(Swift 3,4,5...) Load Certificate from PFX (PKCS#12)

Loads a digital certificate (and private key, if available) from a PFX file.(also known as PKCS#12)

Chilkat Downloads for the Swift Programming Language MAC OS X (Cocoa) Objective-C/Swift Libs iOS Objective-C/Swift Libs

func chilkatTest() {
    let cert = CkoCert()!

    var success: Bool

    // Load from the PFX file
    var pfxFilename: String? = "/Users/chilkat/testData/pfx/chilkat_ssl_pwd_is_test.pfx"
    var pfxPassword: String? = "test"

    // A PFX typically contains certificates in the chain of authentication.
    // The Chilkat cert object will choose the certificate w/
    // private key farthest from the root authority cert.
    // To access all the certificates in a PFX, use the 
    // Chilkat certificate store object instead.
    success = cert.loadPfxFile(pfxFilename, password: pfxPassword)
    if success != true {
        print("\(cert.lastErrorText!)")
        return
    }

    // Get some information about the digital certificate, 
    // then get the private key...

    // DN = "Distinguished Name"
    print("SubjectDN:\(cert.subjectDN!)")

    print("Common Name:\(cert.subjectCN!)")
    print("Issuer Common Name:\(cert.issuerCN!)")

    print("Serial Number:\(cert.serialNumber!)")

    // Now for the private key...
    var privKey: CkoPrivateKey?

    privKey = cert.exportPrivateKey()
    if cert.lastMethodSuccess == false {
        print("\(cert.lastErrorText!)")
        return
    }

    // The private key object may be used in any Chilkat methods
    // (in other objects/classes) that expect a private key argument.

    // In this case, save the private key to a PKCS8 Encrypted PEM format file:
    var pemPassword: String? = "secret"
    var pemPath: String? = "/Users/chilkat/testData/pem/chilkat_privKey.pem"
    success = privKey!.savePkcs8EncryptedPemFile(pemPassword, path: pemPath)
    if success != true {
        print("\(privKey!.lastErrorText!)")
        privKey = nil
        return
    }

    privKey = nil
    print("Private key saved to PKCS8 Encrypted PEM...")

}