(CkPython) Install PFX Certificates and Private Keys to Windows

Demonstrates how to install the certificates and private keys contained in a PFX to the Windows certificate stores.

Note: This example requires Chilkat v9.5.0.83 or greater.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# Note: This example requires Chilkat v9.5.0.83 or greater.

pfx = chilkat.CkPfx()

success = pfx.LoadPfxFile("qa_data/pfx/test_secret.pfx","secret")
if (success == False):
    print(pfx.lastErrorText())
    sys.exit()

# See the online reference documentation for more information about the ImportToWindows method.

# Mark imported privae keys as exportable.
exportable = True

# If userProtected is True, the user is to be notified through a dialog box or other method when certain attempts to use this key are made. 
userProtected = False

# If machineKeyset is True, the private keys are stored under the local computer and not under the current user. 
machineKeyset = False

# If allowOverwriteKey is True, allow overwrite of the existing key. 
allowOverwriteKey = False

# If allowExport is True, then the imported key can later be exported back to a PFX.
# (It also allows for applications to directly access the private key material.)
allowExport = True

# Indicate where to import types of certs.
leafStore = "My"
intermediateStore = "CertificationAuthority"
rootStore = "AuthRoot"

success = pfx.ImportToWindows(exportable,userProtected,machineKeyset,allowOverwriteKey,allowExport,leafStore,intermediateStore,rootStore,"")
if (success == False):
    print(pfx.lastErrorText())
    sys.exit()

# Show information about the certificates imported
# json is a CkJsonObject
json = pfx.LastJsonData()
json.put_EmitCompact(False)
print(json.emit())

# Sample LastJsonData:

# {
#   "exportable": true,
#   "userProtected": false,
#   "machineKeyset": false,
#   "allowOverwriteKey": false,
#   "allowExport": true,
#   "key": [
#     {
#       "name": "{F09B755A-1E90-444D-9851-02B86CA14961}",
#       "storageProvider": "Microsoft Software Key Storage Provider"
#     }
#   ],
#   "cert": [
#     {
#       "DN": "...",
#       "type": "intermediate",
#       "storeName": "CertificationAuthority",
#       "imported": true
#     },
#     {
#       "DN": "...",
#       "type": "root",
#       "storeName": "AuthRoot",
#       "imported": true
#     },
#     {
#       "DN": "....",
#       "type": "leaf",
#       "storeName": "My",
#       "keyContainer": "{345D4EAD-B8DD-4150-9A1F-4BC6437E77A2}",
#       "machineKeyset": true,
#       "imported": true
#     }
#   ]
# }

print("Success.")