(Objective-C) Load Certificate from PFX (PKCS#12)

Loads a digital certificate (and private key, if available) from a PFX file.(also known as PKCS#12)

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoCert.h>
#import <NSString.h>
#import <CkoPrivateKey.h>

CkoCert *cert = [[CkoCert alloc] init];

BOOL success;

// Load from the PFX file
NSString *pfxFilename = @"/Users/chilkat/testData/pfx/chilkat_ssl_pwd_is_test.pfx";
NSString *pfxPassword = @"test";

// A PFX typically contains certificates in the chain of authentication.
// The Chilkat cert object will choose the certificate w/
// private key farthest from the root authority cert.
// To access all the certificates in a PFX, use the 
// Chilkat certificate store object instead.
success = [cert LoadPfxFile: pfxFilename password: pfxPassword];
if (success != YES) {
    NSLog(@"%@",cert.LastErrorText);
    return;
}

// Get some information about the digital certificate, 
// then get the private key...

// DN = "Distinguished Name"
NSLog(@"%@%@",@"SubjectDN:",cert.SubjectDN);

NSLog(@"%@%@",@"Common Name:",cert.SubjectCN);
NSLog(@"%@%@",@"Issuer Common Name:",cert.IssuerCN);

NSLog(@"%@%@",@"Serial Number:",cert.SerialNumber);

// Now for the private key...
CkoPrivateKey *privKey = 0;

privKey = [cert ExportPrivateKey];
if (cert.LastMethodSuccess == NO) {
    NSLog(@"%@",cert.LastErrorText);
    return;
}

// The private key object may be used in any Chilkat methods
// (in other objects/classes) that expect a private key argument.

// In this case, save the private key to a PKCS8 Encrypted PEM format file:
NSString *pemPassword = @"secret";
NSString *pemPath = @"/Users/chilkat/testData/pem/chilkat_privKey.pem";
success = [privKey SavePkcs8EncryptedPemFile: pemPassword path: pemPath];
if (success != YES) {
    NSLog(@"%@",privKey.LastErrorText);

    return;
}

NSLog(@"%@",@"Private key saved to PKCS8 Encrypted PEM...");