(Xojo Plugin) Get Certificates from .p12 / .pfx

A PKCS12 (.p12 / .pfx) is a container for holding a certificate, its private key, and the certs in the chain of authentication up to and possibly including the root CA cert. A .p12 is not required to contain certain things. It will contain whatever the creator of the .p12 decided to include. It's possible to contain just a private key, just a cert, many certs without private keys, or many certs with many private keys. Usually, a .p12 contains one certificate, its associated private key, and certificates in the chain of authentication.

Chilkat Xojo Plugin Download Xojo Plugin for Windows, Linux, Mac OS X, and ARM, ARM64

Dim pfx As New Chilkat.Pfx

Dim success As Boolean
success = pfx.LoadPfxFile("qa_data/pfx/test.pfx","pfx_password")
If (success = False) Then
    System.DebugLog(pfx.LastErrorText)
    Return
End If

// Iterate over the certs contained in the PFX
Dim numCerts As Int32
numCerts = pfx.NumCerts
Dim i As Int32
i = 0
While i < numCerts
    Dim cert As Chilkat.Cert
    cert = pfx.GetCert(i)

    System.DebugLog("--- " + Str(i) + " ---")
    System.DebugLog(cert.SubjectDN)
    // Is this a root cert, or self-signed?
    System.DebugLog("Root: " + Str(cert.IsRoot))
    System.DebugLog("Self-Signed: " + Str(cert.SelfSigned))

    // If this certificate is not the root (self-signed), then get the issuer.
    // If the issuing certificate is contained in the PFX, then it will be found here..
    If (cert.SelfSigned <> True) Then
        Dim issuer As Chilkat.Cert
        issuer = cert.FindIssuer()
        If (cert.LastMethodSuccess = False) Then
            System.DebugLog("Issuer not found.")
        Else
            System.DebugLog("Issuer: " + issuer.SubjectDN)

        End If

    End If

    i = i + 1
Wend

// Usually, the user certificate is at index 0, its issuer is at index 1, etc. until we get to the root certificate.