Configure a Socket for Server-Side TLS

See more Socket/SSL/TLS Examples

Demonstrates Socket.InitSslServer, which configures the object for server-side TLS using a server certificate that has access to its private key, then listens for and accepts a TLS connection.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

#include <C_CkSocket.h>
#include <C_CkCert.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkSocket socket;
    const char *pfxPassword;
    HCkCert cert;
    HCkSocket connectedSock;

    success = FALSE;

    socket = CkSocket_Create();

    //  The file path is relative to the application's current working directory.  An absolute path
    //  may also be used.  Supply the path appropriate to your own environment.
    //  The PFX password should come from a secure source rather than being hard-coded.
    pfxPassword = "myPfxPassword";
    cert = CkCert_Create();
    success = CkCert_LoadPfxFile(cert,"qa_data/server.pfx",pfxPassword);
    if (success == FALSE) {
        printf("%s\n",CkCert_lastErrorText(cert));
        CkSocket_Dispose(socket);
        CkCert_Dispose(cert);
        return;
    }

    //  Configure this object for server-side TLS using the certificate.  The certificate must have
    //  access to its corresponding private key.
    success = CkSocket_InitSslServer(socket,cert);
    if (success == FALSE) {
        printf("%s\n",CkSocket_lastErrorText(socket));
        CkSocket_Dispose(socket);
        CkCert_Dispose(cert);
        return;
    }

    //  Listen for connections.  Accepted connections will use TLS.
    success = CkSocket_BindAndListen(socket,5000,25);
    if (success == FALSE) {
        printf("%s\n",CkSocket_lastErrorText(socket));
        CkSocket_Dispose(socket);
        CkCert_Dispose(cert);
        return;
    }

    connectedSock = CkSocket_Create();
    success = CkSocket_AcceptNext(socket,20000,connectedSock);
    if (success == FALSE) {
        printf("%s\n",CkSocket_lastErrorText(socket));
        CkSocket_Dispose(socket);
        CkCert_Dispose(cert);
        CkSocket_Dispose(connectedSock);
        return;
    }

    printf("Accepted a TLS client connection.\n");


    CkSocket_Dispose(socket);
    CkCert_Dispose(cert);
    CkSocket_Dispose(connectedSock);

    }