(PureBasic) Convert Java KeyStore to PEM

Loads a Java keystore file and saves the trusted certificate entries to a PEM file.

Chilkat PureBasic Module Download Chilkat PureBasic Module

IncludeFile "CkCert.pb"
IncludeFile "CkJavaKeyStore.pb"
IncludeFile "CkFileAccess.pb"

Procedure ChilkatExample()

    ; This requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    jks.i = CkJavaKeyStore::ckCreate()
    If jks.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    jksPassword.s = "myJksPassword"

    ; Load the Java keystore from a file.  The JKS file password is used
    ; to verify the keyed digest that is found at the very end of the keystore.
    ; It verifies that the keystore has not been modified.
    success.i = CkJavaKeyStore::ckLoadFile(jks,jksPassword,"/someDir/keyStore.jks")
    If success <> 1
        Debug CkJavaKeyStore::ckLastErrorText(jks)
        CkJavaKeyStore::ckDispose(jks)
        ProcedureReturn
    EndIf

    ; Open/create the output PEM file. 
    ; This example uses Chilkat's file access class for writing the output file.
    ; You may replace the file I/O lines of code with whatever is most convenient for you.
    fac.i = CkFileAccess::ckCreate()
    If fac.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkFileAccess::ckOpenForWrite(fac,"/pemFiles/caCerts.pem")
    If success <> 1
        Debug CkFileAccess::ckLastErrorText(fac)
        CkJavaKeyStore::ckDispose(jks)
        CkFileAccess::ckDispose(fac)
        ProcedureReturn
    EndIf

    numCerts.i = CkJavaKeyStore::ckNumTrustedCerts(jks)
    i.i

    cert.i
    pem.s

    ; Iterate over the trusted certs, get the PEM for each,
    ; and append it to the output file.
    i = 0
    While i < numCerts
        cert = CkJavaKeyStore::ckGetTrustedCert(jks,i)

        ; Get the certificate in PEM format.  
        pem = CkCert::ckExportCertPem(cert)

        ; Append the PEM string to the open file.
        ; The PEM contains only us-ascii chars..
        success = CkFileAccess::ckAppendAnsi(fac,pem)
        If success <> 1
            Debug CkFileAccess::ckLastErrorText(fac)
            CkCert::ckDispose(cert)

            CkJavaKeyStore::ckDispose(jks)
            CkFileAccess::ckDispose(fac)
            ProcedureReturn
        EndIf

        CkCert::ckDispose(cert)

        i = i + 1
    Wend

    ; Close the output file.
    CkFileAccess::ckFileClose(fac)

    Debug "Trusted certificates saved to PEM."


    CkJavaKeyStore::ckDispose(jks)
    CkFileAccess::ckDispose(fac)


    ProcedureReturn
EndProcedure