Tcl Requires Chilkat v11.0.0+

Convert PEM to JKS (Java KeyStore)

See more PEM Examples

Converts a PEM containing private key(s) and certificates into a JKS (Java KeyStore) formatted file. Tcl

load ./chilkat.dll

set success 0

#  This example requires the Chilkat API to have been previously unlocked.
#  See Global Unlock Sample for sample code.

set pem [new_CkPem]

#  Load the PEM from a file.
#  If the PEM is encrypted, provide a password.  Otherwise pass an empty string for the password.
set password "myPassword"
set success [CkPem_LoadPemFile $pem "../myPemFiles/myPem.pem" $password]
if {$success == 0} then {
    puts [CkPem_lastErrorText $pem]
    delete_CkPem $pem
    exit
}

#  Note: If the app already has the PEM pre-loaded in a string variable, then load it 
#  by calling LoadPem instead.  
set pemContent "... the PEM contents ..."
set success [CkPem_LoadPem $pem $pemContent $password]
#  Check for success as before..

#  Convert to a JavaKeyStore object.
#  The alias, if a non-empty string, will be applied to the 1st private key or 
#  certificate.  All other keys and/or certificates will be assigned an auto-generated
#  alias.
set alias "anything_I_want_here"

#  This is the passord that will be required to access the created JKS.
set jksPassword "myJksSecret"
set jks [new_CkJavaKeyStore]

set success [CkPem_ToJksObj $pem $alias $jksPassword $jks]
if {$success == 0} then {
    puts [CkPem_lastErrorText $pem]
    delete_CkPem $pem
    delete_CkJavaKeyStore $jks
    exit
}

#  Save the JKS to a file.  The password passed here is used for the keyed hash of the
#  entire JKS file.  This may be different (if desired) than the password for individual private keys
#  contained within the JKS.  
set success [CkJavaKeyStore_ToFile $jks $jksPassword "../myJksFiles/myJks.jks"]
if {$success == 0} then {
    puts [CkJavaKeyStore_lastErrorText $jks]
    delete_CkPem $pem
    delete_CkJavaKeyStore $jks
    exit
}


delete_CkPem $pem
delete_CkJavaKeyStore $jks