Discuss this help topic in SecureBlackbox Forum

Save certificate storage content to stream

Sometimes, for archival or transfer purpose, you might need to save a snapshot of your certificate storage to a stream. SecureBlackbox certificate storage classes (descendants of TElCustomCertStorage) support several storage formats.

Note that any non-exportable private keys associated with certificates contained in the storage won't be saved. Exportable keys will be exported though, provided that the export format supports storing private keys.

Let's assume you have a certStorage object of any storage type (e.g. TElMemoryCertStorage). You can export its contents in a variety of formats in the following ways:

• certStorage.SaveToStreamPKCS7(pkcs7Stream) saves all certificates in PKCS#7 (.p7b) format. No private keys are exported.
• certStorage.SaveToStreamPEM(pemStream, "password") saves all certificates in PEM format. Private keys are exported where possible and encrypted with 'password' password.
• certStorage.SaveToStreamJKS(jksStream, "password") saves all certificates in JKS (Java) format. Private keys are exported where possible and encrypted with 'password' password.
• certStorage.SaveToStreamPFX(pfxStream, "password") saves all certificates in PKCS12 (PFX) format. Private keys are exported where possible, and both private keys and certificates are encrypted with 'password' password.
• certStorage.SaveToStreamPkiPath(ppathStream) saves all certificates in PkiPath format. No private keys are exported.

For every SaveToStreamXYZ() routine there is a corresponding LoadFromStreamXYZ() method, which you can use to load the serialized contents back.

How To articles about certificate storages

Discuss this help topic in SecureBlackbox Forum