(Node.js) Working with PEM Encrypted Private Keys

Demonstrates how to load and save PEM encrypted private keys.

Note: This example requires Chilkat v11.0.0 or greater.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOS

var os = require('os');
if (os.platform() == 'win32') {  
  var chilkat = require('@chilkat/ck-node23-win64'); 
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node23-linux-arm');
    } else if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node23-linux-arm64');
    } else {
        var chilkat = require('@chilkat/ck-node23-linux-x64');
    }
} else if (os.platform() == 'darwin') {
  var chilkat = require('@chilkat/ck-node23-mac-universal');
}

function chilkatExample() {

    var success = false;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    success = false;

    var pem = new chilkat.Pem();

    var pemPassword = "secret";

    // To load a PEM file containing encrypted private keys, simply
    // provide the password.
    success = pem.LoadPemFile("/Users/chilkat/testData/pem/pemContainingEncryptedPrivateKeys.pem",pemPassword);
    if (success == false) {
        console.log(pem.LastErrorText);
        return;
    }

    var fac = new chilkat.FileAccess();
    var pemText = fac.ReadEntireTextFile("/Users/chilkat/testData/pem/pemContainingEncryptedPrivateKeys.pem",pemPassword);

    // To load a PEM from a string, call LoadPem instead of LoadPemFile:
    success = pem.LoadPem(pemText);
    if (success == false) {
        console.log(pem.LastErrorText);
        return;
    }

    // A few notes:
    // The PEM may contain both private keys and certificates (or anything else).
    // The password is utilized for whatever content in the PEM is encrypted.  
    // It is OK to have both encrypted and non-encrypted content within a given PEM.

    // PEM private keys can be encrypted in different formats.  The LoadPem and LoadPemFile
    // methods automatically handle the different formats.
    // One format is PKCS8 and is indicated by this delimiter within the PEM:

    // -----BEGIN ENCRYPTED PRIVATE KEY-----
    // MIICoTAbBgkqhkiG9w0BBQMwDgQIfdD0zv24lgkCAggABIICgE0PdHJmRbNs6cBX
    // ...

    // Another format, we'll call "passphrase" looks like this in the PEM:
    // -----BEGIN RSA PRIVATE KEY-----
    // Proc-Type: 4,ENCRYPTED
    // DEK-Info: DES-EDE3-CBC,A4215544D11C5D0C
    // 
    // paqy9XRexcSjurHfG0xhCaUD0HrvIdhuC0CbRxxxeMlkLaV6+uT80rBxt2AaibWG
    // ...

    // Show the bit length of each private key:
    var i;
    var numPrivateKeys = pem.NumPrivateKeys;
    if (numPrivateKeys == 0) {
        console.log((("Error: Expected the PEM to contain private keys.")));
        return;
    }

    var privKey = new chilkat.PrivateKey();
    for (i = 1; i <= numPrivateKeys; i++) {
        pem.PrivateKeyAt(i - 1,privKey);
        console.log(i + ": " + privKey.BitLength + " bits");
    }


}

chilkatExample();