CkPython

Get the Certificate with Private Key from a Java KeyStore

See more Java KeyStore (JKS) Examples

Load a Chilkat certificate object from a Java KeyStore. CkPython

import sys
import chilkat

success = False

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Most of the time a .jks contains one certificate with it's associated private key.
# (Similar to how a .pfx/.p12 usually contains a particular certificate with private key.)
# This example demonstrates how to get the certificate with private key such that it can be used
# by other Chilkat classes wherever a cert w/ private key is needed.
jks = chilkat.CkJavaKeyStore()
password = "secret"
success = jks.LoadFile(password,"qa_data/jks/test_secret.jks")
if (success == False):
    print(jks.lastErrorText())
    sys.exit()

# Make sure we have a private key.
if (jks.get_NumPrivateKeys() < 1):
    print("No private key available.")
    sys.exit()

# -------------------------------------------------------------------------
# Get the certificate chain associated with the 1st (and probably only) private key in the JKS.

chain = chilkat.CkCertChain()
success = jks.CertChainAt(0,chain)
if (success == False):
    print(jks.lastErrorText())
    sys.exit()

cert = chilkat.CkCert()
success = chain.CertAt(0,cert)
if (success == False):
    print(chain.lastErrorText())
    sys.exit()

# Verify again that this cert has a private key.
if (cert.HasPrivateKey() != True):
    print("Certificate has no associated private key.")
    sys.exit()

# We now have the cert object with it's associated private key, and it can be used in other Chilkat classes where needed.
# For example..

crypt = chilkat.CkCrypt2()
success = crypt.SetSigningCert(cert)
if (success == False):
    print(crypt.lastErrorText())
    sys.exit()

# ...
# ...