(CkPython) Use a Custom Set of Trusted Root Certificates

Demonstrates how to build a set of trusted root certificates to be used globally by all Chilkat classes.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

trustedRoots = chilkat.CkTrustedRoots()

#  Indicate that we will NOT trust any pre-installed certificates on the system.
trustedRoots.put_TrustSystemCaRoots(False)

# Thawte is a certificate authority that provides a .zip download of their
# root CA certificates:  https://www.thawte.com/roots/index.html
# The direct download link is: https://www.verisign.com/support/thawte-roots.zip
# Note: The above URLs are valid at the time of writing this example (29-May-2015).

# Assuming the .zip has already been downloaded, open it and load each .pem file into
# our trusted roots object.
zip = chilkat.CkZip()

# Open a .zip containing PEM files, among other things..
success = zip.OpenZip("qa_data/certs/thawte-roots.zip")
if (success != True):
    print(zip.lastErrorText())
    sys.exit()

# entry is a CkZipEntry
entry = zip.FirstMatchingEntry("*.pem")
if (zip.get_LastMethodSuccess() != True):
    print("No entries matched.")
    sys.exit()

cert = chilkat.CkCert()

bHasMoreEntries = True
while (bHasMoreEntries == True) :

    print("Entry: " + entry.fileName())

    # Get the PEM of the CA cert:
    pemStr = entry.unzipToString(0,"utf-8")

    # Load it into a certificate object:
    success = cert.LoadPem(pemStr)
    if (success != True):
        print(cert.lastErrorText())

    # Add it to the trusted roots.
    trustedRoots.AddCert(cert)

    # The NextMatchingEntry method was added in v9.5.0.50
    # nextEntry is a CkZipEntry
    nextEntry = entry.NextMatchingEntry("*.pem")
    bHasMoreEntries = entry.get_LastMethodSuccess()

    # entry is a CkZipEntry
    entry = nextEntry

#  Activate the trusted roots globally for all Chilkat objects.
#  This call really shouldn't fail, so we're not checking the return value.
success = trustedRoots.Activate()