Ruby

Load Particular CA Certs into a Java KeyStore

See more Java KeyStore (JKS) Examples

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates. Ruby

require 'chilkat'

success = false

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

jks = Chilkat::CkJavaKeyStore.new()

troots = Chilkat::CkTrustedRoots.new()

# Load certificates from a file.
success = troots.LoadCaCertsPem("qa_data/curl_cacert.pem")
if (success != true)
    print troots.lastErrorText() + "\n";
    exit
end

sbDn = Chilkat::CkStringBuilder.new()
sbAlias = Chilkat::CkStringBuilder.new()
caseSensitive = false

i = 0
numCerts = troots.get_NumCerts()
numAdded = 0
while (i < numCerts)
    # cacert is a CkCert
    cacert = troots.GetCert(i)
    sbDn.Clear()
    sbDn.Append(cacert.subjectDN())
    if (sbDn.Contains("Entrust.net",caseSensitive) == true)
        print cacert.subjectDN() + "\n";

        # The alias is an arbitrary unique string for each cert in the JKS.
        sbAlias.Clear()
        sbAlias.Append("cacert_")
        sbAlias.AppendInt(i + 1)
        jks.AddTrustedCert(cacert,sbAlias.getAsString())
        numAdded = numAdded + 1
    end

    i = i + 1
end

# Verify the number of certs in the JKS equals the number we added.
numJksCerts = jks.get_NumTrustedCerts()
print "NumTrustedCerts = " + numJksCerts.to_s() + "\n";
if (numJksCerts != numAdded)
    print "Something is amiss!" + "\n";
    exit
end

# Save the JKS.
success = jks.ToFile("myPassword","qa_data/jks/entrust_caCerts.jks")
if (success != true)
    print jks.lastErrorText() + "\n";
    exit
end

print "Success." + "\n";

# The output of this program when tested was:

# C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
# O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
# C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
# NumTrustedCerts = 3
# Success.