Zig

Convert Cert + Key to PEM and PFX

See more Certificates Examples

This example is based on the following question from a Chilkat customer:

We receive 2 files :

    MyCertificate.p7b
    MyCertificate-privatekey.pkey

We have to transform these certificate like this:

First convert it to PEM like this:

openssl pkcs7 -in MyCertificate.p7b -inform DER -out MyCertificate.pem -print_certs

Now we get MyCertificate.pem

Last step, we need to convert it to pfx file:

openssl pkcs12 -export -inkey moncertificat-privatekey.pkey  -in  moncertificat.pem -out moncertificat.pfx

Is there a way to make all these steps with Chilkat ?

I will be nice to include this directly in our software instead of askig the user to do it manualy.

Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    const cert = try chilkat.Cert.init();
    defer cert.deinit();
    const priv_key = try chilkat.PrivateKey.init();
    defer priv_key.deinit();

    // Load any type of certificate (.cer, .p7b, .pem, etc.) by calling LoadFromFile.
    cert.loadFromFile("qa_data/certs/sample_cert_a.cer") catch {
        std.debug.print("{s}\n", .{try cert.getLastErrorText(alloc)});
        return;
    };

    // Load the private key.
    // (The various privKey methods that load from a file will automatically detect
    // the format.  It doesn't actually matter if you try to load a non-PKCS8 format private key
    // by calling LoadPkcs8EncryptedFile -- internally Chilkat will detect the format and will load
    // based on what it finds.)
    priv_key.loadPkcs8EncryptedFile("qa_data/certs/sample_key_a.pkcs8", "password") catch {
        std.debug.print("{s}\n", .{try priv_key.getLastErrorText(alloc)});
        return;
    };

    // Write the cert as PEM.
    try cert.exportCertPemFile("qa_output/cert.pem");

    // Or get the PEM string directly...
    std.debug.print("{s}\n", .{try cert.exportCertPem(alloc)});

    // Associate the private key with the cert object.
    cert.setPrivateKey(priv_key) catch {
        std.debug.print("{s}\n", .{try cert.getLastErrorText(alloc)});
        return;
    };

    // Write the cert + private key to a .pfx file.
    cert.exportToPfxFile("qa_data/myPfx.pfx", "password", true) catch {
        std.debug.print("{s}\n", .{try cert.getLastErrorText(alloc)});
        return;
    };

    std.debug.print("Success.\n", .{});
}