Configure a Socket for Server-Side TLS

See more Socket/SSL/TLS Examples

Demonstrates Socket.InitSslServer, which configures the object for server-side TLS using a server certificate that has access to its private key, then listens for and accepts a TLS connection.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

var
success: Boolean;
socket: HCkSocket;
pfxPassword: PWideChar;
cert: HCkCert;
connectedSock: HCkSocket;

begin
success := False;

socket := CkSocket_Create();

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
pfxPassword := 'myPfxPassword';
cert := CkCert_Create();
success := CkCert_LoadPfxFile(cert,'qa_data/server.pfx',pfxPassword);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(cert));
    Exit;
  end;

//  Configure this object for server-side TLS using the certificate.  The certificate must have
//  access to its corresponding private key.
success := CkSocket_InitSslServer(socket,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkSocket__lastErrorText(socket));
    Exit;
  end;

//  Listen for connections.  Accepted connections will use TLS.
success := CkSocket_BindAndListen(socket,5000,25);
if (success = False) then
  begin
    Memo1.Lines.Add(CkSocket__lastErrorText(socket));
    Exit;
  end;

connectedSock := CkSocket_Create();
success := CkSocket_AcceptNext(socket,20000,connectedSock);
if (success = False) then
  begin
    Memo1.Lines.Add(CkSocket__lastErrorText(socket));
    Exit;
  end;
Memo1.Lines.Add('Accepted a TLS client connection.');

CkSocket_Dispose(socket);
CkCert_Dispose(cert);
CkSocket_Dispose(connectedSock);