate.
    console.log("Trusted Certs:");
    i = 0;
    while (i < numTrustedCerts) {
        cert = jks.GetTrustedCert(i);
        console.log(jks.GetTrustedCertAlias(i) + ": " + cert.SubjectDN);

        i = i+1;
    }

    // privKey: PrivateKey
    var privKey;
    // certChain: CertChain
    var certChain;

    // For each private key entry, get the private key and
    // the associated certificate chain.
    // Each private key is password protected.  Usually it is the same
    // password as used for the keyed digest of the entire JKS.  
    // However, this does not have to be.  The password is passed
    // here to handle the possibility of each private key requiring
    // a different password.
    console.log("Private Keys:");
    i = 0;
    while (i < numPrivateKeys) {
        privKey = jks.GetPrivateKey("jksFilePassword",i);
        console.log(jks.GetPrivateKeyAlias(i));
        certChain = jks.GetCertChain(i);

        // The 1st certificate in the chain is the one associated with the private key.
        cert = certChain.GetCert(0);
        console.log(cert.SubjectDN);

        i = i+1;
    }


}

chilkatExample();