(Swift 2) Load Particular CA Certs into a Java KeyStore

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates.

Chilkat Downloads for the Swift Programming Language MAC OS X (Cocoa) Objective-C/Swift Libs iOS Objective-C/Swift Libs

func chilkatTest() {
    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    let jks = CkoJavaKeyStore()

    let troots = CkoTrustedRoots()

    // Load certificates from a file.
    var success: Bool = troots.LoadCaCertsPem("qa_data/curl_cacert.pem")
    if success != true {
        print("\(troots.LastErrorText)")
        return
    }

    let sbDn = CkoStringBuilder()
    let sbAlias = CkoStringBuilder()
    var caseSensitive: Bool = false

    var i: Int = 0
    var numCerts: Int = troots.NumCerts.intValue
    var numAdded: Int = 0
    while (i < numCerts) {
        var cacert: CkoCert? = troots.GetCert(i)
        sbDn.Clear()
        sbDn.Append(cacert!.SubjectDN)
        if sbDn.Contains("Entrust.net", caseSensitive: caseSensitive) == true {
            print("\(cacert!.SubjectDN)")

            // The alias is an arbitrary unique string for each cert in the JKS.
            sbAlias.Clear()
            sbAlias.Append("cacert_")
            sbAlias.AppendInt(i + 1)
            jks.AddTrustedCert(cacert, alias: sbAlias.GetAsString())
            numAdded = numAdded + 1
        }

        cacert = nil
        i = i + 1
    }

    // Verify the number of certs in the JKS equals the number we added.
    var numJksCerts: Int = jks.NumTrustedCerts.intValue
    print("NumTrustedCerts = \(numJksCerts)")
    if numJksCerts != numAdded {
        print("Something is amiss!")
        return
    }

    // Save the JKS.
    success = jks.ToFile("myPassword", path: "qa_data/jks/entrust_caCerts.jks")
    if success != true {
        print("\(jks.LastErrorText)")
        return
    }

    print("Success.")

    // The output of this program when tested was:

    // C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
    // O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
    // C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
    // NumTrustedCerts = 3
    // Success.

}