(PHP ActiveX) Load Certificate from PFX (PKCS#12)

Loads a digital certificate (and private key, if available) from a PFX file.(also known as PKCS#12)

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");

// Load from the PFX file
$pfxFilename = '/Users/chilkat/testData/pfx/chilkat_ssl_pwd_is_test.pfx';
$pfxPassword = 'test';

// A PFX typically contains certificates in the chain of authentication.
// The Chilkat cert object will choose the certificate w/
// private key farthest from the root authority cert.
// To access all the certificates in a PFX, use the 
// Chilkat certificate store object instead.
$success = $cert->LoadPfxFile($pfxFilename,$pfxPassword);
if ($success != 1) {
    print $cert->LastErrorText . "\n";
    exit;
}

// Get some information about the digital certificate, 
// then get the private key...

// DN = "Distinguished Name"
print 'SubjectDN:' . $cert->SubjectDN . "\n";

print 'Common Name:' . $cert->SubjectCN . "\n";
print 'Issuer Common Name:' . $cert->IssuerCN . "\n";

print 'Serial Number:' . $cert->SerialNumber . "\n";

// Now for the private key...

// privKey is a Chilkat.PrivateKey
$privKey = $cert->ExportPrivateKey();
if ($cert->LastMethodSuccess == 0) {
    print $cert->LastErrorText . "\n";
    exit;
}

// The private key object may be used in any Chilkat methods
// (in other objects/classes) that expect a private key argument.

// In this case, save the private key to a PKCS8 Encrypted PEM format file:
$pemPassword = 'secret';
$pemPath = '/Users/chilkat/testData/pem/chilkat_privKey.pem';
$success = $privKey->SavePkcs8EncryptedPemFile($pemPassword,$pemPath);
if ($success != 1) {
    print $privKey->LastErrorText . "\n";

    exit;
}

print 'Private key saved to PKCS8 Encrypted PEM...' . "\n";

?>