(Tcl) Get a Certificate's Key Size

Demonstrates how to get the RSA key size of a certificate (for example, 1024-bit, 2048-bit, etc.)

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

#  For this example, I have a certificate in raw base64 format (not PEM),
#  that looks like this:  "MIIGkDCCBHigAwIBAgIUMDA ... s/iqLsLA=="
set sbCertBase64 [new_CkStringBuilder]

set success [CkStringBuilder_LoadFile $sbCertBase64 "qa_data/certs/base64Cert.txt" "utf-8"]

set cert [new_CkCert]

set success [CkCert_LoadFromBase64 $cert [CkStringBuilder_getAsString $sbCertBase64]]
if {[expr $success != 1]} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkStringBuilder $sbCertBase64
    delete_CkCert $cert
    exit
}

#  Get the public key.
# pubKey is a CkPublicKey
set pubKey [CkCert_ExportPublicKey $cert]
if {[expr [CkCert_get_LastMethodSuccess $cert] != 1]} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkStringBuilder $sbCertBase64
    delete_CkCert $cert
    exit
}

#  In Chilkat version v9.5.0.67, the KeySize property was added.
set numBits [CkPublicKey_get_KeySize $pubKey]
puts "Number of bits = $numBits"

#  If using an older version of Chilkat, the key size can be obtained like this:
set xml [new_CkXml]

CkXml_LoadXml $xml [CkPublicKey_getXml $pubKey]

set binDat [new_CkBinData]

CkBinData_AppendEncoded $binDat [CkXml_getChildContent $xml "Modulus"] "base64"

set numBits [expr 8 * [CkBinData_get_NumBytes $binDat]]
puts "Number of bits = $numBits"

delete_CkPublicKey $pubKey


delete_CkStringBuilder $sbCertBase64
delete_CkCert $cert
delete_CkXml $xml
delete_CkBinData $binDat