Get a Received Client Certificate (Server Side)

See more Socket/SSL/TLS Examples

Demonstrates Socket.GetRcvdClientCert, which copies a client certificate presented during the TLS handshake of an accepted server-side connection into a Cert object.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    boolean success = false;

    CkSocket socket = new CkSocket();

    //  The file path is relative to the application's current working directory.  An absolute path
    //  may also be used.  Supply the path appropriate to your own environment.
    //  The PFX password should come from a secure source rather than being hard-coded.
    String pfxPassword = "myPfxPassword";
    CkCert cert = new CkCert();
    success = cert.LoadPfxFile("qa_data/server.pfx",pfxPassword);
    if (success == false) {
        System.out.println(cert.lastErrorText());
        return;
        }

    success = socket.InitSslServer(cert);
    if (success == false) {
        System.out.println(socket.lastErrorText());
        return;
        }

    success = socket.BindAndListen(5000,25);
    if (success == false) {
        System.out.println(socket.lastErrorText());
        return;
        }

    //  Accept a client connection.  The accepted connection carries any client certificate presented
    //  during the TLS handshake.
    CkSocket connectedSock = new CkSocket();
    success = socket.AcceptNext(20000,connectedSock);
    if (success == false) {
        System.out.println(socket.lastErrorText());
        return;
        }

    //  Copy each received client certificate and inspect it.
    int numClientCerts = connectedSock.get_NumReceivedClientCerts();
    CkCert clientCert = new CkCert();
    int i;
    for (i = 0; i <= numClientCerts - 1; i++) {
        success = connectedSock.GetRcvdClientCert(i,clientCert);
        if (success == false) {
            System.out.println(connectedSock.lastErrorText());
            return;
            }

        System.out.println("Client certificate subject: " + clientCert.subjectCN());
        }
  }
}