Tcl

Load Certificate (.cer) and Private Key (.pvk) generated from makecert

See more Certificates Examples

Demonstrates how to load a certificate (.cer) and private key (.pvk) from the files produced by makecert, such as in the following command:

makecert -sv mycertificate.pvk -n "CN=My Simple Certificate" mycertificate.cer -sky Exchange

Tcl

load ./chilkat.dll

set success 0

# First load the .cer file.
# The certificate file (.cer) contains only the certificate (does not include the private key)
set cert [new_CkCert]

set success [CkCert_LoadFromFile $cert "qa_data/certs_and_keys/makecert/mycertificate.cer"]
if {$success == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert
    exit
}

# Next, load the .pvk file.
# Note: The password "secret" is what you entered when makecert displayed the dialog asking for a password..
set privKey [new_CkPrivateKey]

set success [CkPrivateKey_LoadPvkFile $privKey "qa_data/certs_and_keys/makecert/mycertificate.pvk" "secret"]
if {$success == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkCert $cert
    delete_CkPrivateKey $privKey
    exit
}

# Finally, associate the private key with the certificate.
set success [CkCert_SetPrivateKey $cert $privKey]
if {$success == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert
    delete_CkPrivateKey $privKey
    exit
}

# At this point, the certificate can be used for signing.  For example..
set pdf [new_CkPdf]

# ....
# ....

set success [CkPdf_SetSigningCert $pdf $cert]

# ...
# ....

# Some Chilkat classes also provide a method where the cert and private key can be passed separately.
# For example, if SetSigningCert2 is called, then we don't need to explicitly associate the private key with the cert.
set success [CkPdf_SetSigningCert2 $pdf $cert $privKey]

# ...
# ....

delete_CkCert $cert
delete_CkPrivateKey $privKey
delete_CkPdf $pdf