XmlCertVault Chilkat2 Perl Reference Documentation

Chilkat2::XmlCertVault

Current Version: 11.7.0

Markdown version of this page for AI tools (v 11.7.0) · all AI docs

Chilkat.XmlCertVault

Collect certificates, certificate chains, PEM data, and PFX private keys in an XML vault.

Chilkat.XmlCertVault stores certificates and private-key material in a portable XML-based certificate vault. It can add individual certificates, certificate chains, DER or encoded certificates, PEM files, certificate strings, and PFX/PKCS12 data from files, memory, encoded text, or existing Chilkat objects. The vault can then be exported as XML, loaded from XML, or saved to an XML file for later reuse by other Chilkat certificate and TLS workflows.

Add certificates

Add certificates from Cert objects, files, PEM strings, binary DER bytes, or encoded data such as Base64 or hex.

Add certificate chains

Import an entire CertChain when related issuer and intermediate certificates should be kept together in the vault.

Add PEM content

Load PEM files containing one or more certificates and/or private keys, including encrypted PEM content when a password is supplied.

Add PFX / PKCS12

Add PFX data from a Pfx object, file, byte array, or encoded string, using the PFX password to import private-key material.

Master password protection

Use MasterPassword to protect access to private keys stored in the vault.

Load and save XML

Export the vault with GetXml, load it with LoadXml or LoadXmlFile, and persist it with SaveXml.

Common pattern: Create an XmlCertVault, set MasterPassword when the vault will contain private keys, add certificates or PFX/PEM material, then save the vault with SaveXml or keep the XML string from GetXml. Later, reload the same vault with LoadXml or LoadXmlFile and provide the same master password before using private keys.
Security note: Certificates are stored unencrypted, but private keys are stored using 256-bit AES encryption. The individual PFX passwords are also stored encrypted with the vault's MasterPassword, which is required to access any private keys contained in the XML vault.

Object Creation

use Chilkat2;

my $xmlCertVault = Chilkat2::XmlCertVault->new;
# or set properties (and RaiseError) at creation:
# my $xmlCertVault = Chilkat2::XmlCertVault->new(VerboseLogging => 1, RaiseError => 1);
my $xmlCertVault = Chilkat2::XmlCertVault->new(Property => $value, ...);

Creates the object. The optional pairs set writable properties (and RaiseError) in order, as if set one by one; an unknown or read-only name croaks. use Chilkat2; loads every class; the Chilkat2/XmlCertVault.pm file holds only this class's documentation (perldoc Chilkat2::XmlCertVault).

Perl frees the object when its last reference goes (undef $xmlCertVault, or the variable going out of scope); there is nothing to close. Objects returned by methods are independent and freed the same way. The class may be subclassed (use parent -norequire, 'Chilkat2::XmlCertVault';): an object is a blessed hash reference whose hash is free for the subclass's own fields.

my $boolVal = $xmlCertVault->RaiseError;
$xmlCertVault->RaiseError($boolVal);

When false (the default), a method that fails returns false (or undef), and the reason is in LastErrorText. When true, it dies with a Chilkat2::Error instead, as DBI does with its RaiseError. Objects returned by a method inherit the value of the object that returned them.

Errors

A Chilkat2::Error stringifies to the failed call's full LastErrorText, and has the methods text, class ('Chilkat2::XmlCertVault'), method (the method name) and object. Methods that look something up and find nothing return undef without dying (each such method says so), methods that answer a question (HasMember, IsUnlocked, ...) return a plain boolean, and property reads and writes never fail for Chilkat reasons.

Misuse always croaks, with your file and line, whatever RaiseError is: a wrong number of arguments, a reference or undef where a string or number is expected, an object of the wrong class, an out-of-range integer, a string containing a NUL character, a wide character in a byte string, or a write to a read-only property.

Strings are Perl character strings in both directions (length, regexes and :encoding layers see characters); binary data (BinData) is a byte string. Unlocking: call Chilkat2::Global->new->UnlockBundle('...') once at startup.

Properties

DebugLogFilePath
# $strVal is a string
my $strVal = $xmlCertVault->DebugLogFilePath;
$xmlCertVault->DebugLogFilePath($strVal);

If set to a file path, this property logs the LastErrorText of each Chilkat method or property call to the specified file. This logging helps identify the context and history of Chilkat calls leading up to any crash or hang, aiding in debugging.

Enabling the VerboseLogging property provides more detailed information. This property is mainly used for debugging rare instances where a Chilkat method call causes a hang or crash, which should generally not happen.

Possible causes of hangs include:

  • A timeout property set to 0, indicating an infinite timeout.
  • A hang occurring within an event callback in the application code.
  • An internal bug in the Chilkat code causing the hang.

More Information and Examples
top
LastErrorHtml
# $strVal is a string (read-only)
my $strVal = $xmlCertVault->LastErrorHtml;

Provides HTML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorText
# $strVal is a string (read-only)
my $strVal = $xmlCertVault->LastErrorText;

Provides plain text information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorXml
# $strVal is a string (read-only)
my $strVal = $xmlCertVault->LastErrorXml;

Provides XML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastMethodSuccess
# $boolVal is a boolean
my $boolVal = $xmlCertVault->LastMethodSuccess;
$xmlCertVault->LastMethodSuccess($boolVal);

Indicates the success or failure of the most recent method call: 1 means success, 0 means failure. This property remains unchanged by property setters or getters. This method is present to address challenges in checking for null or Nothing returns in certain programming languages. Note: This property does not apply to methods that return integer values or to boolean-returning methods where the boolean does not indicate success or failure.

top
MasterPassword
# $strVal is a string
my $strVal = $xmlCertVault->MasterPassword;
$xmlCertVault->MasterPassword($strVal);
Introduced in version 9.5.0.40

The master password for the vault. Certificates are stored unencrypted, but private keys are stored 256-bit AES encrypted using the individual PFX passwords. The PFX passwords are stored 256-bit AES encrypted using the master password. The master password is required to acces any of the private keys stored within the XML vault.

top
VerboseLogging
# $boolVal is a boolean
my $boolVal = $xmlCertVault->VerboseLogging;
$xmlCertVault->VerboseLogging($boolVal);

If set to 1, then the contents of LastErrorText (or LastErrorXml, or LastErrorHtml) may contain more verbose information. The default value is 0. Verbose logging should only be used for debugging. The potentially large quantity of logged information may adversely affect peformance.

top
Version
# $strVal is a string (read-only)
my $strVal = $xmlCertVault->Version;

Version of the component/library, such as "10.1.0"

More Information and Examples
top

Methods

AddCert
# $cert is a Chilkat2::Cert
# $success is true or false
my $success = $xmlCertVault->AddCert($cert);
Introduced in version 9.5.0.40

Adds a certificate to the XML vault.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AddCertChain
# $certChain is a Chilkat2::CertChain
# $success is true or false
my $success = $xmlCertVault->AddCertChain($certChain);
Introduced in version 9.5.0.40

Adds a chain of certificates to the XML vault.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AddCertEncoded
# $encodedBytes is a string
# $encoding is a string
# $success is true or false
my $success = $xmlCertVault->AddCertEncoded($encodedBytes, $encoding);
Introduced in version 9.5.0.40

Adds a certificate to the XML vault where certificate is passed directly from encoded bytes (such as Base64, Hex, etc.). The encoding is indicated by $encoding.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AddCertFile
# $path is a string
# $success is true or false
my $success = $xmlCertVault->AddCertFile($path);
Introduced in version 9.5.0.40

Adds a certificate to the XML vault.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AddCertString
# $certData is a string
# $success is true or false
my $success = $xmlCertVault->AddCertString($certData);
Introduced in version 9.5.0.40

Adds a certificate from any string representation format such as PEM.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AddPemFile
# $path is a string
# $password is a string
# $success is true or false
my $success = $xmlCertVault->AddPemFile($path, $password);
Introduced in version 9.5.0.40

Adds the contents of a PEM file to the XML vault. The PEM file may be encrypted, and it may contain one or more certificates and/or private keys. The password is optional and only required if the PEM file contains encrypted content that requires a password.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AddPfx
# $pfx is a Chilkat2::Pfx
# $success is true or false
my $success = $xmlCertVault->AddPfx($pfx);
Introduced in version 9.5.0.40

Adds a PFX (PKCS12) to the XML vault.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AddPfxEncoded
# $encodedBytes is a string
# $encoding is a string
# $password is a string
# $success is true or false
my $success = $xmlCertVault->AddPfxEncoded($encodedBytes, $encoding, $password);

Adds a PFX to the XML vault where PFX is passed directly from encoded bytes (such as Base64, Hex, etc.). The encoding is indicated by $encoding.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AddPfxFile
# $path is a string
# $password is a string
# $success is true or false
my $success = $xmlCertVault->AddPfxFile($path, $password);
Introduced in version 9.5.0.40

Adds a PFX file to the XML vault.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
GetXml
# $str is a string or undef
my $str = $xmlCertVault->GetXml();
Introduced in version 9.5.0.40

Returns the contents of the cert vault as an XML string.

Returns undef on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
LoadXml
# $xml is a string
# $success is true or false
my $success = $xmlCertVault->LoadXml($xml);
Introduced in version 9.5.0.40

Loads from an XML string.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
LoadXmlFile
# $path is a string
# $success is true or false
my $success = $xmlCertVault->LoadXmlFile($path);
Introduced in version 9.5.0.40

Loads from an XML file.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
SaveXml
# $path is a string
# $success is true or false
my $success = $xmlCertVault->SaveXml($path);
Introduced in version 9.5.0.40

Saves the contents to an XML file.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top