(JavaScript) Require SSL Server Certificate Domain Match

See more HTTP Examples

Note

This example is intended for running within a Chilkat.Js embedded JavaScript engine. All Chilkat JavaScript examples require Chilkat v11.4.0 or greater.

var success = false;

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

var http = new CkHttp();

// Call SetSslCertRequirement to require that the SSL server certificate's domain
// matches only the domain we are intending to communicate with.

// In this example we will test with the URL https://wrong.host.badssl.com/
// which intentionally has an SSL certificate that does not match "wrong.host.badssl.com"

http.SetSslCertRequirement("SAN","wrong.host.badssl.com");

// Also validate the server cert..
http.RequireSslCertVerify = true;

// Try sending the request.  It should fail within the SSL/TLS handshake
// because the server's certificate does not match the domain "wrong.host.badssl.com"
var html = http.QuickGetStr("https://wrong.host.badssl.com/");
if (http.LastMethodSuccess == false) {
    console.log(http.LastErrorText);
}
else {
    console.log("Unexpected success.");
}