Xbase++

Change Password for Java KeyStore File

See more Java KeyStore (JKS) Examples

Demonstrates how to load a Java keystore, change the password, and save using the new password. If the Java keystore contains only trusted root certificates, then it's simply a matter of loading the JKS with the existing password, and then saving with a new password. If the JKS contains private key entries, then each private key entry must be re-keyed using the new password by calling the ChangePassword method. Xbase++

LOCAL nSuccess
LOCAL oJks
LOCAL cOldJksPassword
LOCAL cNewJksPassword
LOCAL cJksPath
LOCAL nNumPrivateKeys
LOCAL i

nSuccess := 0

//  This requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

oJks := CreateObject("Chilkat.JavaKeyStore")

cOldJksPassword := "existingPassword"
cNewJksPassword := "newPassword"
cJksPath := "/someDir/keyStore.jks"

//  Load the Java keystore from a file.
nSuccess := oJks:LoadFile(cOldJksPassword, cJksPath)
IF (nSuccess != 1)
    ? oJks:LastErrorText
    oJks:destroy()
    RETURN
ENDIF

//  If the JKS contains private key entries, then each
//  must be re-keyed with the new password by calling ChangePassword.
nNumPrivateKeys := oJks:NumPrivateKeys

i := 0
DO WHILE i < nNumPrivateKeys

    nSuccess := oJks:ChangePassword(i, cOldJksPassword, cNewJksPassword)
    IF (nSuccess != 1)
        ? oJks:LastErrorText
        oJks:destroy()
        RETURN
    ENDIF

    i := i + 1
ENDDO

//  Write the JKS using the new password for the JKS file's keyed digest.
nSuccess := oJks:ToFile(cNewJksPassword, cJksPath)
IF (nSuccess != 1)
    ? oJks:LastErrorText
    oJks:destroy()
    RETURN
ENDIF

? "Updated the password for the Java keystore file."

oJks:destroy()