(Xojo Plugin) Load Particular CA Certs into a Java KeyStore

Opens a PEM file containing many CA root certificates, and creates a Java keystore containing a subset of the certificates.

Chilkat Xojo Plugin Download Xojo Plugin for Windows, Linux, Mac OS X, and ARM, ARM64

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

Dim jks As New Chilkat.JavaKeyStore

Dim troots As New Chilkat.TrustedRoots

// Load certificates from a file.
Dim success As Boolean
success = troots.LoadCaCertsPem("qa_data/curl_cacert.pem")
If (success <> True) Then
    System.DebugLog(troots.LastErrorText)
    Return
End If

Dim sbDn As New Chilkat.StringBuilder
Dim sbAlias As New Chilkat.StringBuilder
Dim caseSensitive As Boolean
caseSensitive = False

Dim i As Int32
i = 0
Dim numCerts As Int32
numCerts = troots.NumCerts
Dim numAdded As Int32
numAdded = 0
While (i < numCerts)
    Dim cacert As Chilkat.Cert
    cacert = troots.GetCert(i)
    sbDn.Clear 
    success = sbDn.Append(cacert.SubjectDN)
    If (sbDn.Contains("Entrust.net",caseSensitive) = True) Then
        System.DebugLog(cacert.SubjectDN)

        // The alias is an arbitrary unique string for each cert in the JKS.
        sbAlias.Clear 
        success = sbAlias.Append("cacert_")
        success = sbAlias.AppendInt(i + 1)
        success = jks.AddTrustedCert(cacert,sbAlias.GetAsString())
        numAdded = numAdded + 1
    End If

    i = i + 1
Wend

// Verify the number of certs in the JKS equals the number we added.
Dim numJksCerts As Int32
numJksCerts = jks.NumTrustedCerts
System.DebugLog("NumTrustedCerts = " + Str(numJksCerts))
If (numJksCerts <> numAdded) Then
    System.DebugLog("Something is amiss!")
    Return
End If

// Save the JKS.
success = jks.ToFile("myPassword","qa_data/jks/entrust_caCerts.jks")
If (success <> True) Then
    System.DebugLog(jks.LastErrorText)
    Return
End If

System.DebugLog("Success.")

// The output of this program when tested was:

// C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority
// O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
// C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority
// NumTrustedCerts = 3
// Success.