(Tcl) Find a Certificate by it's SHA-1 Thumbprint

Finds a certificate by it's SHA-1 hex thumbprint. Parts of this example are specific to Windows because it searches the Windows Current User certificate store.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

set certStore [new_CkCertStore]

set thumbprint "12c1dd8015f3f03f7b1fa619dc24e2493ca8b4b2"

# This part of the example is specific to Windows because it is opening the Windows Current-User certificate store.
set bReadOnly 1
set success [CkCertStore_OpenCurrentUserStore $certStore $bReadOnly]
if {$success != 1} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkCertStore $certStore
    exit
}

# Find the certificate with the desired thumbprint
# cert is a CkCert
set cert [CkCertStore_FindCertBySha1Thumbprint $certStore $thumbprint]
if {[CkCertStore_get_LastMethodSuccess $certStore] != 1} then {
    puts "Failed to find the certificate."
    delete_CkCertStore $certStore
    exit
}

puts "Found: [CkCert_subjectCN $cert]"
delete_CkCert $cert

# -------------------------------------------------------------------------------------
# Alternatively, one could load a certificate store object with certs from a PEM file,
# and do the same thing..
set certStorePem [new_CkCertStore]

set success [CkCertStore_LoadPemFile $certStorePem "pemFiles/certificates.pem"]
if {$success != 1} then {
    puts [CkCertStore_lastErrorText $certStorePem]
    delete_CkCertStore $certStore
    delete_CkCertStore $certStorePem
    exit
}

set cert [CkCertStore_FindCertBySha1Thumbprint $certStorePem $thumbprint]
if {[CkCertStore_get_LastMethodSuccess $certStorePem] != 1} then {
    puts "Failed to find the certificate."
    delete_CkCertStore $certStore
    delete_CkCertStore $certStorePem
    exit
}

puts "Found: [CkCert_subjectCN $cert]"
delete_CkCert $cert


delete_CkCertStore $certStore
delete_CkCertStore $certStorePem