(PHP ActiveX) Load Particular CA Certs into a Java KeyStore

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JavaKeyStore')
$jks = new COM("Chilkat.JavaKeyStore");

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.TrustedRoots')
$troots = new COM("Chilkat.TrustedRoots");

// Load certificates from a file.
$success = $troots->LoadCaCertsPem('qa_data/curl_cacert.pem');
if ($success != 1) {
    print $troots->LastErrorText . "\n";
    exit;
}

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.StringBuilder')
$sbDn = new COM("Chilkat.StringBuilder");
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.StringBuilder')
$sbAlias = new COM("Chilkat.StringBuilder");
$caseSensitive = 0;

$i = 0;
$numCerts = $troots->NumCerts;
$numAdded = 0;
while (($i < $numCerts)) {
    // cacert is a Chilkat.Cert
    $cacert = $troots->GetCert($i);
    $sbDn->Clear();
    $sbDn->Append($cacert->SubjectDN);
    if ($sbDn->Contains('Entrust.net',$caseSensitive) == 1) {
        print $cacert->SubjectDN . "\n";

        // The alias is an arbitrary unique string for each cert in the JKS.
        $sbAlias->Clear();
        $sbAlias->Append('cacert_');
        $sbAlias->AppendInt($i + 1);
        $jks->AddTrustedCert($cacert,$sbAlias->getAsString());
        $numAdded = $numAdded + 1;
    }

    $i = $i + 1;
}

// Verify the number of certs in the JKS equals the number we added.
$numJksCerts = $jks->NumTrustedCerts;
print 'NumTrustedCerts = ' . $numJksCerts . "\n";
if ($numJksCerts != $numAdded) {
    print 'Something is amiss!' . "\n";
    exit;
}

// Save the JKS.
$success = $jks->ToFile('myPassword','qa_data/jks/entrust_caCerts.jks');
if ($success != 1) {
    print $jks->LastErrorText . "\n";
    exit;
}

print 'Success.' . "\n";

// The output of this program when tested was:

// C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
// O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
// C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
// NumTrustedCerts = 3
// Success.

?>