(PowerShell) Use a Custom Set of Trusted Root Certificates

Demonstrates how to build a set of trusted root certificates to be used globally by all Chilkat classes.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$trustedRoots = New-Object Chilkat.TrustedRoots

#  Indicate that we will NOT trust any pre-installed certificates on the system.
$trustedRoots.TrustSystemCaRoots = $false

# Thawte is a certificate authority that provides a .zip download of their
# root CA certificates:  https://www.thawte.com/roots/index.html
# The direct download link is: https://www.verisign.com/support/thawte-roots.zip
# Note: The above URLs are valid at the time of writing this example (29-May-2015).

# Assuming the .zip has already been downloaded, open it and load each .pem file into
# our trusted roots object.
$zip = New-Object Chilkat.Zip

# Open a .zip containing PEM files, among other things..
$success = $zip.OpenZip("qa_data/certs/thawte-roots.zip")
if ($success -ne $true) {
    $($zip.LastErrorText)
    exit
}

$entry = $zip.FirstMatchingEntry("*.pem")
if ($zip.LastMethodSuccess -ne $true) {
    $("No entries matched.")
    exit
}

$cert = New-Object Chilkat.Cert

$bHasMoreEntries = $true
while (($bHasMoreEntries -eq $true)) {

    $("Entry: " + $entry.FileName)

    # Get the PEM of the CA cert:
    $pemStr = $entry.UnzipToString(0,"utf-8")

    # Load it into a certificate object:
    $success = $cert.LoadPem($pemStr)
    if ($success -ne $true) {
        $($cert.LastErrorText)
    }

    # Add it to the trusted roots.
    $trustedRoots.AddCert($cert)

    # The NextMatchingEntry method was added in v9.5.0.50
    $nextEntry = $entry.NextMatchingEntry("*.pem")
    $bHasMoreEntries = $entry.LastMethodSuccess

    $entry = $nextEntry
}

#  Activate the trusted roots globally for all Chilkat objects.
#  This call really shouldn't fail, so we're not checking the return value.
$success = $trustedRoots.Activate()