(PureBasic) Load Encrypted PEM Containing ECC Private Key and Certs and Examine Contents

Loads an encrypted PEM containing an ECC private key and ECC certificate (and chain), and examines the contents.

Note: This example requires Chilkat v9.5.0.66.

Chilkat PureBasic Module Download Chilkat PureBasic Module

IncludeFile "CkCert.pb"
IncludeFile "CkStringBuilder.pb"
IncludeFile "CkPrivateKey.pb"
IncludeFile "CkJsonObject.pb"
IncludeFile "CkPem.pb"

Procedure ChilkatExample()

    ; Note: This example requires Chilkat v9.5.0.66.

    ; This example requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    ; Create a PEM containing a valid EC private key and certificates.
    ; The password for this encrypted PEM is "secret123"

    sb.i = CkStringBuilder::ckCreate()
    If sb.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    bCrlf.i = 1
    CkStringBuilder::ckAppendLine(sb,"-----BEGIN ENCRYPTED PRIVATE KEY-----",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"MIGtMEkGCSqGSIb3DQEFDTA8MBsGCSqGSIb3DQEFDDAOBAiweNs9xIWNoAICCAAw",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"HQYJYIZIAWUDBAECBBCz0IMryNxuJEo5ChMktg9cBGCsKDEeRqGJX4g/X2c6CNtK",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"I8q7KClUwy9ms7ckHZAw/997WuW9QIGGnJEfHL/jSJsZViDwFAB4sunmdHSOTGMD",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"3ZINNlkA+XobMaQtj1HNERtb1qskW1mf/X0sauw5aPA=",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"-----END ENCRYPTED PRIVATE KEY-----",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"-----BEGIN CERTIFICATE-----",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"MIICzjCCAlOgAwIBAgIETULS8zAKBggqhkjOPQQDAzBtMQswCQYDVQQGEwJVUzEW",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"MBQGA1UEChMNRW50cnVzdCwgSW5jLjEfMB0GA1UECxMWRm9yIFRlc3QgUHVycG9z",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"ZXMgT25seTElMCMGA1UEAxMcRW50cnVzdCBFQ0MgRGVtb25zdHJhdGlvbiBDQTAe",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"Fw0xNjAzMTgxMjM5MzFaFw0xNjA1MTcxMzA5MzFaMFgxHzAdBgNVBAsTFkZvciBU",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"ZXN0IFB1cnBvc2VzIE9ubHkxHTAbBgNVBAsTFFBlcnNvbmEgTm90IFZlcmlmaWVk",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"MRYwFAYDVQQDEw1DaGlsa2F0IEFkbWluMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"uB62JGMJKXnp1PNsOOIYKGhrzfLev3O+UuthL6UzEqNNDTd8dEYMUQP/DTS3qk98",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"gyQEFxdmZUsPF0fFokkZZ1cV6z7QD3MsPvSjrBzB0GUB3r8CLnDK/F4pF2Q995hr",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"o4HYMIHVMA4GA1UdDwEB/wQEAwIDiDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYB",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"BQUHAwQwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5lbnRydXN0LmNvbS9D",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"UkwvZWNjZGVtby5jcmwwIAYDVR0RBBkwF4EVYWRtaW5AY2hpbGthdHNvZnQuY29t",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"MB8GA1UdIwQYMBaAFCQFS+Fkghr4Ccz7eHkh+nDmkzLqMB0GA1UdDgQWBBTB82fm",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"vrdG2iX5uS/agVW3L4DisjAJBgNVHRMEAjAAMAoGCCqGSM49BAMDA2kAMGYCMQCH",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"ILghMprWoYPEp9mCE+tpVE7vYwkFV3m0RDzT2BSUezL8Ky78XNk+XPqSB2biT70C",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"MQDCase1oaPY4AxCmjB+rEB1ir+QS8mrtF+iCSqHVv1aIxT6abQL57BZSdvwIm/T",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"T8o=",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"-----END CERTIFICATE-----",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"-----BEGIN CERTIFICATE-----",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"MIICljCCAhugAwIBAgIETUHhezAKBggqhkjOPQQDAzBtMQswCQYDVQQGEwJVUzEW",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"MBQGA1UEChMNRW50cnVzdCwgSW5jLjEfMB0GA1UECxMWRm9yIFRlc3QgUHVycG9z",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"ZXMgT25seTElMCMGA1UEAxMcRW50cnVzdCBFQ0MgRGVtb25zdHJhdGlvbiBDQTAe",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"Fw0xMTAxMjcyMDQ5NTRaFw0zNjAxMjcyMTE5NTRaMG0xCzAJBgNVBAYTAlVTMRYw",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"FAYDVQQKEw1FbnRydXN0LCBJbmMuMR8wHQYDVQQLExZGb3IgVGVzdCBQdXJwb3Nl",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"cyBPbmx5MSUwIwYDVQQDExxFbnRydXN0IEVDQyBEZW1vbnN0cmF0aW9uIENBMHYw",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"EAYHKoZIzj0CAQYFK4EEACIDYgAEhCWBpuJuzvRtQyibkcbCj7EkcwAqS2EqRQ/Q",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"ntroTdRM2SssEN4TruTxtwcY/7lR64L6Tfjz3+ujrfjNFss3EWVpUlbOJ+xHC3xH",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"PteNyAGZtHbZO3tVuhP6yX6dFqCCo4GLMIGIMCsGA1UdEAQkMCKADzIwMTEwMTI3",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"MjA0OTU0WoEPMjAzNjAxMjcyMTE5NTRaMAsGA1UdDwQEAwIBBjAfBgNVHSMEGDAW",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"gBQkBUvhZIIa+AnM+3h5Ifpw5pMy6jAdBgNVHQ4EFgQUJAVL4WSCGvgJzPt4eSH6",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"cOaTMuowDAYDVR0TBAUwAwEB/zAKBggqhkjOPQQDAwNpADBmAjEAyAhA70OIb6lb",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"fN6kOTQloHyCLmihNK+PT5wOuaMR//KSQP2c/H18YhDYnlwMxF9fAjEA0URaJOXM",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"F0qwdvS2rm7N5PWMLc/4BbeOZyZ94XJiG5u96iTgp6N9JI0MMmCQE87N",bCrlf)
    CkStringBuilder::ckAppendLine(sb,"-----END CERTIFICATE-----",bCrlf)

    pem.i = CkPem::ckCreate()
    If pem.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success.i = CkPem::ckLoadPem(pem,CkStringBuilder::ckGetAsString(sb),"secret123")
    If success <> 1
        Debug CkPem::ckLastErrorText(pem)
        CkStringBuilder::ckDispose(sb)
        CkPem::ckDispose(pem)
        ProcedureReturn
    EndIf

    ; Get the private key and examine it in JSON Web Key form (JWK)
    privKey.i = CkPem::ckGetPrivateKey(pem,0)
    If CkPem::ckLastMethodSuccess(pem) <> 1
        Debug CkPem::ckLastErrorText(pem)
        CkStringBuilder::ckDispose(sb)
        CkPem::ckDispose(pem)
        ProcedureReturn
    EndIf

    json.i = CkJsonObject::ckCreate()
    If json.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckLoad(json,CkPrivateKey::ckGetJwk(privKey))
    CkJsonObject::setCkEmitCompact(json, 0)
    Debug CkJsonObject::ckEmit(json)
    CkPrivateKey::ckDispose(privKey)

    ; JWK output:

    ; 	{ 
    ; 	  "kty": "EC",
    ; 	  "crv": "P-384",
    ; 	  "x": "uB62JGMJKXnp1PNsOOIYKGhrzfLev3O-UuthL6UzEqNNDTd8dEYMUQP_DTS3qk98",
    ; 	  "y": "gyQEFxdmZUsPF0fFokkZZ1cV6z7QD3MsPvSjrBzB0GUB3r8CLnDK_F4pF2Q995hr",
    ; 	  "d": "ugTy2ZpuQqv1uQyLSgz1SPRvngzrd5vLyzU2ICaJd25zZRIxxlNR-uFo9UWC6llt"
    ; 	}

    ; Now get 1st certificate and examine in XML format:
    cert.i = CkPem::ckGetCert(pem,0)
    If CkPem::ckLastMethodSuccess(pem) <> 1
        Debug CkPem::ckLastErrorText(pem)
        CkStringBuilder::ckDispose(sb)
        CkPem::ckDispose(pem)
        CkJsonObject::ckDispose(json)
        ProcedureReturn
    EndIf

    certXml.s = CkCert::ckExportCertXml(cert)
    CkCert::ckDispose(cert)

    Debug certXml

    ; XML output:

    ; <?xml version="1.0" encoding="utf-8" ?>
    ; <sequence>
    ;     <sequence>
    ;         <contextSpecific tag="0" constructed="1">
    ;             <int>02</int>
    ;         </contextSpecific>
    ;         <int>4D42D2F3</int>
    ;         <sequence>
    ;             <oid>1.2.840.10045.4.3.3</oid>
    ;         </sequence>
    ;         <sequence>
    ;             <set>
    ;                 <sequence>
    ;                     <oid>2.5.4.6</oid>
    ;                     <printable>US</printable>
    ;                 </sequence>
    ;             </set>
    ;             <set>
    ;                 <sequence>
    ;                     <oid>2.5.4.10</oid>
    ;                     <printable>Entrust, Inc.</printable>
    ;                 </sequence>
    ;             </set>
    ;             <set>
    ;                 <sequence>
    ;                     <oid>2.5.4.11</oid>
    ;                     <printable>For Test Purposes Only</printable>
    ;                 </sequence>
    ;             </set>
    ;             <set>
    ;                 <sequence>
    ;                     <oid>2.5.4.3</oid>
    ;                     <printable>Entrust ECC Demonstration CA</printable>
    ;                 </sequence>
    ;             </set>
    ;         </sequence>
    ;         <sequence>
    ;             <utctime>160318123931Z</utctime>
    ;             <utctime>160517130931Z</utctime>
    ;         </sequence>
    ;         <sequence>
    ;             <set>
    ;                 <sequence>
    ;                     <oid>2.5.4.11</oid>
    ;                     <printable>For Test Purposes Only</printable>
    ;                 </sequence>
    ;             </set>
    ;             <set>
    ;                 <sequence>
    ;                     <oid>2.5.4.11</oid>
    ;                     <printable>Persona Not Verified</printable>
    ;                 </sequence>
    ;             </set>
    ;             <set>
    ;                 <sequence>
    ;                     <oid>2.5.4.3</oid>
    ;                     <printable>Chilkat Admin</printable>
    ;                 </sequence>
    ;             </set>
    ;         </sequence>
    ;         <sequence>
    ;             <sequence>
    ;                 <oid>1.2.840.10045.2.1</oid>
    ;                 <oid>1.3.132.0.34</oid>
    ;             </sequence>
    ;             <bits n="776">04B81EB62463092979E9D4F36C38E21828686BCDF2DEBF73BE52EB612FA53312A34D0D377C74460C5103FF0D34B7AA4F7C832404171766654B0F1747C5A24919675715EB3ED00F732C3EF4A3AC1CC1D06501DEBF022E70CAFC5E2917643DF7986B</bits>
    ;         </sequence>
    ;         <contextSpecific tag="3" constructed="1">
    ;             <sequence>
    ;                 <sequence>
    ;                     <oid>2.5.29.15</oid>
    ;                     <bool>1</bool>
    ;                     <octets>AwIDiA==</octets>
    ;                 </sequence>
    ;                 <sequence>
    ;                     <oid>2.5.29.37</oid>
    ;                     <octets>MBQGCCsGAQUFBwMCBggrBgEFBQcDBA==</octets>
    ;                 </sequence>
    ;                 <sequence>
    ;                     <oid>2.5.29.31</oid>
    ;                     <octets>MC4wLKAqoCiGJmh0dHA6Ly9jcmwuZW50cnVzdC5jb20vQ1JML2VjY2RlbW8uY3Js</octets>
    ;                 </sequence>
    ;                 <sequence>
    ;                     <oid>2.5.29.17</oid>
    ;                     <octets>MBeBFWFkbWluQGNoaWxrYXRzb2Z0LmNvbQ==</octets>
    ;                 </sequence>
    ;                 <sequence>
    ;                     <oid>2.5.29.35</oid>
    ;                     <octets>MBaAFCQFS+Fkghr4Ccz7eHkh+nDmkzLq</octets>
    ;                 </sequence>
    ;                 <sequence>
    ;                     <oid>2.5.29.14</oid>
    ;                     <octets>BBTB82fmvrdG2iX5uS/agVW3L4Disg==</octets>
    ;                 </sequence>
    ;                 <sequence>
    ;                     <oid>2.5.29.19</oid>
    ;                     <octets>MAA=</octets>
    ;                 </sequence>
    ;             </sequence>
    ;         </contextSpecific>
    ;     </sequence>
    ;     <sequence>
    ;         <oid>1.2.840.10045.4.3.3</oid>
    ;     </sequence>
    ;     <bits n="832">30660231008720B821329AD6A183C4A7D98213EB69544EEF6309055779B4443CD3D814947B32FC2B2EFC5CD93E5CFA920766E24FBD023100C26AC7B5A1A3D8E00C429A307EAC40758ABF904BC9ABB45FA2092A8756FD5A2314FA69B40BE7B05949DBF0226FD34FCA</bits>
    ; </sequence>
    ; 
    ; 
    ; 


    CkStringBuilder::ckDispose(sb)
    CkPem::ckDispose(pem)
    CkJsonObject::ckDispose(json)


    ProcedureReturn
EndProcedure