(Node.js) Load Certs from Java KeyStore into Trusted CA Roots

Demonstrates how to load a Java KeyStore containing CA root certificates that are to be trusted by the application. This can be done once at the beginning of an application, and then the trusted roots can be activated so that only these root CA certs are trusted by the application for any TLS connections.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var jks = new chilkat.JavaKeyStore();
    jks.VerboseLogging = true;

    var password = "myPassword";
    var success = jks.LoadFile(password,"qa_data/jks/entrust_caCerts.jks");
    if (success !== true) {
        console.log(jks.LastErrorText);
        return;
    }

    var troots = new chilkat.TrustedRoots();
    troots.VerboseLogging = true;

    success = troots.AddJavaKeyStore(jks);
    if (success !== true) {
        console.log(troots.LastErrorText);
        return;
    }

    var i = 0;
    var numCerts = troots.NumCerts;
    while ((i < numCerts)) {
        // cacert: Cert
        var cacert = troots.GetCert(i);
        console.log(i + ": " + cacert.SubjectDN);

        i = i+1;
    }

    // Activate this specific set of trusted roots.
    success = troots.Activate();
    if (success !== true) {
        console.log(troots.LastErrorText);
        return;
    }

    // Output:

    // 0: C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
    // 1: O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
    // 2: C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority

}

chilkatExample();