(CkPython) Get the Certificate with Private Key from a Java KeyStore

See more Java KeyStore (JKS) Examples

Load a Chilkat certificate object from a Java KeyStore.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Most of the time a .jks contains one certificate with it's associated private key.
# (Similar to how a .pfx/.p12 usually contains a particular certificate with private key.)
# This example demonstrates how to get the certificate with private key such that it can be used
# by other Chilkat classes wherever a cert w/ private key is needed.
jks = chilkat.CkJavaKeyStore()
password = "secret"
success = jks.LoadFile(password,"qa_data/jks/test_secret.jks")
if (success != True):
    print(jks.lastErrorText())
    sys.exit()

# Make sure we have a private key.
if (jks.get_NumPrivateKeys() < 1):
    print("No private key available.")
    sys.exit()

# -------------------------------------------------------------------------
# Get the certificate chain associated with the 1st (and probably only) private key in the JKS.
# chain is a CkCertChain
chain = jks.GetCertChain(0)
if (jks.get_LastMethodSuccess() != True):
    print(jks.lastErrorText())
    sys.exit()

# cert is a CkCert
cert = chain.GetCert(0)
if (chain.get_LastMethodSuccess() != True):
    print(chain.lastErrorText())

    sys.exit()

# Verify again that this cert has a private key.
if (cert.HasPrivateKey() != True):
    print("Certificate has no associated private key.")

    sys.exit()

# We now have the cert object with it's associated private key, and it can be used in other Chilkat classes where needed.
# For example..

crypt = chilkat.CkCrypt2()
success = crypt.SetSigningCert(cert)
if (success == False):
    print(crypt.lastErrorText())
    sys.exit()

# ...
# ...