(Tcl) Convert PEM to JKS (Java KeyStore)

Converts a PEM containing private key(s) and certificates into a JKS (Java KeyStore) formatted file.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# The Chilkat PEM class was introduced in v9.5.0.49.  
# It requires the bundle to be unlocked, as shown above.
set pem [new_CkPem]

# Load the PEM from a file.
# If the PEM is encrypted, provide a password.  Otherwise pass an empty string for the password.
set password "myPassword"
set success [CkPem_LoadPemFile $pem "../myPemFiles/myPem.pem" $password]
if {$success != 1} then {
    puts [CkPem_lastErrorText $pem]
    delete_CkPem $pem
    exit
}

# Note: If the app already has the PEM pre-loaded in a string variable, then load it 
# by calling LoadPem instead.  
set pemContent "... the PEM contents ..."
set success [CkPem_LoadPem $pem $pemContent $password]
# Check for success as before..

# Convert to a JavaKeyStore object.
# The alias, if a non-empty string, will be applied to the 1st private key or 
# certificate.  All other keys and/or certificates will be assigned an auto-generated
# alias.
set alias "anything_I_want_here"

# This is the passord that will be required to access the created JKS.
set jksPassword "myJksSecret"
# jks is a CkJavaKeyStore
set jks [CkPem_ToJks $pem $alias $jksPassword]
if {[CkPem_get_LastMethodSuccess $pem] == 0} then {
    puts [CkPem_lastErrorText $pem]
    delete_CkPem $pem
    exit
}

# Save the JKS to a file.  The password passed here is used for the keyed hash of the
# entire JKS file.  This may be different (if desired) than the password for individual private keys
# contained within the JKS.  
set success [CkJavaKeyStore_ToFile $jks $jksPassword "../myJksFiles/myJks.jks"]
if {$success != 1} then {
    puts [CkJavaKeyStore_lastErrorText $jks]
    delete_CkPem $pem
    exit
}

delete_CkJavaKeyStore $jks


delete_CkPem $pem