(Tcl) Get the Certificate with Private Key from a Java KeyStore

See more Java KeyStore (JKS) Examples

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Most of the time a .jks contains one certificate with it's associated private key.
# (Similar to how a .pfx/.p12 usually contains a particular certificate with private key.)
# This example demonstrates how to get the certificate with private key such that it can be used
# by other Chilkat classes wherever a cert w/ private key is needed.
set jks [new_CkJavaKeyStore]

set password "secret"
set success [CkJavaKeyStore_LoadFile $jks $password "qa_data/jks/test_secret.jks"]
if {$success != 1} then {
    puts [CkJavaKeyStore_lastErrorText $jks]
    delete_CkJavaKeyStore $jks
    exit
}

# Make sure we have a private key.
if {[CkJavaKeyStore_get_NumPrivateKeys $jks] < 1} then {
    puts "No private key available."
    delete_CkJavaKeyStore $jks
    exit
}

# -------------------------------------------------------------------------
# Get the certificate chain associated with the 1st (and probably only) private key in the JKS.
# chain is a CkCertChain
set chain [CkJavaKeyStore_GetCertChain $jks 0]
if {[CkJavaKeyStore_get_LastMethodSuccess $jks] != 1} then {
    puts [CkJavaKeyStore_lastErrorText $jks]
    delete_CkJavaKeyStore $jks
    exit
}

# cert is a CkCert
set cert [CkCertChain_GetCert $chain 0]
if {[CkCertChain_get_LastMethodSuccess $chain] != 1} then {
    puts [CkCertChain_lastErrorText $chain]
    delete_CkCertChain $chain

    delete_CkJavaKeyStore $jks
    exit
}

delete_CkCertChain $chain

# Verify again that this cert has a private key.
if {[CkCert_HasPrivateKey $cert] != 1} then {
    puts "Certificate has no associated private key."
    delete_CkCert $cert

    delete_CkJavaKeyStore $jks
    exit
}

# We now have the cert object with it's associated private key, and it can be used in other Chilkat classes where needed.
# For example..

set crypt [new_CkCrypt2]

set success [CkCrypt2_SetSigningCert $crypt $cert]
if {$success == 0} then {
    puts [CkCrypt2_lastErrorText $crypt]
    delete_CkJavaKeyStore $jks
    delete_CkCrypt2 $crypt
    exit
}

# ...
# ...

delete_CkCert $cert


delete_CkJavaKeyStore $jks
delete_CkCrypt2 $crypt