(SQL Server) Convert PEM to JKS (Java KeyStore)

Converts a PEM containing private key(s) and certificates into a JKS (Java KeyStore) formatted file.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    -- This example requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    -- The Chilkat PEM class was introduced in v9.5.0.49.  
    -- It requires the bundle to be unlocked, as shown above.
    DECLARE @pem int
    -- Use "Chilkat_9_5_0.Pem" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Pem', @pem OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    -- Load the PEM from a file.
    -- If the PEM is encrypted, provide a password.  Otherwise pass an empty string for the password.
    DECLARE @password nvarchar(4000)
    SELECT @password = 'myPassword'
    DECLARE @success int
    EXEC sp_OAMethod @pem, 'LoadPemFile', @success OUT, '../myPemFiles/myPem.pem', @password
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @pem, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @pem
        RETURN
      END

    -- Note: If the app already has the PEM pre-loaded in a string variable, then load it 
    -- by calling LoadPem instead.  
    DECLARE @pemContent nvarchar(4000)
    SELECT @pemContent = '... the PEM contents ...'
    EXEC sp_OAMethod @pem, 'LoadPem', @success OUT, @pemContent, @password
    -- Check for success as before..

    -- Convert to a JavaKeyStore object.
    -- The alias, if a non-empty string, will be applied to the 1st private key or 
    -- certificate.  All other keys and/or certificates will be assigned an auto-generated
    -- alias.
    DECLARE @alias nvarchar(4000)
    SELECT @alias = 'anything_I_want_here'

    -- This is the passord that will be required to access the created JKS.
    DECLARE @jksPassword nvarchar(4000)
    SELECT @jksPassword = 'myJksSecret'
    DECLARE @jks int
    EXEC sp_OAMethod @pem, 'ToJks', @jks OUT, @alias, @jksPassword
    EXEC sp_OAGetProperty @pem, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 = 0
      BEGIN
        EXEC sp_OAGetProperty @pem, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @pem
        RETURN
      END

    -- Save the JKS to a file.  The password passed here is used for the keyed hash of the
    -- entire JKS file.  This may be different (if desired) than the password for individual private keys
    -- contained within the JKS.  
    EXEC sp_OAMethod @jks, 'ToFile', @success OUT, @jksPassword, '../myJksFiles/myJks.jks'
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @jks, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @pem
        RETURN
      END

    EXEC @hr = sp_OADestroy @jks


    EXEC @hr = sp_OADestroy @pem


END
GO