(Tcl) Install PFX Certificates and Private Keys to Windows

Demonstrates how to install the certificates and private keys contained in a PFX to the Windows certificate stores.

Note: This example requires Chilkat v9.5.0.83 or greater.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# Note: This example requires Chilkat v9.5.0.83 or greater.

set pfx [new_CkPfx]

set success [CkPfx_LoadPfxFile $pfx "qa_data/pfx/test_secret.pfx" "secret"]
if {$success == 0} then {
    puts [CkPfx_lastErrorText $pfx]
    delete_CkPfx $pfx
    exit
}

# See the online reference documentation for more information about the ImportToWindows method.

# Mark imported privae keys as exportable.
set exportable 1

# If userProtected is 1, the user is to be notified through a dialog box or other method when certain attempts to use this key are made. 
set userProtected 0

# If machineKeyset is 1, the private keys are stored under the local computer and not under the current user. 
set machineKeyset 0

# If allowOverwriteKey is 1, allow overwrite of the existing key. 
set allowOverwriteKey 0

# If allowExport is 1, then the imported key can later be exported back to a PFX.
# (It also allows for applications to directly access the private key material.)
set allowExport 1

# Indicate where to import types of certs.
set leafStore "My"
set intermediateStore "CertificationAuthority"
set rootStore "AuthRoot"

set success [CkPfx_ImportToWindows $pfx $exportable $userProtected $machineKeyset $allowOverwriteKey $allowExport $leafStore $intermediateStore $rootStore ""]
if {$success == 0} then {
    puts [CkPfx_lastErrorText $pfx]
    delete_CkPfx $pfx
    exit
}

# Show information about the certificates imported
# json is a CkJsonObject
set json [CkPfx_LastJsonData $pfx]
CkJsonObject_put_EmitCompact $json 0
puts [CkJsonObject_emit $json]
delete_CkJsonObject $json

# Sample LastJsonData:

# {
#   "exportable": true,
#   "userProtected": false,
#   "machineKeyset": false,
#   "allowOverwriteKey": false,
#   "allowExport": true,
#   "key": [
#     {
#       "name": "{F09B755A-1E90-444D-9851-02B86CA14961}",
#       "storageProvider": "Microsoft Software Key Storage Provider"
#     }
#   ],
#   "cert": [
#     {
#       "DN": "...",
#       "type": "intermediate",
#       "storeName": "CertificationAuthority",
#       "imported": true
#     },
#     {
#       "DN": "...",
#       "type": "root",
#       "storeName": "AuthRoot",
#       "imported": true
#     },
#     {
#       "DN": "....",
#       "type": "leaf",
#       "storeName": "My",
#       "keyContainer": "{345D4EAD-B8DD-4150-9A1F-4BC6437E77A2}",
#       "machineKeyset": true,
#       "imported": true
#     }
#   ]
# }

puts "Success."

delete_CkPfx $pfx