(PowerShell) Load Particular CA Certs into a Java KeyStore

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$jks = New-Object Chilkat.JavaKeyStore

$troots = New-Object Chilkat.TrustedRoots

# Load certificates from a file.
$success = $troots.LoadCaCertsPem("qa_data/curl_cacert.pem")
if ($success -ne $true) {
    $($troots.LastErrorText)
    exit
}

$sbDn = New-Object Chilkat.StringBuilder
$sbAlias = New-Object Chilkat.StringBuilder
$caseSensitive = $false

$i = 0
$numCerts = $troots.NumCerts
$numAdded = 0
while (($i -lt $numCerts)) {
    $cacert = $troots.GetCert($i)
    $sbDn.Clear()
    $sbDn.Append($cacert.SubjectDN)
    if ($sbDn.Contains("Entrust.net",$caseSensitive) -eq $true) {
        $($cacert.SubjectDN)

        # The alias is an arbitrary unique string for each cert in the JKS.
        $sbAlias.Clear()
        $sbAlias.Append("cacert_")
        $sbAlias.AppendInt($i + 1)
        $jks.AddTrustedCert($cacert,$sbAlias.GetAsString())
        $numAdded = $numAdded + 1
    }

    $i = $i + 1
}

# Verify the number of certs in the JKS equals the number we added.
$numJksCerts = $jks.NumTrustedCerts
$("NumTrustedCerts = " + $numJksCerts)
if ($numJksCerts -ne $numAdded) {
    $("Something is amiss!")
    exit
}

# Save the JKS.
$success = $jks.ToFile("myPassword","qa_data/jks/entrust_caCerts.jks")
if ($success -ne $true) {
    $($jks.LastErrorText)
    exit
}

$("Success.")

# The output of this program when tested was:

# C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
# O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
# C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
# NumTrustedCerts = 3
# Success.