Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Unicode C) AWS KMS Import PFX KeySee more AWS KMS ExamplesImports a certificate's private key from a .pfx file to new key created in AWS KMS. Note: This example requires Chilkat v9.5.0.96 or later.
#include <C_CkCertW.h> #include <C_CkPrivateKeyW.h> #include <C_CkJsonObjectW.h> void ChilkatSample(void) { HCkCertW cert; BOOL success; HCkPrivateKeyW privKey; HCkJsonObjectW json; HCkJsonObjectW jsonOut; // This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // Note: This example is using a relative file path. You can also specify a full file path, such as "C:/someDir/myCertAndKey.pfx" // or a file path the makes sense on non-Windows operating systems.. cert = CkCertW_Create(); success = CkCertW_LoadPfxFile(cert,L"qa_data/pfx/myCertAndKey.pfx",L"pfx_password"); if (success == FALSE) { wprintf(L"%s\n",CkCertW_lastErrorText(cert)); CkCertW_Dispose(cert); return; } // Get the cert's private key. This is what will be uploaded to AWS KMS. privKey = CkCertW_ExportPrivateKey(cert); if (CkCertW_getLastMethodSuccess(cert) == FALSE) { wprintf(L"The certificate does not have a private key.\n"); CkCertW_Dispose(cert); return; } json = CkJsonObjectW_Create(); CkJsonObjectW_UpdateString(json,L"service",L"aws-kms"); CkJsonObjectW_UpdateString(json,L"auth.access_key",L"AWS_ACCESS_KEY"); CkJsonObjectW_UpdateString(json,L"auth.secret_key",L"AWS_SECRET_KEY"); CkJsonObjectW_UpdateString(json,L"auth.region",L"us-west-2"); CkJsonObjectW_UpdateString(json,L"description",L"Test of uploading existing private key to AWS KMS"); // Let's add some information about the certificate this key belongs to. // This is for informational purposes only, so that we can examine the tags // in the AWS KMS console and know the corresponding certificate. CkJsonObjectW_UpdateString(json,L"tags[0].key",L"CertSerial"); CkJsonObjectW_UpdateString(json,L"tags[0].value",CkCertW_serialNumber(cert)); CkJsonObjectW_UpdateString(json,L"tags[1].key",L"CertIssuer"); CkJsonObjectW_UpdateString(json,L"tags[1].value",CkCertW_issuerCN(cert)); CkJsonObjectW_UpdateString(json,L"tags[2].key",L"CertSubject"); CkJsonObjectW_UpdateString(json,L"tags[2].value",CkCertW_subjectCN(cert)); CkJsonObjectW_UpdateString(json,L"keyUsage",L"SIGN_VERIFY"); // The UploadToCloud method was added in Chilkat v9.5.0.96 jsonOut = CkJsonObjectW_Create(); success = CkPrivateKeyW_UploadToCloud(privKey,json,jsonOut); if (success == FALSE) { wprintf(L"%s\n",CkPrivateKeyW_lastErrorText(privKey)); CkPrivateKeyW_Dispose(privKey); CkCertW_Dispose(cert); CkJsonObjectW_Dispose(json); CkJsonObjectW_Dispose(jsonOut); return; } CkPrivateKeyW_Dispose(privKey); // When successful, the jsonOut contains information about the private key in AWS KMS. // Most importantly, the KeyId. CkJsonObjectW_putEmitCompact(jsonOut,FALSE); wprintf(L"%s\n",CkJsonObjectW_emit(jsonOut)); // Sample JSON result: // { // "AWSAccountId": "954491834127", // "Arn": "arn:aws:kms:us-west-2:954491834127:key/187012e8-008f-4fc7-b100-5efe6146dff2", // "KeySpec": "RSA_4096", // "Description": "Test of uploading existing private key to AWS KMS", // "KeyId": "187012e8-008f-4fc7-b100-5efe6146dff2", // "KeyUsage": "SIGN_VERIFY" // } CkCertW_Dispose(cert); CkJsonObjectW_Dispose(json); CkJsonObjectW_Dispose(jsonOut); } |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.