Sample code for 30+ languages & platforms
Xbase++ Requires Chilkat v11.0.0+

Load Encrypted PEM Containing ECC Private Key and Certs and Examine Contents

See more PEM Examples

Loads an encrypted PEM containing an ECC private key and ECC certificate (and chain), and examines the contents.

Chilkat Xbase++ Downloads

Xbase++
LOCAL nSuccess
LOCAL oSb
LOCAL nBCrlf
LOCAL oPem
LOCAL oPrivKey
LOCAL oJson
LOCAL oCert
LOCAL cCertXml

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  Create a PEM containing a valid EC private key and certificates.
//  The password for this encrypted PEM is "secret123"

oSb := CreateObject("Chilkat.StringBuilder")
nBCrlf := 1
oSb:AppendLine("-----BEGIN ENCRYPTED PRIVATE KEY-----", nBCrlf)
oSb:AppendLine("MIGtMEkGCSqGSIb3DQEFDTA8MBsGCSqGSIb3DQEFDDAOBAiweNs9xIWNoAICCAAw", nBCrlf)
oSb:AppendLine("HQYJYIZIAWUDBAECBBCz0IMryNxuJEo5ChMktg9cBGCsKDEeRqGJX4g/X2c6CNtK", nBCrlf)
oSb:AppendLine("I8q7KClUwy9ms7ckHZAw/997WuW9QIGGnJEfHL/jSJsZViDwFAB4sunmdHSOTGMD", nBCrlf)
oSb:AppendLine("3ZINNlkA+XobMaQtj1HNERtb1qskW1mf/X0sauw5aPA=", nBCrlf)
oSb:AppendLine("-----END ENCRYPTED PRIVATE KEY-----", nBCrlf)
oSb:AppendLine("-----BEGIN CERTIFICATE-----", nBCrlf)
oSb:AppendLine("MIICzjCCAlOgAwIBAgIETULS8zAKBggqhkjOPQQDAzBtMQswCQYDVQQGEwJVUzEW", nBCrlf)
oSb:AppendLine("MBQGA1UEChMNRW50cnVzdCwgSW5jLjEfMB0GA1UECxMWRm9yIFRlc3QgUHVycG9z", nBCrlf)
oSb:AppendLine("ZXMgT25seTElMCMGA1UEAxMcRW50cnVzdCBFQ0MgRGVtb25zdHJhdGlvbiBDQTAe", nBCrlf)
oSb:AppendLine("Fw0xNjAzMTgxMjM5MzFaFw0xNjA1MTcxMzA5MzFaMFgxHzAdBgNVBAsTFkZvciBU", nBCrlf)
oSb:AppendLine("ZXN0IFB1cnBvc2VzIE9ubHkxHTAbBgNVBAsTFFBlcnNvbmEgTm90IFZlcmlmaWVk", nBCrlf)
oSb:AppendLine("MRYwFAYDVQQDEw1DaGlsa2F0IEFkbWluMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE", nBCrlf)
oSb:AppendLine("uB62JGMJKXnp1PNsOOIYKGhrzfLev3O+UuthL6UzEqNNDTd8dEYMUQP/DTS3qk98", nBCrlf)
oSb:AppendLine("gyQEFxdmZUsPF0fFokkZZ1cV6z7QD3MsPvSjrBzB0GUB3r8CLnDK/F4pF2Q995hr", nBCrlf)
oSb:AppendLine("o4HYMIHVMA4GA1UdDwEB/wQEAwIDiDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYB", nBCrlf)
oSb:AppendLine("BQUHAwQwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5lbnRydXN0LmNvbS9D", nBCrlf)
oSb:AppendLine("UkwvZWNjZGVtby5jcmwwIAYDVR0RBBkwF4EVYWRtaW5AY2hpbGthdHNvZnQuY29t", nBCrlf)
oSb:AppendLine("MB8GA1UdIwQYMBaAFCQFS+Fkghr4Ccz7eHkh+nDmkzLqMB0GA1UdDgQWBBTB82fm", nBCrlf)
oSb:AppendLine("vrdG2iX5uS/agVW3L4DisjAJBgNVHRMEAjAAMAoGCCqGSM49BAMDA2kAMGYCMQCH", nBCrlf)
oSb:AppendLine("ILghMprWoYPEp9mCE+tpVE7vYwkFV3m0RDzT2BSUezL8Ky78XNk+XPqSB2biT70C", nBCrlf)
oSb:AppendLine("MQDCase1oaPY4AxCmjB+rEB1ir+QS8mrtF+iCSqHVv1aIxT6abQL57BZSdvwIm/T", nBCrlf)
oSb:AppendLine("T8o=", nBCrlf)
oSb:AppendLine("-----END CERTIFICATE-----", nBCrlf)
oSb:AppendLine("-----BEGIN CERTIFICATE-----", nBCrlf)
oSb:AppendLine("MIICljCCAhugAwIBAgIETUHhezAKBggqhkjOPQQDAzBtMQswCQYDVQQGEwJVUzEW", nBCrlf)
oSb:AppendLine("MBQGA1UEChMNRW50cnVzdCwgSW5jLjEfMB0GA1UECxMWRm9yIFRlc3QgUHVycG9z", nBCrlf)
oSb:AppendLine("ZXMgT25seTElMCMGA1UEAxMcRW50cnVzdCBFQ0MgRGVtb25zdHJhdGlvbiBDQTAe", nBCrlf)
oSb:AppendLine("Fw0xMTAxMjcyMDQ5NTRaFw0zNjAxMjcyMTE5NTRaMG0xCzAJBgNVBAYTAlVTMRYw", nBCrlf)
oSb:AppendLine("FAYDVQQKEw1FbnRydXN0LCBJbmMuMR8wHQYDVQQLExZGb3IgVGVzdCBQdXJwb3Nl", nBCrlf)
oSb:AppendLine("cyBPbmx5MSUwIwYDVQQDExxFbnRydXN0IEVDQyBEZW1vbnN0cmF0aW9uIENBMHYw", nBCrlf)
oSb:AppendLine("EAYHKoZIzj0CAQYFK4EEACIDYgAEhCWBpuJuzvRtQyibkcbCj7EkcwAqS2EqRQ/Q", nBCrlf)
oSb:AppendLine("ntroTdRM2SssEN4TruTxtwcY/7lR64L6Tfjz3+ujrfjNFss3EWVpUlbOJ+xHC3xH", nBCrlf)
oSb:AppendLine("PteNyAGZtHbZO3tVuhP6yX6dFqCCo4GLMIGIMCsGA1UdEAQkMCKADzIwMTEwMTI3", nBCrlf)
oSb:AppendLine("MjA0OTU0WoEPMjAzNjAxMjcyMTE5NTRaMAsGA1UdDwQEAwIBBjAfBgNVHSMEGDAW", nBCrlf)
oSb:AppendLine("gBQkBUvhZIIa+AnM+3h5Ifpw5pMy6jAdBgNVHQ4EFgQUJAVL4WSCGvgJzPt4eSH6", nBCrlf)
oSb:AppendLine("cOaTMuowDAYDVR0TBAUwAwEB/zAKBggqhkjOPQQDAwNpADBmAjEAyAhA70OIb6lb", nBCrlf)
oSb:AppendLine("fN6kOTQloHyCLmihNK+PT5wOuaMR//KSQP2c/H18YhDYnlwMxF9fAjEA0URaJOXM", nBCrlf)
oSb:AppendLine("F0qwdvS2rm7N5PWMLc/4BbeOZyZ94XJiG5u96iTgp6N9JI0MMmCQE87N", nBCrlf)
oSb:AppendLine("-----END CERTIFICATE-----", nBCrlf)

oPem := CreateObject("Chilkat.Pem")
nSuccess := oPem:LoadPem(oSb:GetAsString(), "secret123")
IF (nSuccess == 0)
    ? oPem:LastErrorText
    oSb:destroy()
    oPem:destroy()
    RETURN
ENDIF

//  Get the private key and examine it in JSON Web Key form (JWK)

oPrivKey := CreateObject("Chilkat.PrivateKey")
nSuccess := oPem:PrivateKeyAt(0, oPrivKey)
IF (nSuccess == 0)
    ? oPem:LastErrorText
    oSb:destroy()
    oPem:destroy()
    oPrivKey:destroy()
    RETURN
ENDIF

oJson := CreateObject("Chilkat.JsonObject")
oJson:Load(oPrivKey:GetJwk())
oJson:EmitCompact := 0
? oJson:Emit()

//  JWK output:

//  	{ 
//  	  "kty": "EC",
//  	  "crv": "P-384",
//  	  "x": "uB62JGMJKXnp1PNsOOIYKGhrzfLev3O-UuthL6UzEqNNDTd8dEYMUQP_DTS3qk98",
//  	  "y": "gyQEFxdmZUsPF0fFokkZZ1cV6z7QD3MsPvSjrBzB0GUB3r8CLnDK_F4pF2Q995hr",
//  	  "d": "ugTy2ZpuQqv1uQyLSgz1SPRvngzrd5vLyzU2ICaJd25zZRIxxlNR-uFo9UWC6llt"
//  	}

//  Now get 1st certificate and examine in XML format:

oCert := CreateObject("Chilkat.Cert")
nSuccess := oPem:CertAt(0, oCert)
IF (nSuccess == 0)
    ? oPem:LastErrorText
    oSb:destroy()
    oPem:destroy()
    oPrivKey:destroy()
    oJson:destroy()
    oCert:destroy()
    RETURN
ENDIF

cCertXml := oCert:ExportCertXml()
? cCertXml

//  XML output:

//  <?xml version="1.0" encoding="utf-8" ?>
//  <sequence>
//      <sequence>
//          <contextSpecific tag="0" constructed="1">
//              <int>02</int>
//          </contextSpecific>
//          <int>4D42D2F3</int>
//          <sequence>
//              <oid>1.2.840.10045.4.3.3</oid>
//          </sequence>
//          <sequence>
//              <set>
//                  <sequence>
//                      <oid>2.5.4.6</oid>
//                      <printable>US</printable>
//                  </sequence>
//              </set>
//              <set>
//                  <sequence>
//                      <oid>2.5.4.10</oid>
//                      <printable>Entrust, Inc.</printable>
//                  </sequence>
//              </set>
//              <set>
//                  <sequence>
//                      <oid>2.5.4.11</oid>
//                      <printable>For Test Purposes Only</printable>
//                  </sequence>
//              </set>
//              <set>
//                  <sequence>
//                      <oid>2.5.4.3</oid>
//                      <printable>Entrust ECC Demonstration CA</printable>
//                  </sequence>
//              </set>
//          </sequence>
//          <sequence>
//              <utctime>160318123931Z</utctime>
//              <utctime>160517130931Z</utctime>
//          </sequence>
//          <sequence>
//              <set>
//                  <sequence>
//                      <oid>2.5.4.11</oid>
//                      <printable>For Test Purposes Only</printable>
//                  </sequence>
//              </set>
//              <set>
//                  <sequence>
//                      <oid>2.5.4.11</oid>
//                      <printable>Persona Not Verified</printable>
//                  </sequence>
//              </set>
//              <set>
//                  <sequence>
//                      <oid>2.5.4.3</oid>
//                      <printable>Chilkat Admin</printable>
//                  </sequence>
//              </set>
//          </sequence>
//          <sequence>
//              <sequence>
//                  <oid>1.2.840.10045.2.1</oid>
//                  <oid>1.3.132.0.34</oid>
//              </sequence>
//              <bits n="776">04B81EB62463092979E9D4F36C38E21828686BCDF2DEBF73BE52EB612FA53312A34D0D377C74460C5103FF0D34B7AA4F7C832404171766654B0F1747C5A24919675715EB3ED00F732C3EF4A3AC1CC1D06501DEBF022E70CAFC5E2917643DF7986B</bits>
//          </sequence>
//          <contextSpecific tag="3" constructed="1">
//              <sequence>
//                  <sequence>
//                      <oid>2.5.29.15</oid>
//                      <bool>1</bool>
//                      <octets>AwIDiA==</octets>
//                  </sequence>
//                  <sequence>
//                      <oid>2.5.29.37</oid>
//                      <octets>MBQGCCsGAQUFBwMCBggrBgEFBQcDBA==</octets>
//                  </sequence>
//                  <sequence>
//                      <oid>2.5.29.31</oid>
//                      <octets>MC4wLKAqoCiGJmh0dHA6Ly9jcmwuZW50cnVzdC5jb20vQ1JML2VjY2RlbW8uY3Js</octets>
//                  </sequence>
//                  <sequence>
//                      <oid>2.5.29.17</oid>
//                      <octets>MBeBFWFkbWluQGNoaWxrYXRzb2Z0LmNvbQ==</octets>
//                  </sequence>
//                  <sequence>
//                      <oid>2.5.29.35</oid>
//                      <octets>MBaAFCQFS+Fkghr4Ccz7eHkh+nDmkzLq</octets>
//                  </sequence>
//                  <sequence>
//                      <oid>2.5.29.14</oid>
//                      <octets>BBTB82fmvrdG2iX5uS/agVW3L4Disg==</octets>
//                  </sequence>
//                  <sequence>
//                      <oid>2.5.29.19</oid>
//                      <octets>MAA=</octets>
//                  </sequence>
//              </sequence>
//          </contextSpecific>
//      </sequence>
//      <sequence>
//          <oid>1.2.840.10045.4.3.3</oid>
//      </sequence>
//      <bits n="832">30660231008720B821329AD6A183C4A7D98213EB69544EEF6309055779B4443CD3D814947B32FC2B2EFC5CD93E5CFA920766E24FBD023100C26AC7B5A1A3D8E00C429A307EAC40758ABF904BC9ABB45FA2092A8756FD5A2314FA69B40BE7B05949DBF0226FD34FCA</bits>
//  </sequence>
//  
//  
//

oSb:destroy()
oPem:destroy()
oPrivKey:destroy()
oJson:destroy()
oCert:destroy()