(Tcl) Convert Java KeyStore to PEM

Loads a Java keystore file and saves the trusted certificate entries to a PEM file.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set jks [new_CkJavaKeyStore]

set jksPassword "myJksPassword"

# Load the Java keystore from a file.  The JKS file password is used
# to verify the keyed digest that is found at the very end of the keystore.
# It verifies that the keystore has not been modified.
set success [CkJavaKeyStore_LoadFile $jks $jksPassword "/someDir/keyStore.jks"]
if {$success != 1} then {
    puts [CkJavaKeyStore_lastErrorText $jks]
    delete_CkJavaKeyStore $jks
    exit
}

# Open/create the output PEM file. 
# This example uses Chilkat's file access class for writing the output file.
# You may replace the file I/O lines of code with whatever is most convenient for you.
set fac [new_CkFileAccess]

set success [CkFileAccess_OpenForWrite $fac "/pemFiles/caCerts.pem"]
if {$success != 1} then {
    puts [CkFileAccess_lastErrorText $fac]
    delete_CkJavaKeyStore $jks
    delete_CkFileAccess $fac
    exit
}

set numCerts [CkJavaKeyStore_get_NumTrustedCerts $jks]

# cert is a CkCert

# Iterate over the trusted certs, get the PEM for each,
# and append it to the output file.
set i 0
while {$i < $numCerts} {
    set cert [CkJavaKeyStore_GetTrustedCert $jks $i]

    # Get the certificate in PEM format.  
    set pem [CkCert_exportCertPem $cert]

    # Append the PEM string to the open file.
    # The PEM contains only us-ascii chars..
    set success [CkFileAccess_AppendAnsi $fac $pem]
    if {$success != 1} then {
        puts [CkFileAccess_lastErrorText $fac]
        delete_CkCert $cert

        delete_CkJavaKeyStore $jks
        delete_CkFileAccess $fac
        exit
    }

    delete_CkCert $cert

    set i [expr $i + 1]
}

# Close the output file.
CkFileAccess_FileClose $fac

puts "Trusted certificates saved to PEM."

delete_CkJavaKeyStore $jks
delete_CkFileAccess $fac